Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb3ea5d2-9d52-3d2c-9769-1f37a8533cc8.roa
File:                     fb3ea5d2-9d52-3d2c-9769-1f37a8533cc8.roa (raw, json)
Hash identifier:          0UdwWXVFV6Z4xAjwW+AVi2poRn9LDsvEKT/bMVzsPpg=
Subject key identifier:   27:AE:0C:68:CE:73:DF:19:36:27:95:ED:32:77:DE:A8:EC:B5:43:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D63B8850A91F4F6A65A260
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb3ea5d2-9d52-3d2c-9769-1f37a8533cc8.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.150.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:3b:88:50:a9:1f:4f:6a:65:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=6db1391c-9a68-4922-9779-9c8a7ed0b72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:07:ae:ba:6f:1b:d8:f8:c7:0c:7a:97:13:
                    c7:3b:a9:cf:4a:2d:18:11:1a:97:72:3a:83:40:0b:
                    c2:a7:e2:46:6e:b5:77:ba:4b:01:d2:36:2c:8f:74:
                    68:2c:e2:e7:17:b9:9d:eb:1b:e5:1a:46:bd:b4:47:
                    87:44:97:47:84:cf:4f:39:f1:47:04:38:b3:e5:1a:
                    08:d9:c0:89:f7:4d:bc:fb:86:ca:fa:27:2e:42:2d:
                    17:a4:f7:7d:e9:67:3c:0d:82:1c:c1:45:40:eb:2a:
                    f4:20:5b:03:ff:a0:fb:a8:88:2b:f2:88:d2:79:4e:
                    2d:2a:9c:91:d1:b0:98:d4:0a:17:62:dd:6a:9d:7d:
                    0b:c2:75:ff:9b:c0:be:73:f8:06:9e:73:76:52:db:
                    96:19:cf:2d:a3:d7:cf:04:a9:67:35:32:1d:5e:a9:
                    ed:9c:19:e1:e7:b6:b6:50:1f:4e:3a:4a:b2:5d:20:
                    05:7a:a6:43:6e:29:cf:af:72:d9:9d:88:c0:da:a1:
                    a9:15:45:80:c5:83:00:05:08:27:b4:fd:b1:15:dd:
                    2a:63:f3:3c:4c:5c:b3:62:2a:94:dc:f3:fa:75:35:
                    cb:e0:1c:d6:45:d7:2a:6c:95:cf:0d:98:ef:5b:ec:
                    49:1b:a7:6f:3f:c4:72:f2:f2:ba:48:c2:ec:33:16:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:0C:68:CE:73:DF:19:36:27:95:ED:32:77:DE:A8:EC:B5:43:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb3ea5d2-9d52-3d2c-9769-1f37a8533cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.150.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:ef:8f:75:0d:be:85:d8:e0:85:89:cd:fe:d1:64:19:7d:
         48:7e:33:4d:24:98:3f:e9:04:85:37:c7:01:92:d7:b0:ce:d9:
         94:07:5b:de:1c:c7:76:0f:40:45:a4:f5:60:a0:cc:65:10:8c:
         e2:ba:cb:9b:8b:d7:ed:31:0f:31:2e:a9:89:7d:ee:0f:81:86:
         53:4a:40:bb:fe:cd:a6:84:e4:34:c7:45:03:4d:a5:ff:5d:7f:
         3b:33:db:48:fc:a9:ff:08:f7:53:24:74:26:c7:f3:20:b9:e2:
         96:be:24:05:87:49:5b:54:80:73:31:60:c1:4a:db:40:f0:b0:
         fc:9f:3d:51:f2:a9:ce:91:36:b3:d5:51:26:3e:af:78:5f:5d:
         1b:a6:90:db:fd:00:01:68:e3:bb:40:c9:79:72:dc:ff:e2:0f:
         77:5f:23:df:09:0e:0e:6c:ed:83:5a:ad:0d:06:e0:c8:e5:f0:
         86:d3:55:04:95:ea:a6:31:4e:b8:9b:f8:32:0b:01:a5:f3:d0:
         3a:c3:52:de:e0:8b:f3:e0:e7:5f:70:cc:66:d6:6c:05:80:b5:
         4a:1a:0c:75:ec:39:2a:1b:d7:a0:51:4a:70:63:93:62:4b:c2:
         ad:85:18:2f:c7:a3:54:2e:f5:a1:a6:40:fc:65:56:f3:f1:9a:
         82:5f:80:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1juIUKkfT2plomAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NmRiMTM5MWMtOWE2OC00OTIyLTk3NzktOWM4YTdlZDBiNzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR0HrrpvG9j4xwx6lxPHO6nPSi0YERqXcjqD
QAvCp+JGbrV3uksB0jYsj3RoLOLnF7md6xvlGka9tEeHRJdHhM9POfFHBDiz5RoI
2cCJ9028+4bK+icuQi0XpPd96Wc8DYIcwUVA6yr0IFsD/6D7qIgr8ojSeU4tKpyR
0bCY1AoXYt1qnX0LwnX/m8C+c/gGnnN2UtuWGc8to9fPBKlnNTIdXqntnBnh57a2
UB9OOkqyXSAFeqZDbinPr3LZnYjA2qGpFUWAxYMABQgntP2xFd0qY/M8TFyzYiqU
3PP6dTXL4BzWRdcqbJXPDZjvW+xJG6dvP8Ry8vK6SMLsMxYifQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCeuDGjOc98ZNieV7TJ33qjstUNMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmIzZWE1ZDItOWQ1Mi0z
ZDJjLTk3NjktMWYzN2E4NTMzY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYZbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqJ7491Db6F2OCFic3+0WQZfUh+M00kmD/pBIU3xwGS17DO2ZQHW94c
x3YPQEWk9WCgzGUQjOK6y5uL1+0xDzEuqYl97g+BhlNKQLv+zaaE5DTHRQNNpf9d
fzsz20j8qf8I91MkdCbH8yC54pa+JAWHSVtUgHMxYMFK20DwsPyfPVHyqc6RNrPV
USY+r3hfXRumkNv9AAFo47tAyXly3P/iD3dfI98JDg5s7YNarQ0G4Mjl8IbTVQSV
6qYxTrib+DILAaXz0DrDUt7gi/Pg519wzGbWbAWAtUoaDHXsOSob16BRSnBjk2JL
wq2FGC/Ho1Qu9aGmQPxlVvPxmoJfgNA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:00 2024 by rpki-client on console-ams.rpki-client.org