Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa97782e-31ca-3c5a-8f11-b58ee6592f25.roa
File:                     fa97782e-31ca-3c5a-8f11-b58ee6592f25.roa (raw, json)
Hash identifier:          NbuSDittfll0Ge2WquARGkm9Zc3S9Vabhgj7M+UBaTA=
Subject key identifier:   6B:41:53:D5:2F:EE:53:84:C1:EA:66:CB:27:BB:F4:FE:FD:3A:15:DA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844ED6A9C8BF70FD762B31FAC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa97782e-31ca-3c5a-8f11-b58ee6592f25.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     397216
IP address blocks:        204.74.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:9c:8b:f7:0f:d7:62:b3:1f:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=6c5e90ce-171b-4ec2-a972-e749bef2ec4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:ac:49:5c:aa:01:8d:d8:ac:79:38:5c:51:
                    69:99:0e:21:f9:0a:22:3a:af:00:ba:b8:e1:3a:9e:
                    30:02:94:cc:a9:c6:1f:65:00:1e:80:de:4c:ab:28:
                    5c:b2:e0:7c:ba:79:a3:1f:77:46:fc:38:4f:c0:ff:
                    97:13:30:73:30:30:16:3a:97:31:0b:09:59:6c:81:
                    2b:a2:71:e5:6f:5c:5d:4f:dc:b9:30:f4:84:eb:85:
                    d2:fe:20:04:71:96:d1:e9:96:e5:61:78:a0:42:76:
                    4a:d3:6d:f2:65:d6:ab:95:9f:b5:c5:ac:66:17:fb:
                    a5:50:5a:c4:3c:44:84:e9:54:5a:9e:13:94:4b:77:
                    49:90:2e:7d:42:67:48:d4:1d:ca:cf:10:26:88:5f:
                    05:41:c5:51:9d:53:6f:29:38:90:6c:82:e6:65:af:
                    ae:c3:2c:c8:4a:4a:88:d0:87:7c:c3:2b:75:29:3f:
                    2c:45:1d:3e:7d:88:be:04:71:6e:59:0e:38:2c:77:
                    ec:bd:e8:71:c1:1f:a9:9b:08:31:d6:7b:98:75:28:
                    dc:7b:a2:c0:58:f3:65:9a:20:54:bc:63:5c:65:d4:
                    68:c5:ed:3b:8a:67:80:16:2a:47:68:4a:fb:7d:48:
                    28:ef:7f:ba:21:08:84:ab:4f:39:b3:09:be:2b:99:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:41:53:D5:2F:EE:53:84:C1:EA:66:CB:27:BB:F4:FE:FD:3A:15:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa97782e-31ca-3c5a-8f11-b58ee6592f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:f9:04:42:a2:69:d2:2f:91:06:91:ca:a4:f8:9f:c3:a8:
         99:cc:e0:7b:03:6b:8e:12:ef:ee:8c:09:e8:23:d8:87:0c:0e:
         e1:e7:3c:e9:19:10:ac:08:4a:ef:43:6b:e9:b3:e1:13:c6:71:
         26:fc:a0:63:b3:38:5e:9b:05:bb:46:70:4f:ac:bc:58:c3:f5:
         40:aa:c7:04:eb:60:d8:6b:c7:e1:2a:c4:2a:44:81:82:75:bd:
         2b:c3:6a:59:b6:20:02:d5:d3:93:83:d9:29:d1:22:5b:10:94:
         14:36:55:29:66:3a:5e:47:f8:4a:1d:a9:0e:69:70:4b:43:93:
         e7:64:8e:bf:2d:55:6d:5d:15:b6:56:aa:39:9f:78:d3:29:df:
         53:ee:54:31:38:9b:f6:52:ca:bd:3f:ad:44:65:b4:5e:44:6f:
         73:17:80:4c:0d:7f:df:ca:2a:ff:68:01:9d:31:54:56:99:7e:
         ef:be:17:18:a7:3b:5e:01:43:48:8c:a8:b9:69:85:7f:b3:b8:
         c1:a8:b4:50:9a:a5:38:93:43:6b:37:d4:a0:fc:d8:9d:3e:76:
         e5:d4:51:24:5b:7a:13:d5:f0:b7:3c:c9:5d:a6:6c:96:74:71:
         dd:a1:2b:eb:b5:4f:5a:1f:00:6a:5d:bb:77:27:e2:e4:73:b7:
         a5:c2:12:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETtapyL9w/XYrMfrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDIxODAyMDAyNVoXDTI0MDUxODAxMDAyNVowLzEtMCsGA1UEAxMk
NmM1ZTkwY2UtMTcxYi00ZWMyLWE5NzItZTc0OWJlZjJlYzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCysSVyqAY3YrHk4XFFpmQ4h+QoiOq8Aurjh
Op4wApTMqcYfZQAegN5MqyhcsuB8unmjH3dG/DhPwP+XEzBzMDAWOpcxCwlZbIEr
onHlb1xdT9y5MPSE64XS/iAEcZbR6ZblYXigQnZK023yZdarlZ+1xaxmF/ulUFrE
PESE6VRanhOUS3dJkC59QmdI1B3KzxAmiF8FQcVRnVNvKTiQbILmZa+uwyzISkqI
0Id8wyt1KT8sRR0+fYi+BHFuWQ44LHfsvehxwR+pmwgx1nuYdSjce6LAWPNlmiBU
vGNcZdRoxe07imeAFipHaEr7fUgo73+6IQiEq085swm+K5k7pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtBU9Uv7lOEwepmyye79P79OhXaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmE5Nzc4MmUtMzFjYS0z
YzVhLThmMTEtYjU4ZWU2NTkyZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkr+QRComnSL5EGkcqk+J/DqJnM4HsDa44S7+6MCegj2IcMDuHnPOkZ
EKwISu9Da+mz4RPGcSb8oGOzOF6bBbtGcE+svFjD9UCqxwTrYNhrx+EqxCpEgYJ1
vSvDalm2IALV05OD2SnRIlsQlBQ2VSlmOl5H+EodqQ5pcEtDk+dkjr8tVW1dFbZW
qjmfeNMp31PuVDE4m/ZSyr0/rURltF5Eb3MXgEwNf9/KKv9oAZ0xVFaZfu++Fxin
O14BQ0iMqLlphX+zuMGotFCapTiTQ2s31KD82J0+duXUUSRbehPV8Lc8yV2mbJZ0
cd2hK+u1T1ofAGpdu3cn4uRzt6XCEsc=
-----END CERTIFICATE-----
Generated at Tue May 7 17:02:45 2024 by rpki-client on console-ams.rpki-client.org