Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c74e02d-6ab7-3712-ac10-6573131a6f46.roa
File:                     1c74e02d-6ab7-3712-ac10-6573131a6f46.roa (raw, json)
Hash identifier:          +3tys4QT6zaL1a6eZCfZvWeRPK+YYjkRu38bMskyabA=
Subject key identifier:   C4:C1:1C:4A:A4:50:60:B5:4D:60:73:55:BA:B1:2D:35:48:12:34:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474420C01078E4FE4EFD03E980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c74e02d-6ab7-3712-ac10-6573131a6f46.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     701
IP address blocks:        141.155.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:c0:10:78:e4:fe:4e:fd:03:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=ccf7b997-595e-4f59-acb7-b8e3478d32a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:19:d2:63:4d:73:29:29:09:ae:a4:79:39:0c:
                    d0:c3:07:5d:fb:93:44:2b:68:75:a4:4c:f3:05:06:
                    ae:a5:31:b4:c6:30:e0:2a:f8:6b:65:c8:a5:0b:b7:
                    62:27:fa:73:cd:8e:d9:18:47:da:f9:3d:8b:54:fc:
                    c0:7f:66:6d:44:7e:a6:8b:e5:d0:90:0b:3d:47:7d:
                    46:34:e6:a9:d5:73:58:f4:21:02:3d:0c:95:ca:42:
                    ea:ca:5e:35:56:c8:ca:b4:c9:12:eb:85:e5:e9:6c:
                    45:f3:d8:ea:68:4e:a5:53:00:1b:82:98:18:42:69:
                    f4:1c:ff:07:c0:40:e9:73:7f:fc:86:79:3a:13:8e:
                    7d:a1:aa:7b:f7:1c:c3:fd:56:12:f4:38:00:3f:54:
                    6e:71:e0:b1:25:2f:56:34:cf:a3:15:95:4c:a9:03:
                    5f:66:1f:da:7e:93:36:65:1b:bd:72:cd:49:f6:49:
                    7c:ba:9a:e3:69:25:ad:8f:19:05:e2:0b:ba:f3:d5:
                    11:f3:da:1c:2c:4e:27:78:27:71:bb:fa:20:98:26:
                    82:06:e0:4f:fd:62:1a:ec:23:35:a0:0b:91:23:bf:
                    8b:19:7d:b4:ac:54:53:e2:30:7c:c5:45:eb:d8:d9:
                    56:85:c4:aa:71:44:12:66:5b:de:e6:c8:fa:0b:e4:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C1:1C:4A:A4:50:60:B5:4D:60:73:55:BA:B1:2D:35:48:12:34:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c74e02d-6ab7-3712-ac10-6573131a6f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:18:eb:f9:61:79:3f:eb:0c:88:93:1d:2d:cd:e4:cd:42:
         82:22:cb:3c:40:99:e1:29:fd:e5:7e:97:02:d0:2b:c5:6a:73:
         28:a9:64:05:1a:b1:d9:e4:13:c7:5a:f7:fa:f1:a3:4e:2b:d8:
         00:e6:1e:32:b5:90:5d:12:31:2f:df:ca:08:b6:9c:85:c3:e0:
         71:90:64:eb:f4:10:a3:87:be:75:ab:bd:0c:d8:54:53:a0:9c:
         c9:b3:77:60:a8:f5:88:89:93:35:be:fa:e1:5f:80:83:17:b6:
         35:da:02:e6:c8:1d:2e:78:bc:c3:16:97:d5:a2:20:f1:e8:38:
         30:e8:d7:c5:4a:40:8f:13:f6:88:08:00:6c:ce:22:35:f9:d6:
         27:bb:1d:7c:4e:3e:bb:2d:37:b7:88:cf:29:d0:4a:0f:15:5b:
         8a:13:b3:9f:3e:9e:5f:4b:c6:a7:0f:b4:f0:81:77:f1:96:23:
         4c:32:2d:fc:a8:23:96:29:c2:d1:31:2f:82:28:e2:d7:3b:7c:
         8b:32:4a:53:02:47:82:3e:4e:84:1c:42:69:6f:98:37:c7:0b:
         37:bc:e0:f2:bd:82:5e:45:ec:f5:fb:72:22:f8:2e:47:4e:21:
         12:b0:b9:ec:57:45:33:0f:ff:d2:ae:a6:42:91:70:fc:92:94:
         ba:73:45:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEIMAQeOT+Tv0D6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
Y2NmN2I5OTctNTk1ZS00ZjU5LWFjYjctYjhlMzQ3OGQzMmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBnSY01zKSkJrqR5OQzQwwdd+5NEK2h1pEzz
BQaupTG0xjDgKvhrZcilC7diJ/pzzY7ZGEfa+T2LVPzAf2ZtRH6mi+XQkAs9R31G
NOap1XNY9CECPQyVykLqyl41VsjKtMkS64Xl6WxF89jqaE6lUwAbgpgYQmn0HP8H
wEDpc3/8hnk6E459oap79xzD/VYS9DgAP1RuceCxJS9WNM+jFZVMqQNfZh/afpM2
ZRu9cs1J9kl8uprjaSWtjxkF4gu689UR89ocLE4neCdxu/ogmCaCBuBP/WIa7CM1
oAuRI7+LGX20rFRT4jB8xUXr2NlWhcSqcUQSZlve5sj6C+S9iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTBHEqkUGC1TWBzVbqxLTVIEjTCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWM3NGUwMmQtNmFiNy0z
NzEyLWFjMTAtNjU3MzEzMWE2ZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZsoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfXGOv5YXk/6wyIkx0tzeTNQoIiyzxAmeEp/eV+lwLQK8VqcyipZAUa
sdnkE8da9/rxo04r2ADmHjK1kF0SMS/fygi2nIXD4HGQZOv0EKOHvnWrvQzYVFOg
nMmzd2Co9YiJkzW++uFfgIMXtjXaAubIHS54vMMWl9WiIPHoODDo18VKQI8T9ogI
AGzOIjX51ie7HXxOPrstN7eIzynQSg8VW4oTs58+nl9LxqcPtPCBd/GWI0wyLfyo
I5YpwtExL4Io4tc7fIsySlMCR4I+ToQcQmlvmDfHCze84PK9gl5F7PX7ciL4LkdO
IRKwuexXRTMP/9KupkKRcPySlLpzRQo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:14 2024 by rpki-client on console-ams.rpki-client.org