Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa
File:                     c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa (raw, json)
Hash identifier:          qvnWlVbLnSXaMqNCiVcOQDbUAjFjM6N8o4stXjjvQQw=
Subject key identifier:   78:A2:B0:8D:F8:8E:23:79:65:5E:5A:40:21:9B:0D:E2:06:42:0C:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8B68C17AA01953E4E440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.41.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8b:68:c1:7a:a0:19:53:e4:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=25f1cc42-eb24-4b7b-965e-34bb2287b7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:dd:93:9f:5c:07:b1:ec:67:18:3c:45:43:
                    df:31:9c:35:dc:74:e3:41:eb:c8:b8:e7:26:03:46:
                    f1:e4:83:99:95:ee:b6:e2:55:d8:56:7f:b6:37:60:
                    3d:03:cb:12:57:7b:f7:c7:79:8f:ef:7f:52:1f:6b:
                    9c:fc:37:67:e7:9f:b4:95:78:84:be:ac:11:52:9a:
                    3b:1f:9a:2c:6c:d8:f8:fe:be:3a:93:bb:82:7f:fb:
                    dc:0f:b4:76:ff:ac:96:ae:a1:5a:72:52:ab:ab:53:
                    9e:23:31:02:32:83:75:5d:e9:f9:92:c3:e4:fb:53:
                    ad:b3:7b:ce:d7:5a:57:a4:7b:8a:0c:27:a3:1a:00:
                    c0:20:b6:22:e3:2d:98:20:ee:0c:93:f5:de:c7:5b:
                    9c:6f:bb:c8:f8:32:c0:0b:6a:86:29:df:02:52:cf:
                    f9:4b:93:ec:17:38:09:50:97:e0:5f:c6:08:a7:11:
                    ae:26:1e:a6:9d:46:9b:f6:52:7b:09:14:68:3b:cf:
                    18:b1:68:ff:df:6d:5c:07:c2:ad:80:df:1b:46:b9:
                    98:39:c4:0e:89:1c:84:37:9a:b7:d9:51:06:c3:08:
                    fe:ee:32:35:bf:97:22:52:97:15:9c:ae:14:97:41:
                    02:7e:75:a4:64:10:fd:dd:2f:41:97:eb:84:bb:9f:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:B0:8D:F8:8E:23:79:65:5E:5A:40:21:9B:0D:E2:06:42:0C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:31:88:02:54:80:03:5b:95:d7:50:e2:15:66:98:93:e6:44:
         3e:84:a0:4a:4c:19:5f:3b:00:fe:27:0e:e5:13:ac:8f:0d:7b:
         24:de:e7:f7:03:4b:5d:04:34:fb:3f:a2:38:a2:0e:a2:ae:ad:
         66:41:c8:c8:28:90:ed:8b:04:40:6c:99:4a:96:e6:f7:8d:f4:
         5c:a9:ea:87:80:c0:9f:50:c4:e5:0c:29:6c:25:16:98:20:fb:
         7b:a0:d6:ff:a8:e9:d0:35:50:36:7e:aa:41:a4:84:a4:75:ec:
         3b:0a:12:d0:c2:d2:d3:6b:b7:16:f9:64:b6:58:5d:08:cd:ea:
         bd:ac:ee:20:a0:fc:72:c4:ff:7d:b2:00:e3:89:8a:7b:37:83:
         d7:0a:bc:a3:ad:80:18:14:7b:cb:23:47:5e:f8:fb:f8:29:34:
         41:68:5b:87:cf:3b:c0:47:ed:45:d6:c5:01:84:99:2f:9a:84:
         af:68:98:c5:4b:1c:83:7f:63:ca:ed:ca:e4:3e:47:7e:ce:c9:
         e4:81:67:34:c1:27:e7:81:7a:39:72:06:db:58:58:37:de:04:
         0c:e5:18:b7:67:ba:7d:ce:7b:50:e4:ab:20:ad:97:2f:e7:fa:
         fe:65:ef:cc:fe:95:26:a4:5a:a1:6e:11:0c:c9:6f:5d:ea:a4:
         b6:e8:97:56
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdTe4towXqgGVPk5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
MjVmMWNjNDItZWIyNC00YjdiLTk2NWUtMzRiYjIyODdiN2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ7dk59cB7HsZxg8RUPfMZw13HTjQevIuOcm
A0bx5IOZle624lXYVn+2N2A9A8sSV3v3x3mP739SH2uc/Ddn55+0lXiEvqwRUpo7
H5osbNj4/r46k7uCf/vcD7R2/6yWrqFaclKrq1OeIzECMoN1Xen5ksPk+1Ots3vO
11pXpHuKDCejGgDAILYi4y2YIO4Mk/Xex1ucb7vI+DLAC2qGKd8CUs/5S5PsFzgJ
UJfgX8YIpxGuJh6mnUab9lJ7CRRoO88YsWj/321cB8KtgN8bRrmYOcQOiRyEN5q3
2VEGwwj+7jI1v5ciUpcVnK4Ul0ECfnWkZBD93S9Bl+uEu59GrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHiisI34jiN5ZV5aQCGbDeIGQgz9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzBjODljOWYtYmQzZi0z
MTQ1LTgxOGEtYzczNjZhY2JmYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbCkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmjGIAlSAA1uV11DiFWaYk+ZEPoSgSkwZXzsA/icO5ROsjw17JN7n9wNL
XQQ0+z+iOKIOoq6tZkHIyCiQ7YsEQGyZSpbm9430XKnqh4DAn1DE5QwpbCUWmCD7
e6DW/6jp0DVQNn6qQaSEpHXsOwoS0MLS02u3FvlktlhdCM3qvazuIKD8csT/fbIA
44mKezeD1wq8o62AGBR7yyNHXvj7+Ck0QWhbh887wEftRdbFAYSZL5qEr2iYxUsc
g39jyu3K5D5Hfs7J5IFnNMEn54F6OXIG21hYN94EDOUYt2e6fc57UOSrIK2XL+f6
/mXvzP6VJqRaoW4RDMlvXeqktuiXVg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:52 2024 by rpki-client on console-fra.rpki-client.org