Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/7916e50c-664f-3512-92cb-34931aefe663.roa
File:                     7916e50c-664f-3512-92cb-34931aefe663.roa (raw, json)
Hash identifier:          HVbMdLdRCXuOSgsD0P62YEqeR/plp+0gTOcFd5OdSFQ=
Subject key identifier:   DB:20:65:CB:AE:C4:32:10:F2:B8:33:59:41:AD:59:A5:CB:81:D3:D3
Certificate issuer:       /CN=741b6a9d-4a31-4062-8784-4f1a436ab121
Certificate serial:       010D0C9F43285847D999EE8E6CC6C76032E04AC0
Authority key identifier: B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/7916e50c-664f-3512-92cb-34931aefe663.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     400478
IP address blocks:        173.243.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:ee:8e:6c:c6:c7:60:32:e0:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741b6a9d-4a31-4062-8784-4f1a436ab121
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=57220744-7e28-4d60-8675-a8a7f3db2596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:60:0b:60:8f:eb:df:de:1f:e5:2e:73:e1:
                    28:54:87:3c:fd:93:1c:0d:9b:86:3d:8b:d3:9a:0e:
                    18:f8:29:07:b1:a0:de:0a:96:69:a2:93:57:bb:b4:
                    52:0a:c0:30:55:be:ad:52:62:0a:da:19:3e:3e:5e:
                    49:23:94:65:5e:13:a6:95:8f:4f:77:69:f0:16:93:
                    54:9e:da:16:30:cb:47:9e:28:bd:ce:4e:02:1f:92:
                    e0:32:50:13:db:60:d5:e6:9b:6f:fb:fd:e3:42:1e:
                    e6:ab:76:df:99:15:a2:77:76:75:9e:d6:d8:da:4d:
                    5f:3e:dc:a1:d4:c2:70:7a:6f:e8:e8:bc:d9:f3:e2:
                    97:dd:6b:69:af:88:c4:61:08:e6:5d:3c:7a:1d:83:
                    60:21:9d:b5:65:03:9b:a6:7b:ba:ea:7e:dc:4a:2f:
                    99:3a:c7:62:90:74:bc:6c:4f:20:f2:91:07:d2:09:
                    e2:09:0e:a6:7a:52:f5:c7:25:4b:fd:10:ec:6c:de:
                    50:6b:0c:d2:74:8f:7d:38:cf:4f:22:c8:34:bf:a6:
                    d6:80:7c:aa:98:5d:a3:6c:d2:c5:a3:20:02:0a:93:
                    9b:01:c6:86:c1:1b:16:14:83:d7:a8:66:6e:08:27:
                    d2:89:2e:7c:89:f7:8a:17:cf:3c:ea:b4:fe:df:c7:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:65:CB:AE:C4:32:10:F2:B8:33:59:41:AD:59:A5:CB:81:D3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/7916e50c-664f-3512-92cb-34931aefe663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl

            X509v3 Authority Key Identifier:
                keyid:B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:6a:bd:a2:d4:4f:3c:89:ee:4c:e5:ed:a5:db:7e:44:e8:
         6e:2a:db:6b:b6:88:d5:fc:bd:33:a4:86:6a:03:8a:65:7a:99:
         a6:cf:9f:94:7f:7b:e6:b3:e5:ca:d2:1b:1e:ec:63:5b:fe:61:
         eb:1f:2c:26:f9:74:69:70:43:99:d7:11:10:59:83:f3:52:6f:
         b1:6d:d6:f1:32:57:12:0c:29:0a:27:8a:20:2e:9b:6f:e0:4d:
         31:65:0e:c1:c5:c8:f5:29:66:f0:9a:85:d1:e9:34:16:92:5f:
         56:56:97:cb:de:9d:85:59:83:57:a4:65:53:1e:6d:ee:82:6a:
         0e:68:e1:03:9a:c6:a6:43:02:48:38:82:54:8d:60:b9:15:af:
         91:b7:79:80:2d:30:99:19:15:a3:e1:10:80:47:4e:66:7f:32:
         d9:9c:73:85:f7:5e:66:f8:c2:e4:29:3a:3d:e1:9b:98:54:08:
         89:65:b0:25:d8:7d:1b:b5:8f:27:ec:c3:47:97:c5:ce:e0:f9:
         2d:f0:9d:83:1f:3e:d8:dd:4d:3e:b4:62:e5:5b:84:4f:4d:99:
         83:4b:57:85:87:77:eb:b4:c3:cd:8a:8c:32:f5:f1:dd:15:39:
         fb:73:ea:45:d6:77:70:ca:72:83:d8:d9:90:5c:bd:59:a2:ec:
         28:cb:dc:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZme6ObMbHYDLgSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQxYjZhOWQtNGEzMS00MDYyLTg3ODQtNGYxYTQzNmFi
MTIxMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
NTcyMjA3NDQtN2UyOC00ZDYwLTg2NzUtYThhN2YzZGIyNTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd1gC2CP69/eH+Uuc+EoVIc8/ZMcDZuGPYvT
mg4Y+CkHsaDeCpZpopNXu7RSCsAwVb6tUmIK2hk+Pl5JI5RlXhOmlY9Pd2nwFpNU
ntoWMMtHnii9zk4CH5LgMlAT22DV5ptv+/3jQh7mq3bfmRWid3Z1ntbY2k1fPtyh
1MJwem/o6LzZ8+KX3Wtpr4jEYQjmXTx6HYNgIZ21ZQObpnu66n7cSi+ZOsdikHS8
bE8g8pEH0gniCQ6melL1xyVL/RDsbN5QawzSdI99OM9PIsg0v6bWgHyqmF2jbNLF
oyACCpObAcaGwRsWFIPXqGZuCCfSiS58ifeKF8886rT+38ftgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsgZcuuxDIQ8rgzWUGtWaXLgdPTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NDFi
NmE5ZC00YTMxLTQwNjItODc4NC00ZjFhNDM2YWIxMjEvNzkxNmU1MGMtNjY0Zi0z
NTEyLTkyY2ItMzQ5MzFhZWZlNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzQxYjZhOWQtNGEzMS00MDYyLTg3
ODQtNGYxYTQzNmFiMTIxLzc0MWI2YTlkLTRhMzEtNDA2Mi04Nzg0LTRmMWE0MzZh
YjEyMS5jcmwwHwYDVR0jBBgwFoAUs/x/DMrc+eQOtWJs62UDFIwCz08wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83NDFiNmE5ZC00YTMxLTQwNjItODc4NC00ZjFh
NDM2YWIxMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9var2i1E88ie5M5e2l235E6G4q22u2iNX8vTOkhmoDimV6mabPn5R/
e+az5crSGx7sY1v+YesfLCb5dGlwQ5nXERBZg/NSb7Ft1vEyVxIMKQoniiAum2/g
TTFlDsHFyPUpZvCahdHpNBaSX1ZWl8venYVZg1ekZVMebe6Cag5o4QOaxqZDAkg4
glSNYLkVr5G3eYAtMJkZFaPhEIBHTmZ/Mtmcc4X3Xmb4wuQpOj3hm5hUCIllsCXY
fRu1jyfsw0eXxc7g+S3wnYMfPtjdTT60YuVbhE9NmYNLV4WHd+u0w82KjDL18d0V
Oftz6kXWd3DKcoPY2ZBcvVmi7CjL3Hg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:17 2024 by rpki-client on console-ams.rpki-client.org