Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ce57e29-2889-3b92-b36c-77f04da61d7f.roa
File:                     0ce57e29-2889-3b92-b36c-77f04da61d7f.roa (raw, json)
Hash identifier:          ICMJ4zbkp/hCwEF30tEpYLNboGZKHd2B12WfAu60FTo=
Subject key identifier:   F0:B3:59:F0:2E:4F:F5:D5:55:BF:D1:24:40:1D:79:BA:F5:B1:E5:96
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F052B3D19DD5A837708A880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ce57e29-2889-3b92-b36c-77f04da61d7f.roa
Signing time:             Fri 29 Mar 2024 18:38:17 +0000
ROA not before:           Fri 29 Mar 2024 18:38:17 +0000
ROA not after:            Thu 27 Jun 2024 18:38:17 +0000
asID:                     396982
IP address blocks:        74.125.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:2b:3d:19:dd:5a:83:77:08:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:38:17 2024 GMT
            Not After : Jun 27 18:38:17 2024 GMT
        Subject: CN=e6f39aac-d90f-477d-93c2-cb3cfb1ee017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:7c:07:5b:11:fa:2c:13:7b:16:c7:37:47:
                    7b:d5:06:4c:9b:41:e3:a7:ee:0d:37:ff:9b:5b:fb:
                    7a:60:e1:5a:52:a5:cc:29:3e:d6:e2:21:9a:4f:16:
                    9c:fa:8a:55:45:8f:9e:64:6e:23:58:80:6f:ff:7b:
                    4a:55:1c:b4:4c:e7:a5:65:73:ef:22:b8:16:1a:1a:
                    0b:14:83:6e:e4:61:07:58:74:0a:4b:07:d1:2d:67:
                    42:f8:bc:c5:47:16:52:c6:fc:18:79:5a:e6:7f:0a:
                    f7:0a:d1:d5:66:35:6f:37:e7:5b:98:da:d3:20:e6:
                    b9:8f:92:0b:80:9f:b3:e1:6c:86:d3:cc:0a:80:65:
                    d6:c1:37:06:87:9c:13:84:db:aa:3e:65:7e:21:60:
                    bd:c9:c1:44:43:d9:1b:9f:a8:85:c0:fe:17:d2:47:
                    68:be:96:a8:66:c5:61:b1:3b:1f:f5:7e:43:93:94:
                    88:12:38:53:2a:7e:df:8e:f8:d3:9b:7f:42:0a:d9:
                    26:9e:21:87:a1:30:2e:31:23:a3:31:f3:8a:57:7c:
                    6f:6e:36:95:5d:38:fc:6c:6e:72:f1:e1:da:18:4c:
                    0c:06:c4:74:70:4d:b2:79:0f:d2:06:93:8a:71:0b:
                    72:85:a4:07:87:a3:8f:f2:61:7b:ab:5c:67:67:e4:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B3:59:F0:2E:4F:F5:D5:55:BF:D1:24:40:1D:79:BA:F5:B1:E5:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ce57e29-2889-3b92-b36c-77f04da61d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:6b:bb:94:af:53:f7:8c:6e:45:7d:2b:9e:0a:16:a3:a9:
         96:b5:c7:38:2d:37:59:5c:33:89:ed:cf:07:0c:57:50:cb:ac:
         92:67:4f:e4:16:72:88:5a:44:ad:b0:0c:be:ed:1d:1f:92:49:
         98:65:12:e1:6f:d7:0a:3e:f7:05:63:bc:ff:76:7c:7f:29:f5:
         9f:48:15:db:33:9c:e9:f2:fc:10:b5:de:af:23:29:01:e7:4f:
         10:61:86:87:6d:2a:1e:aa:0c:6d:f9:b9:8c:94:eb:ee:e8:25:
         fd:88:bc:cd:d6:f0:40:a5:f2:28:f0:d1:e9:3c:94:e3:21:af:
         a4:4e:5e:c6:f3:a1:fd:e9:29:03:82:73:b8:c3:32:f2:92:ca:
         77:12:65:5f:cf:d8:40:3d:5b:42:f1:80:50:f6:9d:16:3a:3b:
         1e:0a:84:10:96:3c:36:89:94:a8:ff:60:82:15:49:a6:54:96:
         f3:e6:88:34:d2:e0:a9:ad:e0:d3:8d:9c:9d:dc:46:15:91:1b:
         d7:bc:43:91:1c:d9:ef:8a:7b:3a:e6:a6:86:d5:59:c1:48:2c:
         54:8c:84:91:06:90:f1:27:0c:ef:6e:61:71:81:84:d3:0d:b8:
         85:b7:1a:1e:8f:e1:0e:91:c6:1e:90:60:ed:f8:34:f5:aa:89:
         f0:59:ec:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBSs9Gd1ag3cIqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyOTE4MzgxN1oXDTI0MDYyNzE4MzgxN1owLzEtMCsGA1UEAxMk
ZTZmMzlhYWMtZDkwZi00NzdkLTkzYzItY2IzY2ZiMWVlMDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN98B1sR+iwTexbHN0d71QZMm0Hjp+4NN/+b
W/t6YOFaUqXMKT7W4iGaTxac+opVRY+eZG4jWIBv/3tKVRy0TOelZXPvIrgWGhoL
FINu5GEHWHQKSwfRLWdC+LzFRxZSxvwYeVrmfwr3CtHVZjVvN+dbmNrTIOa5j5IL
gJ+z4WyG08wKgGXWwTcGh5wThNuqPmV+IWC9ycFEQ9kbn6iFwP4X0kdovpaoZsVh
sTsf9X5Dk5SIEjhTKn7fjvjTm39CCtkmniGHoTAuMSOjMfOKV3xvbjaVXTj8bG5y
8eHaGEwMBsR0cE2yeQ/SBpOKcQtyhaQHh6OP8mF7q1xnZ+RRHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCzWfAuT/XVVb/RJEAdebr1seWWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGNlNTdlMjktMjg4OS0z
YjkyLWIzNmMtNzdmMDRkYTYxZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLEa7uUr1P3jG5FfSueChajqZa1xzgtN1lcM4ntzwcMV1DLrJJnT+QW
cohaRK2wDL7tHR+SSZhlEuFv1wo+9wVjvP92fH8p9Z9IFdsznOny/BC13q8jKQHn
TxBhhodtKh6qDG35uYyU6+7oJf2IvM3W8ECl8ijw0ek8lOMhr6ROXsbzof3pKQOC
c7jDMvKSyncSZV/P2EA9W0LxgFD2nRY6Ox4KhBCWPDaJlKj/YIIVSaZUlvPmiDTS
4Kmt4NONnJ3cRhWRG9e8Q5Ec2e+KezrmpobVWcFILFSMhJEGkPEnDO9uYXGBhNMN
uIW3Gh6P4Q6Rxh6QYO34NPWqifBZ7JE=
-----END CERTIFICATE-----
Generated at Sun May 5 22:06:34 2024 by rpki-client on console-fra.rpki-client.org