Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/ccc7d98b-cfd8-3cd7-a395-166bba35607b.roa
File:                     ccc7d98b-cfd8-3cd7-a395-166bba35607b.roa (raw, json)
Hash identifier:          P0evX9lUT4bDNn7y7dxGkolBSBD2LVVfLFLi4bEH27Q=
Subject key identifier:   52:32:2D:22:26:48:D7:3D:CD:AA:5F:88:B5:60:EB:48:22:04:C1:BC
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F43285845105029997350ACA032173678
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/ccc7d98b-cfd8-3cd7-a395-166bba35607b.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        74.117.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:29:99:73:50:ac:a0:32:17:36:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=d638339d-40bd-430c-a55b-7f22a8faac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:46:28:ee:9d:c9:ec:88:c5:52:ff:0d:d8:
                    40:f0:b1:d2:68:e6:74:eb:5c:6d:c9:68:e9:70:5d:
                    b3:ab:15:cd:24:16:a7:ea:0d:7a:87:6a:72:f6:6c:
                    f7:bb:8f:a7:21:9d:5d:b5:2f:08:35:ff:55:21:51:
                    d1:21:c2:b0:d6:5c:6c:06:c0:b6:fa:43:c0:66:78:
                    d9:dd:fa:d9:8b:6c:30:4e:21:8a:25:26:7d:6c:13:
                    1c:68:b3:1e:10:44:9e:c9:32:d0:2d:7a:be:e9:7b:
                    8d:c0:b7:e2:fb:16:4f:ab:02:1d:32:07:57:8b:87:
                    35:64:36:c0:34:b4:de:a0:a1:5e:85:3a:5a:3f:c1:
                    19:e5:74:42:a4:e9:76:95:12:b6:a4:ba:2c:4b:78:
                    da:18:a3:44:96:8c:6b:c7:90:62:78:b8:f8:b8:20:
                    fd:05:c2:a5:46:c5:57:c2:11:b2:3a:1b:8f:8b:66:
                    cf:04:33:cb:6a:fa:9d:ff:67:b1:1d:4d:45:98:22:
                    c7:5f:42:e9:ab:66:d8:9b:b0:3b:b0:a0:3a:d4:23:
                    33:2e:0b:98:5f:53:f9:d0:ee:07:33:89:3d:c2:12:
                    12:c1:ab:a2:0a:68:3d:37:ae:e3:51:63:ce:fa:f9:
                    67:5a:81:ae:66:32:e8:aa:6c:76:89:81:10:ac:ee:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:2D:22:26:48:D7:3D:CD:AA:5F:88:B5:60:EB:48:22:04:C1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/ccc7d98b-cfd8-3cd7-a395-166bba35607b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:e4:17:33:79:0b:a3:29:c2:25:f8:07:3d:e5:8b:bc:08:
         71:26:0e:65:3e:72:8a:fa:76:e5:c3:59:6e:df:67:62:49:47:
         4d:06:46:b3:b3:f6:2a:cd:83:fb:f2:a8:e1:3e:e3:f8:1a:ce:
         50:8f:5f:a3:ba:c1:6f:d0:3e:b8:98:63:0f:00:f2:3e:86:73:
         43:e0:49:0d:3d:9b:d1:ff:a3:d0:0c:54:74:30:9f:f6:8d:0e:
         89:97:cb:35:aa:cf:e9:49:b0:e2:f8:ee:47:12:da:44:8b:ed:
         a8:2d:fa:fb:d2:0f:2d:00:d9:e0:3b:6a:18:40:e1:51:eb:ac:
         a8:ff:b0:8f:b1:64:68:b5:1b:77:50:3e:4e:4e:40:b7:e0:c8:
         74:1e:2f:f4:83:a4:68:f9:f9:2d:e7:b4:33:80:6e:a6:44:cc:
         bc:d6:58:31:5f:9b:35:7d:67:5f:0b:a0:15:e0:eb:aa:dc:ef:
         a5:f4:31:82:f2:e5:7d:8c:82:a4:0b:1d:58:0d:74:3a:b5:89:
         4d:de:f7:6b:f4:db:21:a3:1f:f0:64:9c:e7:31:24:4d:0e:14:
         38:9a:8b:0f:98:15:54:42:96:d6:a7:b5:db:ab:80:e6:d8:79:
         07:44:e4:be:8a:f0:b6:e4:64:35:a8:66:e5:53:7f:b2:8e:3b:
         05:15:aa:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUQUCmZc1CsoDIXNngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzUxODhlMjAtMTI5Ny00YjYxLWE0OTQtMWNhMDAzNjc3
N2YyMB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk
ZDYzODMzOWQtNDBiZC00MzBjLWE1NWItN2YyMmE4ZmFhYzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgtGKO6dyeyIxVL/DdhA8LHSaOZ061xtyWjp
cF2zqxXNJBan6g16h2py9mz3u4+nIZ1dtS8INf9VIVHRIcKw1lxsBsC2+kPAZnjZ
3frZi2wwTiGKJSZ9bBMcaLMeEESeyTLQLXq+6XuNwLfi+xZPqwIdMgdXi4c1ZDbA
NLTeoKFehTpaP8EZ5XRCpOl2lRK2pLosS3jaGKNEloxrx5BieLj4uCD9BcKlRsVX
whGyOhuPi2bPBDPLavqd/2exHU1FmCLHX0Lpq2bYm7A7sKA61CMzLguYX1P50O4H
M4k9whISwauiCmg9N67jUWPO+vlnWoGuZjLoqmx2iYEQrO6GJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFIyLSImSNc9zapfiLVg60giBMG8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4
OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2EwMDM2Nzc3ZjIvY2NjN2Q5OGItY2ZkOC0z
Y2Q3LWEzOTUtMTY2YmJhMzU2MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzUxODhlMjAtMTI5Ny00YjYxLWE0
OTQtMWNhMDAzNjc3N2YyL2M1MTg4ZTIwLTEyOTctNGI2MS1hNDk0LTFjYTAwMzY3
NzdmMi5jcmwwHwYDVR0jBBgwFoAUuYyjHfkVx9gVEusrJXXT5sRul7YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2Ew
MDM2Nzc3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnUSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+95BczeQujKcIl+Ac95Yu8CHEmDmU+cor6duXDWW7fZ2JJR00GRrOz
9irNg/vyqOE+4/gazlCPX6O6wW/QPriYYw8A8j6Gc0PgSQ09m9H/o9AMVHQwn/aN
DomXyzWqz+lJsOL47kcS2kSL7agt+vvSDy0A2eA7ahhA4VHrrKj/sI+xZGi1G3dQ
Pk5OQLfgyHQeL/SDpGj5+S3ntDOAbqZEzLzWWDFfmzV9Z18LoBXg66rc76X0MYLy
5X2MgqQLHVgNdDq1iU3e92v02yGjH/BknOcxJE0OFDiaiw+YFVRCltantdurgObY
eQdE5L6K8LbkZDWoZuVTf7KOOwUVqpg=
-----END CERTIFICATE-----
Generated at Thu May 2 04:27:25 2024 by rpki-client on console-fra.rpki-client.org