Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957cd758-4b69-3c15-bb85-f38f0f46357d.roa
File:                     957cd758-4b69-3c15-bb85-f38f0f46357d.roa (raw, json)
Hash identifier:          tl0+kMDGQ0sFi/Ox2AbCPMSe8hlvRyqOfiToDdEIWrY=
Subject key identifier:   4D:8E:D6:FB:89:3E:71:8D:78:FE:5D:16:24:45:55:55:4E:16:71:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E6CCBD2D0CD2F86B0D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957cd758-4b69-3c15-bb85-f38f0f46357d.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.241.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e6:cc:bd:2d:0c:d2:f8:6b:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=5c13c7f1-35d1-478e-a73d-77ca531d1b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:a6:88:80:9e:fb:ba:b8:5e:f5:c3:ff:7e:
                    38:7c:e5:d9:c2:27:b8:f8:5d:0e:67:ac:8a:7a:aa:
                    40:3b:48:08:d7:db:82:26:ab:30:db:20:78:84:eb:
                    e0:57:a1:25:91:06:71:5d:0e:96:6e:ae:5a:44:36:
                    e7:98:38:ae:01:7f:60:95:72:d0:9e:24:49:07:75:
                    25:c9:66:eb:66:a0:ee:1b:70:17:d5:3f:5d:33:5c:
                    27:18:0f:4d:30:e8:a1:f4:53:f8:d9:95:3f:d7:14:
                    90:02:d0:ed:2a:33:11:04:01:ac:a0:61:1c:5a:57:
                    f3:5e:cb:9c:de:e0:f9:1f:32:83:a6:a6:46:59:22:
                    08:7a:3e:55:49:1e:82:2d:10:76:e8:ee:4c:6e:97:
                    5a:72:28:c5:84:7a:23:0d:d0:bd:5a:55:e4:d8:e4:
                    a7:33:28:74:76:ae:51:c9:b8:f0:49:4b:8d:ea:ff:
                    2c:cc:55:86:9d:0d:43:ff:6e:17:3c:91:e9:ae:0b:
                    53:2d:01:70:59:f6:8b:13:db:a8:3d:1c:f6:9b:1b:
                    99:bf:53:fc:43:2d:50:21:2d:0e:5f:cc:9a:7e:5e:
                    b0:ff:55:be:05:ce:60:75:22:7f:f8:4f:29:82:56:
                    51:49:15:c3:3a:ff:71:02:68:66:34:7c:fc:f4:03:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8E:D6:FB:89:3E:71:8D:78:FE:5D:16:24:45:55:55:4E:16:71:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957cd758-4b69-3c15-bb85-f38f0f46357d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:df:bc:14:95:63:81:c7:bb:24:5f:04:e5:11:42:1a:5a:06:
         ed:75:cb:07:00:8d:de:24:24:32:2a:16:32:30:46:c8:4c:f1:
         a4:e3:2f:5b:d7:79:19:50:a0:cc:d5:e2:cf:ae:20:9f:17:55:
         53:d1:dc:4b:ed:8a:a7:3b:b8:0a:12:0e:88:c4:be:a1:37:b4:
         20:72:da:da:c6:9b:aa:d7:d2:42:b5:35:1d:4f:22:1e:e7:e5:
         79:45:91:4e:98:c2:9c:65:cd:8f:aa:ea:67:6e:f6:f5:cb:4d:
         17:81:4d:ab:6d:5c:90:58:2b:bf:0a:14:42:cf:c1:a9:d0:9f:
         fd:5e:26:26:47:46:52:f3:82:22:11:e9:17:36:06:e7:01:a4:
         cc:55:69:15:6f:db:d5:df:6e:8b:81:5f:dd:7f:83:4c:3e:2e:
         c6:9c:62:76:cd:90:12:63:19:42:08:b0:8f:8a:20:e9:6f:22:
         5b:5b:a0:a2:21:cf:f0:d5:dc:20:fa:0f:91:87:b3:63:17:cd:
         05:ff:78:82:6d:45:b6:d9:13:fc:5a:2d:27:4f:b4:c0:84:15:
         52:02:36:98:f8:ec:84:cf:b7:c7:4c:d7:d6:cf:f9:12:31:06:
         6b:8c:8e:2a:af:21:96:f6:11:da:35:11:0e:5d:36:48:1e:dc:
         43:34:6e:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNebMvS0M0vhrDUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
NWMxM2M3ZjEtMzVkMS00NzhlLWE3M2QtNzdjYTUzMWQxYjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMamiICe+7q4XvXD/344fOXZwie4+F0OZ6yK
eqpAO0gI19uCJqsw2yB4hOvgV6ElkQZxXQ6Wbq5aRDbnmDiuAX9glXLQniRJB3Ul
yWbrZqDuG3AX1T9dM1wnGA9NMOih9FP42ZU/1xSQAtDtKjMRBAGsoGEcWlfzXsuc
3uD5HzKDpqZGWSIIej5VSR6CLRB26O5MbpdacijFhHojDdC9WlXk2OSnMyh0dq5R
ybjwSUuN6v8szFWGnQ1D/24XPJHprgtTLQFwWfaLE9uoPRz2mxuZv1P8Qy1QIS0O
X8yafl6w/1W+Bc5gdSJ/+E8pglZRSRXDOv9xAmhmNHz89AMvkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2O1vuJPnGNeP5dFiRFVVVOFnEAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTU3Y2Q3NTgtNGI2OS0z
YzE1LWJiODUtZjM4ZjBmNDYzNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbfvBSVY4HHuyRfBOURQhpaBu11ywcAjd4kJDIqFjIwRshM8aTjL1vX
eRlQoMzV4s+uIJ8XVVPR3Evtiqc7uAoSDojEvqE3tCBy2trGm6rX0kK1NR1PIh7n
5XlFkU6YwpxlzY+q6mdu9vXLTReBTattXJBYK78KFELPwanQn/1eJiZHRlLzgiIR
6Rc2BucBpMxVaRVv29XfbouBX91/g0w+LsacYnbNkBJjGUIIsI+KIOlvIltboKIh
z/DV3CD6D5GHs2MXzQX/eIJtRbbZE/xaLSdPtMCEFVICNpj47ITPt8dM19bP+RIx
BmuMjiqvIZb2Edo1EQ5dNkge3EM0bkA=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:06 2024 by rpki-client on console-fra.rpki-client.org