Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d2ffff-fec2-3abd-b8e1-72a65f7d8832.roa
File:                     b3d2ffff-fec2-3abd-b8e1-72a65f7d8832.roa (raw, json)
Hash identifier:          Xf0sTNOMhUTrTqRpusj2e7FmNe2UceiR9UUXL/nDmdE=
Subject key identifier:   60:2F:3D:8F:8F:C5:D7:BD:80:77:BA:E9:D0:C7:F0:B0:19:DD:04:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC9166546F17E5DECD7228F
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d2ffff-fec2-3abd-b8e1-72a65f7d8832.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     36498
IP address blocks:        208.37.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:16:65:46:f1:7e:5d:ec:d7:22:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=47ddc146-8a04-4a2a-8214-7ca289514dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:b8:5c:a6:d6:47:b3:95:d2:07:e9:53:e9:
                    1a:24:14:04:10:94:99:94:33:36:05:f6:09:80:ac:
                    6b:b1:f4:37:96:82:b0:3d:df:4c:cc:54:86:30:d8:
                    10:ed:84:e5:5b:31:9c:6b:29:1b:89:e5:b4:63:af:
                    6a:bd:56:89:4c:ac:03:75:93:f2:50:6c:c3:2a:82:
                    56:f6:a7:df:af:02:b0:5d:cc:4b:37:12:96:11:e9:
                    68:31:ab:6b:3e:36:48:88:5c:df:80:40:68:8c:15:
                    d6:12:27:c8:93:80:0b:93:47:19:70:78:61:56:54:
                    27:99:68:92:7e:31:a2:fc:ea:55:f2:0c:ab:e3:bb:
                    bd:1e:0f:35:09:f0:8c:dc:0b:22:86:2d:ea:df:0f:
                    12:a0:f0:69:64:f9:13:6f:01:aa:c7:7f:83:a2:89:
                    a1:c2:bd:24:ab:e6:33:52:b9:e2:f3:65:2d:ff:49:
                    01:c3:8b:b4:f8:27:07:8b:d1:2f:d4:3a:eb:f2:d4:
                    45:26:61:54:63:af:e4:86:16:a2:21:c3:4d:f6:ce:
                    cd:34:62:55:00:b2:9e:19:05:c6:47:25:8e:4d:9b:
                    e8:c7:a8:91:e7:b3:e9:82:17:57:3f:ea:fe:df:ff:
                    41:2f:45:da:29:74:5a:14:a0:3d:15:f8:cc:46:c5:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:3D:8F:8F:C5:D7:BD:80:77:BA:E9:D0:C7:F0:B0:19:DD:04:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d2ffff-fec2-3abd-b8e1-72a65f7d8832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.37.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:01:b6:a7:db:6a:81:8d:68:7e:fd:b8:fa:cf:37:ec:34:
         36:19:39:d4:c7:df:33:e9:8d:23:67:8d:af:11:44:cd:10:07:
         8f:fa:63:78:0f:ce:70:b3:02:12:f3:bf:4a:07:02:f0:33:f7:
         6c:dd:5f:f7:a6:c0:80:59:2f:3d:7e:8f:a6:24:ef:99:d1:f2:
         42:ab:04:7c:1e:47:77:92:8f:37:d2:1d:23:a5:1d:3e:4c:16:
         94:c2:8a:fd:c8:44:3f:ca:63:4f:01:a4:b1:3b:58:42:09:e6:
         17:e4:44:32:c5:77:03:fd:88:1b:f3:83:f1:dc:90:68:68:96:
         0b:3c:ad:7f:6b:8e:63:3a:20:4d:5e:61:38:a7:59:82:88:65:
         0d:9e:35:f6:46:69:6b:86:d8:7d:2e:25:e0:ae:c3:fa:10:09:
         01:22:ae:cc:e7:3b:d7:06:51:60:28:1a:92:c1:88:fa:2d:3d:
         9e:c0:fe:32:f6:a3:80:26:e6:ca:86:04:6d:e9:88:01:a6:69:
         d6:67:e5:79:25:32:5d:5f:12:1c:ca:01:d6:ec:3c:09:1b:81:
         bd:df:a2:78:6a:e7:6a:c9:87:02:73:e0:e2:42:e0:4a:87:ca:
         ca:a8:3c:9e:53:64:63:00:ec:46:e5:5e:65:d7:9d:21:46:f7:
         3a:f4:a4:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyRZlRvF+XezXIo8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
NDdkZGMxNDYtOGEwNC00YTJhLTgyMTQtN2NhMjg5NTE0ZGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz64XKbWR7OV0gfpU+kaJBQEEJSZlDM2BfYJ
gKxrsfQ3loKwPd9MzFSGMNgQ7YTlWzGcaykbieW0Y69qvVaJTKwDdZPyUGzDKoJW
9qffrwKwXcxLNxKWEeloMatrPjZIiFzfgEBojBXWEifIk4ALk0cZcHhhVlQnmWiS
fjGi/OpV8gyr47u9Hg81CfCM3Asihi3q3w8SoPBpZPkTbwGqx3+Doomhwr0kq+Yz
Urni82Ut/0kBw4u0+CcHi9Ev1Drr8tRFJmFUY6/khhaiIcNN9s7NNGJVALKeGQXG
RyWOTZvox6iR57PpghdXP+r+3/9BL0XaKXRaFKA9FfjMRsVVbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAvPY+Pxde9gHe66dDH8LAZ3QREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjNkMmZmZmYtZmVjMi0z
YWJkLWI4ZTEtNzJhNjVmN2Q4ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0CVuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9FAban22qBjWh+/bj6zzfsNDYZOdTH3zPpjSNnja8RRM0QB4/6Y3gP
znCzAhLzv0oHAvAz92zdX/emwIBZLz1+j6Yk75nR8kKrBHweR3eSjzfSHSOlHT5M
FpTCiv3IRD/KY08BpLE7WEIJ5hfkRDLFdwP9iBvzg/HckGholgs8rX9rjmM6IE1e
YTinWYKIZQ2eNfZGaWuG2H0uJeCuw/oQCQEirsznO9cGUWAoGpLBiPotPZ7A/jL2
o4Am5sqGBG3piAGmadZn5XklMl1fEhzKAdbsPAkbgb3fonhq52rJhwJz4OJC4EqH
ysqoPJ5TZGMA7EblXmXXnSFG9zr0pMs=
-----END CERTIFICATE-----
Generated at Sat May 18 16:15:44 2024 by rpki-client on console-ams.rpki-client.org