Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e79a91f3-c30a-38fa-8e05-c4c710efe192.roa
File:                     e79a91f3-c30a-38fa-8e05-c4c710efe192.roa (raw, json)
Hash identifier:          Ipr9LzoOZevPWu7kMb6kcRTaBElkuagflmGRUhq2pU8=
Subject key identifier:   FF:82:DA:1A:E2:13:B8:EE:4C:2D:DF:85:C6:3C:C1:36:5B:A0:44:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC11B11CA8C8D78C89A5200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e79a91f3-c30a-38fa-8e05-c4c710efe192.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.97.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:1b:11:ca:8c:8d:78:c8:9a:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=18583b70-9942-4513-8c10-58ec12aac8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:16:4d:ff:b4:52:31:f6:d0:bb:e3:e0:a9:
                    49:7c:c0:57:0e:df:5c:57:9c:74:49:41:c2:2d:be:
                    e2:79:39:ab:e2:e1:99:11:e9:19:ef:6d:9d:11:97:
                    91:18:fb:39:37:12:78:71:6e:2e:a1:a8:ad:33:f0:
                    c9:7c:e3:1f:1e:b6:52:9d:23:72:bc:80:f4:25:ee:
                    b4:b3:40:74:22:c0:d4:30:0e:06:cf:ea:5a:df:35:
                    ed:2c:f4:3b:6c:19:af:26:3d:6c:7f:6d:0b:c4:ad:
                    8e:a9:86:23:91:23:91:b0:22:34:e8:21:d6:cb:a7:
                    6d:10:a6:d3:75:23:c6:f1:0b:d0:11:c7:8d:d3:22:
                    e7:c2:db:ef:9b:3f:74:f8:f5:fe:8d:33:b1:f1:88:
                    ed:b2:5c:64:62:85:7b:51:7f:3b:aa:5c:c4:ad:9f:
                    9f:e3:26:34:1c:9a:7a:71:0c:bc:1b:cf:74:af:12:
                    e6:91:55:de:cd:ac:59:25:85:96:ad:af:59:56:95:
                    d1:6b:66:49:cb:cc:ec:15:ce:43:6c:2e:b3:3b:89:
                    31:62:89:3b:43:93:ab:61:a7:0b:85:b5:ba:47:f4:
                    86:f1:84:f2:15:51:4a:77:32:5a:00:63:d4:95:cc:
                    0b:9a:6d:7b:db:b4:03:ad:44:24:df:f7:ea:ce:77:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:82:DA:1A:E2:13:B8:EE:4C:2D:DF:85:C6:3C:C1:36:5B:A0:44:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e79a91f3-c30a-38fa-8e05-c4c710efe192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:95:10:f2:6c:e9:44:4b:a9:06:a7:01:4f:4e:77:19:9f:8d:
         a7:4d:dd:9d:e3:98:6d:69:1f:c2:d7:03:59:a6:b7:aa:14:f1:
         99:b5:e7:fd:15:e2:3c:6c:f3:dd:b9:1c:29:11:a2:77:c4:e3:
         5e:82:d0:2d:13:13:3b:f6:e8:5c:6c:ad:0a:15:39:92:47:76:
         42:5a:ed:04:79:3b:c4:e5:41:49:ff:df:fc:84:b5:1d:81:61:
         a2:b2:20:c5:69:56:04:01:c3:7f:46:05:24:47:cf:fa:7c:d1:
         49:72:37:e1:fc:6d:c9:8c:33:6b:c9:13:ce:c5:72:8f:29:86:
         e4:37:64:51:be:ab:3e:b4:a6:d6:4d:14:fb:bc:f6:9c:92:25:
         fd:57:17:d2:23:83:c0:9d:72:e3:c2:5d:4f:38:63:67:53:8a:
         d8:f8:65:f6:41:01:92:04:05:94:9b:83:72:74:64:83:97:5e:
         3b:f3:c8:aa:16:9f:44:db:02:79:19:58:c5:21:71:b0:27:6d:
         19:c9:d5:e0:6d:f4:00:0c:02:4d:67:9a:30:90:82:a8:3a:5c:
         8e:f1:6d:01:c4:0e:6f:1e:ed:d4:82:ea:44:a8:f7:7c:f7:44:
         00:26:96:6f:5f:41:8b:35:ff:25:e9:3c:ea:2c:e4:75:89:0e:
         42:10:da:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wRsRyoyNeMiaUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk
MTg1ODNiNzAtOTk0Mi00NTEzLThjMTAtNThlYzEyYWFjOGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrAWTf+0UjH20Lvj4KlJfMBXDt9cV5x0SUHC
Lb7ieTmr4uGZEekZ722dEZeRGPs5NxJ4cW4uoaitM/DJfOMfHrZSnSNyvID0Je60
s0B0IsDUMA4Gz+pa3zXtLPQ7bBmvJj1sf20LxK2OqYYjkSORsCI06CHWy6dtEKbT
dSPG8QvQEceN0yLnwtvvmz90+PX+jTOx8YjtslxkYoV7UX87qlzErZ+f4yY0HJp6
cQy8G890rxLmkVXezaxZJYWWra9ZVpXRa2ZJy8zsFc5DbC6zO4kxYok7Q5OrYacL
hbW6R/SG8YTyFVFKdzJaAGPUlcwLmm1727QDrUQk3/fqzncrrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+C2hriE7juTC3fhcY8wTZboETrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTc5YTkxZjMtYzMwYS0z
OGZhLThlMDUtYzRjNzEwZWZlMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWVEPJs6URLqQanAU9OdxmfjadN3Z3jmG1pH8LXA1mmt6oU8Zm15/0V
4jxs8925HCkRonfE416C0C0TEzv26FxsrQoVOZJHdkJa7QR5O8TlQUn/3/yEtR2B
YaKyIMVpVgQBw39GBSRHz/p80UlyN+H8bcmMM2vJE87Fco8phuQ3ZFG+qz60ptZN
FPu89pySJf1XF9Ijg8CdcuPCXU84Y2dTitj4ZfZBAZIEBZSbg3J0ZIOXXjvzyKoW
n0TbAnkZWMUhcbAnbRnJ1eBt9AAMAk1nmjCQgqg6XI7xbQHEDm8e7dSC6kSo93z3
RAAmlm9fQYs1/yXpPOos5HWJDkIQ2mQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:59 2024 by rpki-client on console-fra.rpki-client.org