Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa
File:                     16d526a6-8c61-3f11-a555-e4df6480ae14.roa (raw, json)
Hash identifier:          MUr/2+PTxB/Vse8ivjI8xXvDZU2ZAgChXt0WxFDrAUc=
Subject key identifier:   BE:FE:64:D3:DA:21:39:47:58:67:71:0B:E8:CF:6F:01:92:57:7A:A7
Certificate issuer:       /CN=78108340-c24e-45fa-a787-5578ce17c653
Certificate serial:       010D0C9F432858452AB7DDD373985260B7FD7400
Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     11796
IP address blocks:        208.74.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:dd:d3:73:98:52:60:b7:fd:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=f9ce6e60-6fb2-4d12-9036-b1b6bcb458cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:82:86:57:74:02:02:94:e4:b4:f6:ab:ec:
                    89:2b:2d:8e:c5:a5:d8:05:c0:44:e0:31:1c:7e:e6:
                    e0:76:14:ae:76:20:21:ed:19:7c:e7:7e:a7:f4:1d:
                    f7:c6:49:3d:53:6b:aa:25:6c:d2:25:a2:1f:73:8d:
                    3d:64:9e:ac:a9:b1:92:bd:ff:f9:fc:93:13:9d:9c:
                    44:e3:58:2e:75:92:76:b4:4f:4f:41:92:dc:28:21:
                    11:4a:56:af:4f:e3:6a:43:46:23:7c:e2:5b:33:e3:
                    64:89:22:48:ab:90:72:d9:e1:5a:3c:10:7b:0e:63:
                    4c:67:0f:f0:09:e1:da:d0:d5:ee:a5:85:c3:a1:34:
                    4b:09:1d:86:55:b3:a6:ff:2f:72:b8:8c:66:41:85:
                    3d:38:37:05:af:36:bc:be:07:cc:7a:66:50:b1:86:
                    e1:98:23:f4:9a:0a:29:a1:d2:90:ab:31:93:a5:80:
                    0c:73:83:6e:48:52:2f:15:a7:cb:7a:9d:76:dc:62:
                    1f:c9:a1:1f:46:76:d1:fd:15:af:bd:c9:12:9e:e9:
                    b5:a8:b0:9d:08:81:fd:20:c3:0e:57:d2:bb:e9:8d:
                    f1:2a:d1:9e:f5:c6:7b:2f:f1:99:04:79:29:18:ce:
                    5f:7a:90:64:9a:86:56:b7:3a:ee:1a:f4:40:0f:db:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FE:64:D3:DA:21:39:47:58:67:71:0B:E8:CF:6F:01:92:57:7A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl

            X509v3 Authority Key Identifier:
                keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:e1:5d:40:81:5e:ab:f8:83:7d:72:f6:e4:eb:e1:59:62:
         4f:09:85:e8:03:b9:bf:31:a0:9f:e5:e8:3b:c8:d3:2a:bf:e9:
         72:23:5e:62:09:01:53:f4:29:97:3f:54:25:58:83:2a:68:74:
         3c:fc:71:66:0f:8f:5d:0e:b6:d1:23:89:9d:99:ce:87:c7:54:
         22:06:bd:7f:06:e2:1a:8b:dd:e6:2d:a2:55:b9:53:99:76:e5:
         4e:86:f2:d9:95:e9:cc:11:8e:96:4c:89:c3:31:3d:cc:64:7e:
         6f:f4:71:ce:60:4e:55:50:12:4c:e3:4f:0d:95:5e:61:f9:68:
         e8:53:c8:93:8c:f7:26:c3:85:b2:d3:b9:ba:b0:32:79:b0:01:
         38:05:1d:48:4c:c3:7b:fe:d6:2f:bb:dc:3d:c9:0d:6f:69:2d:
         ec:23:7a:75:04:10:ed:e9:24:98:91:18:5b:b2:82:a1:80:4b:
         d0:4c:8e:18:33:b4:34:3d:95:0d:db:a2:bb:24:26:d5:fd:b8:
         64:61:ca:2c:b3:ec:1e:0c:2b:58:f2:88:68:8d:9e:9d:8c:24:
         f3:45:a6:ea:d9:05:46:f5:5c:31:20:e5:66:e7:08:37:17:fe:
         fe:fb:5e:94:7a:ad:da:85:3a:10:06:e7:d3:88:ff:d5:b4:9f:
         43:cc:25:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUqt93Tc5hSYLf9dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgxMDgzNDAtYzI0ZS00NWZhLWE3ODctNTU3OGNlMTdj
NjUzMB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk
ZjljZTZlNjAtNmZiMi00ZDEyLTkwMzYtYjFiNmJjYjQ1OGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5SChld0AgKU5LT2q+yJKy2OxaXYBcBE4DEc
fubgdhSudiAh7Rl8536n9B33xkk9U2uqJWzSJaIfc409ZJ6sqbGSvf/5/JMTnZxE
41gudZJ2tE9PQZLcKCERSlavT+NqQ0YjfOJbM+NkiSJIq5By2eFaPBB7DmNMZw/w
CeHa0NXupYXDoTRLCR2GVbOm/y9yuIxmQYU9ODcFrza8vgfMemZQsYbhmCP0mgop
odKQqzGTpYAMc4NuSFIvFafLep123GIfyaEfRnbR/RWvvckSnum1qLCdCIH9IMMO
V9K76Y3xKtGe9cZ7L/GZBHkpGM5fepBkmoZWtzruGvRAD9u5pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7+ZNPaITlHWGdxC+jPbwGSV3qnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ODEw
ODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4Y2UxN2M2NTMvMTZkNTI2YTYtOGM2MS0z
ZjExLWE1NTUtZTRkZjY0ODBhZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzgxMDgzNDAtYzI0ZS00NWZhLWE3
ODctNTU3OGNlMTdjNjUzLzc4MTA4MzQwLWMyNGUtNDVmYS1hNzg3LTU1NzhjZTE3
YzY1My5jcmwwHwYDVR0jBBgwFoAUlrQrgxk9eYhysk3Zt20b4bFWQ90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83ODEwODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4
Y2UxN2M2NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EooMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGce4V1AgV6r+IN9cvbk6+FZYk8JhegDub8xoJ/l6DvI0yq/6XIjXmIJ
AVP0KZc/VCVYgypodDz8cWYPj10OttEjiZ2ZzofHVCIGvX8G4hqL3eYtolW5U5l2
5U6G8tmV6cwRjpZMicMxPcxkfm/0cc5gTlVQEkzjTw2VXmH5aOhTyJOM9ybDhbLT
ubqwMnmwATgFHUhMw3v+1i+73D3JDW9pLewjenUEEO3pJJiRGFuygqGAS9BMjhgz
tDQ9lQ3borskJtX9uGRhyiyz7B4MK1jyiGiNnp2MJPNFpurZBUb1XDEg5WbnCDcX
/v77XpR6rdqFOhAG59OI/9W0n0PMJbY=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:03 2024 by rpki-client on console-fra.rpki-client.org