Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa
File:                     52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa (raw, json)
Hash identifier:          WK+uLUY6V844m+28cOkpIXOfcmsAoCZ4CO4e/NbCTCM=
Subject key identifier:   CB:03:AE:AD:64:E4:E0:73:A1:4E:0C:00:2E:56:5C:71:6D:89:32:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D642A6E5E5978504889B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        174.38.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:42:a6:e5:e5:97:85:04:88:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=e8108f2c-ce6e-4655-9523-e35addafa7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:eb:95:6a:52:79:bf:53:f9:c3:c9:18:47:
                    b9:59:08:36:4f:55:36:90:5b:11:cd:98:73:2f:ba:
                    73:1a:ad:cd:a8:c8:3d:65:93:84:84:21:67:76:7c:
                    9a:e0:66:17:6a:11:6a:78:6d:a6:5a:de:13:b3:0a:
                    5a:41:d0:2d:1d:e2:34:6c:b7:e6:4d:18:6b:c1:e7:
                    dc:79:ef:46:92:e6:5f:66:5f:bd:0c:f7:35:65:c1:
                    30:bb:87:dd:3e:77:a9:96:f2:54:35:04:dc:df:d1:
                    5e:37:70:93:16:d5:29:c5:2c:93:24:ac:2b:5f:52:
                    9b:59:2e:d5:42:6d:58:12:a9:02:bf:ed:7d:39:ca:
                    fb:58:02:c4:0c:64:5b:7c:b3:94:ff:17:a0:d0:b1:
                    c8:73:42:d3:7c:5c:9e:80:4d:b0:86:09:2c:b1:48:
                    6c:f3:34:be:39:a3:5e:21:5a:1a:1c:e4:bd:ad:d9:
                    6a:cb:55:b9:f7:a2:95:85:aa:be:da:a0:5e:4c:11:
                    e0:6e:27:e7:e2:33:30:26:70:65:a5:5e:8a:eb:0e:
                    ab:4f:6d:77:d1:17:bd:6d:cd:87:55:c0:fc:59:ae:
                    46:12:5c:39:b8:52:7e:c9:81:48:95:c4:93:c6:e4:
                    48:bf:10:e2:fe:d9:26:f8:d4:42:22:fb:b3:d6:7b:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:AE:AD:64:E4:E0:73:A1:4E:0C:00:2E:56:5C:71:6D:89:32:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.38.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:61:3c:06:9c:cf:46:b4:dc:8a:84:2b:69:0b:0a:95:37:12:
         c4:52:d2:57:e8:3e:96:22:c5:3a:25:3c:56:31:70:3d:ba:15:
         e4:78:30:42:d7:81:6a:aa:8a:e9:d9:2a:d0:26:f3:5d:94:3e:
         95:f5:b1:73:c3:04:14:df:26:20:81:c1:7f:1f:2d:78:53:7f:
         c4:3f:91:e3:1e:77:e1:b5:8f:d6:f0:c0:d3:49:1a:f3:19:5e:
         45:cd:ef:dc:e8:ea:ee:25:3c:29:6d:6c:99:76:16:96:04:21:
         23:5d:18:eb:82:0d:27:6e:71:a6:de:e4:ea:58:55:f5:1e:6f:
         bb:92:f4:91:18:ff:6d:a1:f9:f9:a3:bd:1e:d5:e0:fe:2b:4b:
         41:cd:25:6e:bf:ea:eb:90:92:f4:7b:5e:06:76:06:44:c8:32:
         48:5b:8e:4f:b7:56:6f:d2:0a:2e:b9:51:8f:89:ef:a3:98:88:
         f0:56:39:20:b3:79:c2:32:43:dc:9f:b0:b8:ce:ab:cf:99:ed:
         1c:87:57:7f:e1:9c:79:d4:8d:aa:1a:94:cc:64:b9:cc:c2:23:
         a9:d5:5b:21:82:82:4d:d6:cd:70:dd:50:d1:19:ff:04:d9:3e:
         49:42:99:a9:3e:d4:b8:a2:a6:10:3e:92:90:9a:be:41:8f:3b:
         67:0f:30:1f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdi1kKm5eWXhQSImwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
ZTgxMDhmMmMtY2U2ZS00NjU1LTk1MjMtZTM1YWRkYWZhN2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop7rlWpSeb9T+cPJGEe5WQg2T1U2kFsRzZhz
L7pzGq3NqMg9ZZOEhCFndnya4GYXahFqeG2mWt4TswpaQdAtHeI0bLfmTRhrwefc
ee9GkuZfZl+9DPc1ZcEwu4fdPneplvJUNQTc39FeN3CTFtUpxSyTJKwrX1KbWS7V
Qm1YEqkCv+19Ocr7WALEDGRbfLOU/xeg0LHIc0LTfFyegE2whgkssUhs8zS+OaNe
IVoaHOS9rdlqy1W596KVhaq+2qBeTBHgbifn4jMwJnBlpV6K6w6rT2130Re9bc2H
VcD8Wa5GElw5uFJ+yYFIlcSTxuRIvxDi/tkm+NRCIvuz1nuhWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMsDrq1k5OBzoU4MAC5WXHFtiTLiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTIwNzFhZDEtZmQxOS0z
YWE1LWI2NDEtNWUxZmI1NGMxZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBriYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaGE8BpzPRrTcioQraQsKlTcSxFLSV+g+liLFOiU8VjFwPboV5HgwQteB
aqqK6dkq0CbzXZQ+lfWxc8MEFN8mIIHBfx8teFN/xD+R4x534bWP1vDA00ka8xle
Rc3v3Ojq7iU8KW1smXYWlgQhI10Y64INJ25xpt7k6lhV9R5vu5L0kRj/baH5+aO9
HtXg/itLQc0lbr/q65CS9HteBnYGRMgySFuOT7dWb9IKLrlRj4nvo5iI8FY5ILN5
wjJD3J+wuM6rz5ntHIdXf+GcedSNqhqUzGS5zMIjqdVbIYKCTdbNcN1Q0Rn/BNk+
SUKZqT7UuKKmED6SkJq+QY87Zw8wHw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:26 2024 by rpki-client on console-ams.rpki-client.org