Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa
File:                     fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa (raw, json)
Hash identifier:          QTYogpYGoTeF/d+85M2o4Y2wUCYnIts8MOZvAejiLEk=
Subject key identifier:   FA:32:A3:CC:45:42:7C:DA:AE:BF:DC:3D:BC:98:47:0B:C1:1E:AF:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D768B696976398139C17D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     0
IP address blocks:        198.133.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:8b:69:69:76:39:81:39:c1:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=7c24e6f0-4fcc-4f03-b358-bfe270f9c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e1:b7:18:3c:50:69:09:2f:7f:a7:ec:13:0e:
                    dd:96:f6:37:53:7e:43:6f:16:dc:ea:77:58:df:f8:
                    a5:9b:5a:4b:c7:3b:dc:0f:1b:42:3b:90:da:c8:cd:
                    9b:29:f0:27:29:4e:fa:f8:9c:f9:af:f8:62:94:38:
                    50:c9:4f:7f:d8:93:44:e1:8c:cb:0c:58:80:28:e0:
                    19:8c:cd:47:fa:e3:d4:3b:9b:5a:da:da:db:ed:24:
                    c7:3e:ad:de:92:3a:bf:35:c5:ea:54:b3:1e:3c:20:
                    71:db:24:70:cf:f7:88:b1:72:b2:00:52:bc:fd:9a:
                    d8:3e:70:77:d8:5c:c0:04:26:9e:8e:04:7f:03:4e:
                    a0:74:36:8c:4f:05:7e:f0:c8:47:02:49:92:1e:be:
                    10:10:a5:93:49:87:00:69:9a:a7:27:08:80:c6:3d:
                    49:5c:65:95:98:e8:47:ba:eb:99:26:b7:8b:37:78:
                    e0:33:99:5d:75:36:57:17:27:e8:f3:eb:89:eb:fe:
                    32:90:7d:d0:f0:40:f0:b5:b1:19:0b:c7:d7:ac:e1:
                    cf:86:4c:77:29:f3:1b:09:78:59:e7:73:1e:fc:19:
                    9a:94:f7:c0:d8:45:4b:ea:da:d3:b7:f4:c3:8c:c6:
                    1d:35:bb:92:b4:cc:70:4b:53:39:88:a2:24:cd:e8:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:A3:CC:45:42:7C:DA:AE:BF:DC:3D:BC:98:47:0B:C1:1E:AF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:96:a0:aa:67:19:d8:9a:ee:18:a1:7d:2c:36:31:23:77:
         ff:a0:e0:70:bf:a3:ab:cd:dd:36:84:89:3b:61:5e:e0:72:64:
         4c:9b:ad:99:0e:f7:34:65:5d:f7:6a:fd:95:65:e8:e2:60:2a:
         70:a5:3d:12:86:df:42:f5:bc:51:2c:c7:8b:e4:a0:78:8f:4f:
         54:d9:3e:3c:b7:64:52:db:35:ef:28:c1:68:7e:64:56:27:ff:
         e6:58:7d:d2:7a:95:65:f6:e8:64:e3:27:a9:a3:f1:aa:b2:35:
         93:2a:b9:b5:dc:1e:fb:46:26:7d:8f:f3:4b:85:38:02:4b:dd:
         0f:82:a0:27:33:32:cd:54:d4:1a:47:d9:de:83:85:13:66:21:
         c0:db:58:53:9f:a1:e0:28:3e:9d:76:2b:a2:1f:e0:74:74:88:
         26:81:10:9e:04:f3:86:16:cd:c2:47:8e:be:c7:73:51:e0:c2:
         8c:36:5c:1a:2c:8d:4b:47:d0:96:ab:91:1c:61:cd:f5:9e:a8:
         72:c3:66:90:cf:58:c4:d8:c0:c1:1a:f9:25:ef:ab:d4:58:8d:
         25:6d:08:50:bb:97:4c:1b:09:c0:b5:21:cb:f1:df:ea:83:4c:
         ad:16:c6:de:40:7f:20:2b:74:77:33:a0:dc:bb:e9:ec:70:2b:
         26:22:c3:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddotpaXY5gTnBfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
N2MyNGU2ZjAtNGZjYy00ZjAzLWIzNTgtYmZlMjcwZjljNTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeG3GDxQaQkvf6fsEw7dlvY3U35Dbxbc6ndY
3/ilm1pLxzvcDxtCO5DayM2bKfAnKU76+Jz5r/hilDhQyU9/2JNE4YzLDFiAKOAZ
jM1H+uPUO5ta2trb7STHPq3ekjq/NcXqVLMePCBx2yRwz/eIsXKyAFK8/ZrYPnB3
2FzABCaejgR/A06gdDaMTwV+8MhHAkmSHr4QEKWTSYcAaZqnJwiAxj1JXGWVmOhH
uuuZJreLN3jgM5lddTZXFyfo8+uJ6/4ykH3Q8EDwtbEZC8fXrOHPhkx3KfMbCXhZ
53Me/BmalPfA2EVL6trTt/TDjMYdNbuStMxwS1M5iKIkzegFLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPoyo8xFQnzarr/cPbyYRwvBHq/6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmE0ZGM4ZDAtMmQwOC0z
NmY4LWFlNDgtNzAyYTJkOTJiYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxoVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7tlqCqZxnYmu4YoX0sNjEjd/+g4HC/o6vN3TaEiTthXuByZEybrZkO
9zRlXfdq/ZVl6OJgKnClPRKG30L1vFEsx4vkoHiPT1TZPjy3ZFLbNe8owWh+ZFYn
/+ZYfdJ6lWX26GTjJ6mj8aqyNZMqubXcHvtGJn2P80uFOAJL3Q+CoCczMs1U1BpH
2d6DhRNmIcDbWFOfoeAoPp12K6If4HR0iCaBEJ4E84YWzcJHjr7Hc1Hgwow2XBos
jUtH0JarkRxhzfWeqHLDZpDPWMTYwMEa+SXvq9RYjSVtCFC7l0wbCcC1Icvx3+qD
TK0Wxt5AfyArdHczoNy76exwKyYiw8U=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:33 2024 by rpki-client on console-fra.rpki-client.org