Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/614b5dc1-48a7-36e9-96c0-a8af087fa864.roa
File:                     614b5dc1-48a7-36e9-96c0-a8af087fa864.roa (raw, json)
Hash identifier:          T8A1cEHiJcC85gk7JVtj9mj8+PeIh8LfDOSO6rvW+X4=
Subject key identifier:   9D:BD:98:36:C7:95:E8:5E:B4:D8:0B:54:79:8D:F0:9A:55:A2:CA:78
Certificate issuer:       /CN=73d32729-3efa-4a4c-a5ce-85790b40d100
Certificate serial:       010D0C9F43285845B458041D54CBE7B5589793D0
Authority key identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/614b5dc1-48a7-36e9-96c0-a8af087fa864.roa
Signing time:             Mon 29 Apr 2024 08:08:55 +0000
ROA not before:           Mon 29 Apr 2024 08:08:55 +0000
ROA not after:            Sun 28 Jul 2024 08:08:55 +0000
asID:                     59426
IP address blocks:        23.175.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:58:04:1d:54:cb:e7:b5:58:97:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d32729-3efa-4a4c-a5ce-85790b40d100
        Validity
            Not Before: Apr 29 08:08:55 2024 GMT
            Not After : Jul 28 08:08:55 2024 GMT
        Subject: CN=847a393b-85c0-4c08-be95-e59ca14c264c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:22:2a:12:db:03:52:9c:82:97:b2:33:39:
                    48:51:38:43:43:57:72:f1:12:a5:cd:f3:1a:5c:78:
                    15:99:b1:f9:af:fe:43:ad:aa:94:d5:2a:b7:f3:7c:
                    98:df:b6:dd:43:5b:50:47:fe:e1:74:a5:aa:ef:69:
                    d9:06:bb:a9:10:24:21:45:02:a1:0c:df:b0:3c:eb:
                    b2:45:a3:d6:78:47:77:47:92:c4:51:09:99:ef:50:
                    21:d6:a8:1e:25:1b:d6:57:55:cf:f2:19:05:23:83:
                    46:c3:83:fb:88:dc:34:4b:ba:1a:6c:83:e1:db:9b:
                    1d:fa:5d:fc:be:02:a6:04:34:3c:43:5c:9b:88:8e:
                    10:46:64:3a:75:88:76:e4:ab:3a:d8:d6:07:5f:7a:
                    87:d8:e1:d3:22:78:14:a7:bc:47:b1:be:5a:f8:ea:
                    8a:82:3d:a6:69:6a:50:5e:36:8b:f3:fd:9f:30:9b:
                    8a:8b:43:1b:bc:9e:23:a6:f5:56:34:8d:03:1f:72:
                    9a:1d:dd:fc:a0:83:b4:51:2b:65:a2:ae:a9:3f:04:
                    c7:65:36:f6:6d:43:29:65:49:6d:33:28:41:78:71:
                    7d:cf:c9:f5:4f:44:7c:77:9c:2e:4b:52:62:60:1e:
                    84:5b:b0:e8:9a:51:c5:14:29:d8:50:d4:2e:ef:ac:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BD:98:36:C7:95:E8:5E:B4:D8:0B:54:79:8D:F0:9A:55:A2:CA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/614b5dc1-48a7-36e9-96c0-a8af087fa864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl

            X509v3 Authority Key Identifier:
                keyid:DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:33:bd:36:86:a0:3c:11:20:02:da:ea:f2:a4:c5:80:cd:3a:
