Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0372d795-3e4b-3d2a-818b-02070b564356.roa
File:                     0372d795-3e4b-3d2a-818b-02070b564356.roa (raw, json)
Hash identifier:          A+/WwGuIxOv9Nx1Ck15lULh4gP90ncHuORgWA7MpfUQ=
Subject key identifier:   4D:8F:ED:01:71:77:C5:22:B7:3C:F4:56:25:FB:B0:35:6A:D9:2E:BA
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DEC4ABFE5A36745AE9180
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0372d795-3e4b-3d2a-818b-02070b564356.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        74.216.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ec:4a:bf:e5:a3:67:45:ae:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=0300b4cd-5cbb-4309-a622-3bc3bd3914c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bd:6c:8e:e9:35:20:4e:7a:bf:d5:9e:ba:65:
                    ad:56:ce:34:c8:14:9c:56:13:78:36:4d:7f:77:5b:
                    cf:64:cd:86:24:c8:52:36:7b:85:d8:97:28:a4:27:
                    8d:eb:f5:3e:99:5a:8e:56:30:12:a2:1f:c3:4b:56:
                    74:c6:f9:3b:c8:eb:2f:b7:61:3f:29:11:b5:40:6c:
                    51:16:98:b0:cf:60:9d:cf:ba:f9:bc:e8:7c:79:a8:
                    b1:97:2c:86:7b:ad:40:d5:69:57:fc:5c:09:e0:28:
                    90:5b:6c:9a:89:e2:d1:c7:17:4b:5b:3e:27:2e:cf:
                    2c:b1:d9:f1:43:69:8c:b5:d2:57:1d:c1:68:41:9e:
                    1c:b9:a9:b0:e2:b8:2f:8f:62:b0:be:6f:40:4e:ad:
                    3b:be:5b:46:2e:ca:33:e8:09:11:be:d9:b8:d5:10:
                    7a:71:ee:3b:ba:39:e4:ba:62:88:15:e5:ea:52:28:
                    e0:58:df:72:fd:1c:fa:4e:9b:86:b9:6e:dd:31:ad:
                    2d:a8:50:d4:f1:89:37:92:16:e7:f1:44:a9:d2:96:
                    f9:f5:3d:c3:b6:95:ea:e5:8b:0b:5b:3b:9a:ad:83:
                    89:60:fb:bd:96:21:e0:fe:45:d9:c0:7b:ba:5b:b6:
                    0c:b9:01:5d:25:c8:f1:2a:6f:a7:25:19:85:1a:48:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:ED:01:71:77:C5:22:B7:3C:F4:56:25:FB:B0:35:6A:D9:2E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0372d795-3e4b-3d2a-818b-02070b564356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3e:7d:02:40:1b:70:2b:2e:a7:e8:3c:6d:9e:fc:8c:13:96:
         7c:1e:0f:cf:87:93:42:75:c6:f0:30:80:25:a8:97:7b:0f:a9:
         c4:50:43:cc:19:f9:fb:43:82:3d:6b:e1:ae:14:92:02:7c:e1:
         b7:af:c8:60:24:4a:bd:17:c3:64:73:a3:0c:df:06:84:ea:36:
         96:b6:e9:2d:ba:cb:f2:16:dc:12:aa:1a:bf:8c:a2:8b:10:56:
         d6:6b:36:f2:03:2f:24:f5:c5:70:41:8b:b3:6e:d8:19:a4:0b:
         e7:6a:cb:66:ed:b5:f2:27:29:27:0d:86:a3:5b:b2:03:2f:b5:
         9b:e5:54:7e:91:ee:3e:a5:45:d5:8d:31:bf:66:79:f1:d7:f0:
         8b:56:43:a9:28:56:63:ee:16:83:07:1d:4c:dc:52:8c:2e:01:
         5b:57:84:c5:56:07:5b:19:72:ab:78:2e:1f:93:f8:ce:09:49:
         9b:15:4a:5f:71:5e:81:24:72:fb:a5:41:8d:dd:68:94:df:37:
         c0:54:af:21:53:dd:06:c3:7a:fc:9d:9e:77:2e:11:85:30:6d:
         00:cf:9e:35:78:58:7b:0f:a2:97:86:4e:03:c3:79:60:b0:05:
         b7:10:05:be:a6:6c:fb:6d:89:2a:cc:64:69:f4:4d:f1:b9:de:
         20:17:88:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLexKv+WjZ0WukYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
MDMwMGI0Y2QtNWNiYi00MzA5LWE2MjItM2JjM2JkMzkxNGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7L1sjuk1IE56v9WeumWtVs40yBScVhN4Nk1/
d1vPZM2GJMhSNnuF2JcopCeN6/U+mVqOVjASoh/DS1Z0xvk7yOsvt2E/KRG1QGxR
Fpiwz2Cdz7r5vOh8eaixlyyGe61A1WlX/FwJ4CiQW2yaieLRxxdLWz4nLs8ssdnx
Q2mMtdJXHcFoQZ4cuamw4rgvj2Kwvm9ATq07vltGLsoz6AkRvtm41RB6ce47ujnk
umKIFeXqUijgWN9y/Rz6TpuGuW7dMa0tqFDU8Yk3khbn8USp0pb59T3DtpXq5YsL
WzuarYOJYPu9liHg/kXZwHu6W7YMuQFdJcjxKm+nJRmFGkj7dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2P7QFxd8Uitzz0ViX7sDVq2S66MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMDM3MmQ3OTUtM2U0Yi0z
ZDJhLTgxOGItMDIwNzBiNTY0MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStjqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk+fQJAG3ArLqfoPG2e/IwTlnweD8+Hk0J1xvAwgCWol3sPqcRQQ8wZ
+ftDgj1r4a4UkgJ84bevyGAkSr0Xw2RzowzfBoTqNpa26S26y/IW3BKqGr+MoosQ
VtZrNvIDLyT1xXBBi7Nu2BmkC+dqy2bttfInKScNhqNbsgMvtZvlVH6R7j6lRdWN
Mb9mefHX8ItWQ6koVmPuFoMHHUzcUowuAVtXhMVWB1sZcqt4Lh+T+M4JSZsVSl9x
XoEkcvulQY3daJTfN8BUryFT3QbDevydnncuEYUwbQDPnjV4WHsPopeGTgPDeWCw
BbcQBb6mbPttiSrMZGn0TfG53iAXiPY=
-----END CERTIFICATE-----
Generated at Sun Jun 2 12:35:27 2024 by rpki-client on console-fra.rpki-client.org