Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/600d221f-4cee-329b-812a-e9c63a4cbd9f.roa
File:                     600d221f-4cee-329b-812a-e9c63a4cbd9f.roa (raw, json)
Hash identifier:          YhmeN7x0beZZZcgjNfi4AOfppG/4dFFYREZ/7/jqVCg=
Subject key identifier:   E4:83:E6:22:3F:7C:E9:01:A3:03:59:74:65:71:12:34:24:1A:21:8A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E2B9B0F680AEC477E3A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/600d221f-4cee-329b-812a-e9c63a4cbd9f.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        16.203.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:2b:9b:0f:68:0a:ec:47:7e:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=24c6a3c8-ed80-4ebf-9331-d01f7386245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:31:38:26:03:8f:9a:5c:23:85:a5:d2:e0:
                    f3:09:d4:ff:31:28:c9:3d:f9:13:fa:09:17:db:9f:
                    d1:78:de:ed:09:d8:23:e8:08:32:4e:5c:12:ac:9b:
                    92:be:07:a5:45:91:83:6f:0c:20:24:5f:aa:67:e4:
                    69:d4:16:f2:d8:fe:15:9c:ad:22:59:44:09:74:5c:
                    9b:0f:1c:36:bf:2d:37:2c:5a:46:d0:ad:b4:18:d3:
                    ff:1e:db:61:d4:33:2d:ac:29:c0:57:c0:11:73:5e:
                    19:30:3a:88:d7:cd:2a:7a:50:d3:c9:d2:9a:8a:89:
                    a7:e7:c8:13:06:c3:ef:45:c8:9e:6e:38:e1:58:d8:
                    d2:3f:08:f5:72:51:c0:58:33:48:0b:f9:be:e3:ef:
                    91:91:0e:05:eb:90:3a:51:3a:b1:68:5f:fe:62:cd:
                    0a:45:49:23:cd:b1:8d:7c:48:df:1b:da:06:33:2f:
                    33:c1:d3:91:b9:30:36:2a:4c:49:9d:d8:cd:42:15:
                    85:df:96:d9:a6:5c:3a:d1:a5:20:16:8f:0b:49:7f:
                    f0:af:00:95:77:a7:99:d0:4d:7d:2e:dc:29:b4:8e:
                    fb:84:7c:57:eb:a4:f5:53:f6:73:f8:2a:98:9f:8b:
                    20:59:b7:e9:fa:32:80:3f:0e:3d:8a:e4:22:22:92:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:83:E6:22:3F:7C:E9:01:A3:03:59:74:65:71:12:34:24:1A:21:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/600d221f-4cee-329b-812a-e9c63a4cbd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.203.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cc:f3:a1:5f:62:17:6d:6f:6b:a1:2b:d4:81:2a:82:a7:86:
         36:2b:a7:d8:19:be:0e:f4:a0:ad:99:34:f7:d8:a7:c4:b3:9e:
         d6:73:bd:26:7c:00:7e:62:27:35:81:fa:a5:ca:09:bc:ec:eb:
         ca:c0:91:ac:9c:2b:c3:73:c7:22:69:76:42:1c:39:7c:ab:1b:
         5a:f5:82:67:42:a6:13:08:4a:a9:26:e5:bc:62:14:7b:f8:55:
         29:57:02:d9:7b:0a:a5:2d:a9:20:82:90:d0:0c:38:a8:1e:24:
         41:e2:50:7d:1d:de:88:cb:c1:f1:ca:8d:df:69:82:e7:79:20:
         e7:4e:d9:ab:4d:5a:a4:36:3a:66:0b:ec:d3:fe:f2:b8:45:bb:
         62:61:ee:1d:d0:9e:ef:3d:1b:a8:d4:f6:d8:25:48:c7:fe:cb:
         48:b8:93:f0:dc:6a:ee:96:8e:91:27:54:7d:b3:bc:a2:5c:ef:
         3c:41:0a:3a:33:3d:5e:12:e1:da:68:b3:ce:b7:66:91:a1:1e:
         2e:8f:09:10:ab:29:37:6f:2f:8d:85:60:67:75:b6:9e:66:52:
         84:bd:ce:50:be:da:6a:70:29:48:8d:8b:7a:a9:52:ea:45:3f:
         23:ab:ff:1f:b8:25:88:e7:b2:87:ca:11:70:92:47:fd:1a:0f:
         7d:f7:56:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijiubD2gK7Ed+OoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MjRjNmEzYzgtZWQ4MC00ZWJmLTkzMzEtZDAxZjczODYyNDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSAxOCYDj5pcI4Wl0uDzCdT/MSjJPfkT+gkX
25/ReN7tCdgj6AgyTlwSrJuSvgelRZGDbwwgJF+qZ+Rp1Bby2P4VnK0iWUQJdFyb
Dxw2vy03LFpG0K20GNP/Htth1DMtrCnAV8ARc14ZMDqI180qelDTydKaiomn58gT
BsPvRciebjjhWNjSPwj1clHAWDNIC/m+4++RkQ4F65A6UTqxaF/+Ys0KRUkjzbGN
fEjfG9oGMy8zwdORuTA2KkxJndjNQhWF35bZplw60aUgFo8LSX/wrwCVd6eZ0E19
LtwptI77hHxX66T1U/Zz+CqYn4sgWbfp+jKAPw49iuQiIpINaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSD5iI/fOkBowNZdGVxEjQkGiGKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjAwZDIyMWYtNGNlZS0z
MjliLTgxMmEtZTljNjNhNGNiZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHEMsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7M86FfYhdtb2uhK9SBKoKnhjYrp9gZvg70oK2ZNPfYp8SzntZzvSZ8
AH5iJzWB+qXKCbzs68rAkaycK8NzxyJpdkIcOXyrG1r1gmdCphMISqkm5bxiFHv4
VSlXAtl7CqUtqSCCkNAMOKgeJEHiUH0d3ojLwfHKjd9pgud5IOdO2atNWqQ2OmYL
7NP+8rhFu2Jh7h3Qnu89G6jU9tglSMf+y0i4k/Dcau6WjpEnVH2zvKJc7zxBCjoz
PV4S4dpos863ZpGhHi6PCRCrKTdvL42FYGd1tp5mUoS9zlC+2mpwKUiNi3qpUupF
PyOr/x+4JYjnsofKEXCSR/0aD333VpE=
-----END CERTIFICATE-----
Generated at Sun May 12 01:38:08 2024 by rpki-client on console-fra.rpki-client.org