         0f:7d:7f:58:f2:18:53:00:af:11:0c:d5:56:3f:d1:98:89:0d:
         d2:a6:c3:3d:ad:7a:90:50:f1:3e:6f:5b:9f:d0:42:f7:f5:f3:
         8c:f9:13:78:c6:de:c4:fa:ed:a0:10:96:27:d4:22:51:4d:8c:
         fd:87:6e:cb:4d:44:82:f8:3a:d9:16:f5:b7:68:1a:ab:a6:7f:
         eb:1b:e2:32:c5:e1:32:81:f2:2e:f0:7e:c1:34:0f:ac:ce:e8:
         3a:d6:d2:38:5b:9e:63:b4:02:0c:6f:f2:96:5b:4b:98:3e:56:
         46:aa:9d:eb:1c:14:4b:9e:02:08:9e:b9:1a:03:19:a1:32:b3:
         5e:ae:49:27:58:15:68:68:db:b1:35:39:87:d5:77:38:56:0a:
         f3:3d:83:98:c9:45:db:97:fc:58:80:85:e8:b3:2e:5e:17:5f:
         4b:d9:fc:4c:bb:b4:3b:df:f4:03:da:a8:5e:06:41:99:9d:13:
         5f:87:5f:8c:c0:7a:93:d9:8d:12:15:69:c9:23:88:38:0e:c6:
         fd:3a:24:fd:d3:97:f4:5e:9b:2c:af:9d:ff:1a:74:0d:85:85:
         2a:94:b6:b8:99:d2:22:c4:70:e8:f4:7b:26:52:5e:72:96:0f:
         e3:86:08:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW0WAQdVMvntViXk9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNkMzI3MjktM2VmYS00YTRjLWE1Y2UtODU3OTBiNDBk
MTAwMB4XDTI0MDQyOTA4MDg1NVoXDTI0MDcyODA4MDg1NVowLzEtMCsGA1UEAxMk
ODQ3YTM5M2ItODVjMC00YzA4LWJlOTUtZTU5Y2ExNGMyNjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7IiKhLbA1KcgpeyMzlIUThDQ1dy8RKlzfMa
XHgVmbH5r/5DraqU1Sq383yY37bdQ1tQR/7hdKWq72nZBrupECQhRQKhDN+wPOuy
RaPWeEd3R5LEUQmZ71Ah1qgeJRvWV1XP8hkFI4NGw4P7iNw0S7oabIPh25sd+l38
vgKmBDQ8Q1ybiI4QRmQ6dYh25Ks62NYHX3qH2OHTIngUp7xHsb5a+OqKgj2maWpQ
XjaL8/2fMJuKi0MbvJ4jpvVWNI0DH3KaHd38oIO0UStloq6pPwTHZTb2bUMpZUlt
MyhBeHF9z8n1T0R8d5wuS1JiYB6EW7DomlHFFCnYUNQu76znEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ29mDbHlehetNgLVHmN8JpVosp4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83M2Qz
MjcyOS0zZWZhLTRhNGMtYTVjZS04NTc5MGI0MGQxMDAvNjE0YjVkYzEtNDhhNy0z
NmU5LTk2YzAtYThhZjA4N2ZhODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzNkMzI3MjktM2VmYS00YTRjLWE1
Y2UtODU3OTBiNDBkMTAwLzczZDMyNzI5LTNlZmEtNGE0Yy1hNWNlLTg1NzkwYjQw
ZDEwMC5jcmwwHwYDVR0jBBgwFoAU3uRXGJqsayhuJqAU4ItM8ym5jokwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83M2QzMjcyOS0zZWZhLTRhNGMtYTVjZS04NTc5
MGI0MGQxMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF69IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMzvTaGoDwRIALa6vKkxYDNOg99f1jyGFMArxEM1VY/0ZiJDdKmwz2t
epBQ8T5vW5/QQvf184z5E3jG3sT67aAQlifUIlFNjP2HbstNRIL4OtkW9bdoGqum
f+sb4jLF4TKB8i7wfsE0D6zO6DrW0jhbnmO0Agxv8pZbS5g+VkaqnescFEueAgie
uRoDGaEys16uSSdYFWho27E1OYfVdzhWCvM9g5jJRduX/FiAheizLl4XX0vZ/Ey7
tDvf9APaqF4GQZmdE1+HX4zAepPZjRIVackjiDgOxv06JP3Tl/Remyyvnf8adA2F
hSqUtriZ0iLEcOj0eyZSXnKWD+OGCHs=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:43 2024 by rpki-client on console-ams.rpki-client.org