Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4314c21-aa21-34e1-a683-ea52efeec306.roa
File:                     f4314c21-aa21-34e1-a683-ea52efeec306.roa (raw, json)
Hash identifier:          CaFyNqgBcWQQztuAlsFA4c1lsG2TFXeyRs+vHOz6BEY=
Subject key identifier:   BA:1A:7F:61:AA:12:58:9B:61:0D:A7:AD:6C:5E:65:F9:36:8F:85:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F3910D1994EB738AB140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4314c21-aa21-34e1-a683-ea52efeec306.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.250.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f3:91:0d:19:94:eb:73:8a:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=b6d35e02-892c-4582-8b02-eb07ddc5f1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:ce:cb:b5:39:c7:65:c8:02:21:66:7f:6b:
                    dc:85:a3:05:9b:20:bc:e5:14:76:b2:b1:9c:68:67:
                    85:64:52:64:9d:93:5f:0b:1c:45:ea:3d:b4:09:84:
                    ac:d1:a3:03:db:88:4c:6a:ae:2b:6a:52:bd:3d:8a:
                    cc:94:6c:0c:c6:4b:bc:e5:b0:6c:56:8a:88:68:a0:
                    14:ef:cf:12:f1:97:ad:d0:07:63:a4:c4:5e:5e:1c:
                    62:5d:6e:57:d4:a0:97:78:21:78:97:8f:c6:14:32:
                    5b:13:ff:7a:c1:68:49:64:fe:e5:32:2a:7a:54:2e:
                    61:e3:95:ee:63:df:eb:e6:4b:2e:c9:d8:16:7b:fd:
                    ac:d4:c6:e3:45:81:e3:11:f5:af:f5:c8:b1:cf:25:
                    84:b7:ff:9c:e9:14:84:ed:07:31:c8:94:90:4f:2e:
                    d6:a4:2b:12:40:cf:8c:7c:f6:c9:d6:c0:7d:80:77:
                    33:63:b3:d9:53:a6:cb:0d:77:b9:38:06:fc:e0:6b:
                    5b:97:cd:fd:0a:09:48:0e:84:55:c9:d7:37:ec:9e:
                    33:11:f8:e4:dd:14:e5:35:83:b6:5b:65:3d:aa:38:
                    19:de:c6:9c:31:b6:ee:c7:bf:f0:40:09:6d:a8:a0:
                    6a:e8:59:e4:07:7d:17:67:1b:ed:df:9b:1e:a4:d5:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1A:7F:61:AA:12:58:9B:61:0D:A7:AD:6C:5E:65:F9:36:8F:85:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4314c21-aa21-34e1-a683-ea52efeec306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ba:90:98:dc:4c:bc:13:bd:d8:5f:93:ea:69:6a:75:51:3e:
         03:de:e5:db:a9:f0:d3:6d:74:94:c3:29:60:e8:a7:2d:54:5e:
         31:76:21:c7:e6:a8:b2:37:14:0e:8d:9d:7c:55:26:26:01:32:
         be:f4:1c:17:de:08:9b:d9:64:a8:3f:0b:6f:c7:d2:68:b1:a7:
         d6:22:56:b9:f7:9d:60:d6:1b:5c:91:76:3f:e0:95:c3:d2:dc:
         31:d4:2d:00:43:1b:79:c3:f1:cb:de:d4:cf:5f:92:e0:b6:94:
         5a:7c:a7:83:0e:61:ac:63:44:5d:18:1b:47:be:9f:a2:53:da:
         38:96:22:08:53:f1:27:fb:8b:62:2c:77:bb:09:6d:7e:b0:5a:
         ae:f0:0c:b9:a1:9c:cd:36:36:84:7c:d5:c9:bc:f3:da:05:d5:
         32:fe:7c:39:e4:16:e6:9a:c3:25:c0:9a:8f:2c:e4:9e:62:c2:
         44:f4:98:87:61:61:1c:0e:30:ef:47:3d:c4:e2:8e:2f:72:c5:
         48:c3:ae:8f:5f:eb:57:62:c7:8a:02:53:4f:99:44:c9:18:96:
         b6:13:f8:a3:a8:02:fd:f0:fd:38:0f:26:57:13:6e:07:ae:99:
         29:c1:22:81:87:0b:9d:f2:cf:df:34:8e:e7:4f:94:f0:ac:f5:
         51:46:82:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfORDRmU63OKsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
YjZkMzVlMDItODkyYy00NTgyLThiMDItZWIwN2RkYzVmMWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIrOy7U5x2XIAiFmf2vchaMFmyC85RR2srGc
aGeFZFJknZNfCxxF6j20CYSs0aMD24hMaq4ralK9PYrMlGwMxku85bBsVoqIaKAU
788S8Zet0AdjpMReXhxiXW5X1KCXeCF4l4/GFDJbE/96wWhJZP7lMip6VC5h45Xu
Y9/r5ksuydgWe/2s1MbjRYHjEfWv9cixzyWEt/+c6RSE7QcxyJSQTy7WpCsSQM+M
fPbJ1sB9gHczY7PZU6bLDXe5OAb84Gtbl839CglIDoRVydc37J4zEfjk3RTlNYO2
W2U9qjgZ3sacMbbux7/wQAltqKBq6FnkB30XZxvt35sepNVv+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoaf2GqElibYQ2nrWxeZfk2j4V+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjQzMTRjMjEtYWEyMS0z
NGUxLWE2ODMtZWE1MmVmZWVjMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrvoMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKS6kJjcTLwTvdhfk+ppanVRPgPe5dup8NNtdJTDKWDopy1UXjF2Icfm
qLI3FA6NnXxVJiYBMr70HBfeCJvZZKg/C2/H0mixp9YiVrn3nWDWG1yRdj/glcPS
3DHULQBDG3nD8cve1M9fkuC2lFp8p4MOYaxjRF0YG0e+n6JT2jiWIghT8Sf7i2Is
d7sJbX6wWq7wDLmhnM02NoR81cm889oF1TL+fDnkFuaawyXAmo8s5J5iwkT0mIdh
YRwOMO9HPcTiji9yxUjDro9f61dix4oCU0+ZRMkYlrYT+KOoAv3w/TgPJlcTbgeu
mSnBIoGHC53yz980judPlPCs9VFGgjQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:01 2024 by rpki-client on console-fra.rpki-client.org