Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa
File:                     b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa (raw, json)
Hash identifier:          F/H+zV3z6XcPJqfDi4A9+ATEb/lUJh83KVahkqSrjr8=
Subject key identifier:   56:28:5C:94:0C:5C:76:84:A4:2E:78:02:53:3E:C2:78:F7:E8:7B:A9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E1984038A007D1BCE200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.235.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e1:98:40:38:a0:07:d1:bc:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=ce7518a1-8360-44e4-b8d1-37c46a2d6b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:11:60:34:fe:88:23:03:22:d3:32:d1:32:18:
                    66:b9:55:b4:60:55:d5:ed:ac:90:da:33:c8:c6:66:
                    7e:35:ab:60:f3:fb:d9:03:92:98:08:09:68:1f:09:
                    c4:6d:88:57:43:c1:13:be:be:60:41:64:e4:56:d6:
                    a5:18:8c:dc:a8:b0:66:58:18:90:8a:2e:88:4c:55:
                    0a:b0:7f:51:52:00:27:21:72:2a:5e:17:93:83:f0:
                    e8:a3:90:03:93:81:bd:f3:3f:bc:00:88:42:28:c1:
                    fd:4c:a7:9d:b4:d2:b7:2f:ac:c6:a8:1f:c6:69:1e:
                    08:16:17:db:bb:c5:6e:80:3f:ca:f1:b1:e7:c7:a5:
                    7a:dc:36:5c:6c:4e:7c:3d:84:7e:77:67:06:fb:c9:
                    97:b4:5a:fc:63:8d:ce:d5:8c:e5:72:c8:a4:d3:16:
                    a5:90:56:b9:d5:73:8c:0e:2a:5b:4c:87:5f:18:e1:
                    03:cc:c7:e3:08:5a:91:fc:f2:4e:c6:ee:38:58:c4:
                    72:1e:10:a1:26:39:c4:02:1e:45:7c:3b:26:24:5a:
                    91:22:b7:73:2d:12:21:af:df:1e:fe:79:63:43:71:
                    b1:15:2d:3d:21:d0:cf:6e:d6:06:aa:4a:34:f5:64:
                    fa:7c:42:e7:ea:26:2c:b1:5d:f1:b7:6c:01:3d:12:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:5C:94:0C:5C:76:84:A4:2E:78:02:53:3E:C2:78:F7:E8:7B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:44:f2:64:51:71:cd:ad:2b:34:21:f2:fe:11:a4:7d:cd:a3:
         86:02:e5:93:ee:45:a2:e2:85:44:65:b4:18:3b:4d:5e:f5:02:
         4b:d5:73:ce:33:22:17:7c:e5:76:f2:da:ed:41:59:e7:f5:83:
         2a:b1:ad:de:c8:91:bf:5e:64:92:09:a9:3b:f2:c4:19:72:f3:
         d8:50:ee:3a:19:23:37:e3:98:34:56:5f:f3:9d:e8:15:4e:4f:
         9e:dd:cb:ee:98:d9:51:5c:6d:e7:70:8f:59:97:93:89:57:ba:
         66:30:81:6d:40:87:21:7f:fc:79:49:58:df:18:a1:49:7f:a4:
         28:36:22:0b:f7:13:66:eb:c2:22:18:82:61:b9:35:16:a0:3e:
         de:7c:fa:b7:1d:ea:30:b8:42:3a:6c:ac:80:76:ac:f1:98:b9:
         5d:95:59:03:f3:dd:03:72:d5:d2:c9:a6:c4:53:ed:9f:6d:88:
         f9:6a:99:6d:e5:43:f3:de:f9:bf:4c:e9:73:45:a7:76:de:29:
         f2:41:06:0a:9c:9c:42:3a:59:99:b1:e4:77:a9:68:33:53:51:
         eb:a4:1d:f6:06:68:83:34:a3:64:9e:d5:b5:ad:e0:b6:fe:8f:
         82:12:ee:44:0f:38:7c:f8:aa:2c:af:0a:d8:ab:93:53:d3:b4:
         71:d0:1a:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNeGYQDigB9G84gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
Y2U3NTE4YTEtODM2MC00NGU0LWI4ZDEtMzdjNDZhMmQ2YjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RFgNP6IIwMi0zLRMhhmuVW0YFXV7ayQ2jPI
xmZ+Natg8/vZA5KYCAloHwnEbYhXQ8ETvr5gQWTkVtalGIzcqLBmWBiQii6ITFUK
sH9RUgAnIXIqXheTg/Doo5ADk4G98z+8AIhCKMH9TKedtNK3L6zGqB/GaR4IFhfb
u8VugD/K8bHnx6V63DZcbE58PYR+d2cG+8mXtFr8Y43O1Yzlcsik0xalkFa51XOM
DipbTIdfGOEDzMfjCFqR/PJOxu44WMRyHhChJjnEAh5FfDsmJFqRIrdzLRIhr98e
/nljQ3GxFS09IdDPbtYGqko09WT6fELn6iYssV3xt2wBPRLtFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYoXJQMXHaEpC54AlM+wnj36HupMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjczMTdkZjgtN2RjOS0z
Njk5LTk0ZTItN2RjZjEzZDVlZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrut4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJE8mRRcc2tKzQh8v4RpH3No4YC5ZPuRaLihURltBg7TV71AkvVc84z
Ihd85Xby2u1BWef1gyqxrd7Ikb9eZJIJqTvyxBly89hQ7joZIzfjmDRWX/Od6BVO
T57dy+6Y2VFcbedwj1mXk4lXumYwgW1AhyF//HlJWN8YoUl/pCg2Igv3E2brwiIY
gmG5NRagPt58+rcd6jC4QjpsrIB2rPGYuV2VWQPz3QNy1dLJpsRT7Z9tiPlqmW3l
Q/Pe+b9M6XNFp3beKfJBBgqcnEI6WZmx5HepaDNTUeukHfYGaIM0o2Se1bWt4Lb+
j4IS7kQPOHz4qiyvCtirk1PTtHHQGiE=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:15 2024 by rpki-client on console-fra.rpki-client.org