Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c74508d0-4d22-3b76-90d8-3199a8615cad.roa
File:                     c74508d0-4d22-3b76-90d8-3199a8615cad.roa (raw, json)
Hash identifier:          E3ouAOcrLEERaft+3W49Wh42xiyhyL7BBkATYtsuke8=
Subject key identifier:   02:0B:97:24:98:36:FA:0C:9E:57:9A:49:01:65:C0:A3:8B:A0:8D:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB2E4E65CB7FA3BD66D9940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c74508d0-4d22-3b76-90d8-3199a8615cad.roa
Signing time:             Fri 03 May 2024 01:10:07 +0000
ROA not before:           Fri 03 May 2024 01:10:07 +0000
ROA not after:            Thu 01 Aug 2024 01:10:07 +0000
asID:                     6167
IP address blocks:        72.108.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b2:e4:e6:5c:b7:fa:3b:d6:6d:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:07 2024 GMT
            Not After : Aug  1 01:10:07 2024 GMT
        Subject: CN=b05e6bb1-4b51-4050-add6-bc8cefb275f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0b:d2:e6:0f:f9:5a:75:52:e7:71:1a:8b:3d:
                    c8:ac:e3:77:7b:7f:dd:6c:ac:95:d8:85:a5:24:42:
                    08:90:87:27:98:d6:e0:77:49:d0:e5:81:8f:c4:db:
                    8b:31:26:80:a6:72:5a:ca:a4:d8:59:44:09:89:c7:
                    37:16:76:38:bb:21:b0:17:77:81:31:90:70:55:69:
                    a5:57:15:97:1d:77:16:d1:42:21:5a:f0:32:1c:e9:
                    20:32:8c:a3:08:9c:c9:74:4c:3b:a1:bf:dd:bd:4c:
                    7f:55:77:0f:c8:32:8e:38:cc:26:95:06:9c:cf:3e:
                    90:86:8a:40:c3:db:c1:af:e6:e9:30:5d:83:d2:d8:
                    90:b7:7d:dd:d4:69:f1:dd:05:e9:a5:6a:57:bc:f7:
                    c3:5d:21:92:d5:5a:da:53:43:60:01:52:49:9c:fb:
                    cb:53:34:04:d6:3d:c6:35:2a:18:22:41:48:80:d9:
                    38:64:60:dc:f1:da:9d:c8:d8:fb:36:6d:b3:1a:8d:
                    41:a0:44:7e:09:6f:e9:98:37:2d:f1:0b:06:2b:bf:
                    bd:28:29:8d:58:d1:0a:5f:5a:03:a7:28:3a:fc:c5:
                    f1:b1:a4:4c:ed:66:0f:09:a0:6a:1d:ec:3d:68:fc:
                    a4:c0:d4:97:ea:c9:48:2a:d3:c8:1c:fa:aa:32:12:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0B:97:24:98:36:FA:0C:9E:57:9A:49:01:65:C0:A3:8B:A0:8D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c74508d0-4d22-3b76-90d8-3199a8615cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:3d:f3:17:8e:d6:d1:37:06:2b:19:58:45:f5:92:e1:d5:
         7b:a5:4f:e3:d0:07:a1:d6:2e:23:b5:e3:09:b5:d7:d9:ae:2e:
         97:e2:6f:2b:18:78:cd:42:90:e5:3f:ef:8c:43:be:e9:b6:fe:
         c4:86:02:de:36:0c:78:53:59:83:49:3f:3a:a7:63:25:42:8b:
         ec:7c:38:68:fa:b6:4e:3f:5a:7b:ea:05:74:e3:e2:f5:74:dd:
         c1:14:32:3d:4c:1d:b2:62:d8:c9:24:c4:ee:95:6f:0a:a0:28:
         14:a8:b0:6b:72:d6:2d:65:91:2e:81:d6:ce:4f:9e:45:e6:91:
         e6:32:a2:23:e9:de:b0:fd:79:4e:7e:c9:e5:70:0e:fa:bf:8e:
         d8:75:1f:08:40:a1:0f:81:85:79:4d:6d:b8:6d:12:a6:d7:21:
         52:61:5f:ff:3c:1a:7d:48:e0:d4:c1:0b:fc:99:86:c3:9b:c4:
         ad:da:1a:d1:50:75:4a:b1:eb:64:9d:8b:01:60:94:39:9a:2b:
         cf:d2:a6:27:db:81:4c:c2:fd:14:8e:c4:8a:82:e8:a7:fc:eb:
         95:71:66:e2:e4:d2:d0:a6:5c:59:54:1d:b1:af:da:5b:d7:bf:
         0e:c9:9a:05:4e:26:12:b7:2e:d6:a2:95:65:1d:a2:73:59:b4:
         77:38:95:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+suTmXLf6O9ZtmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUwMzAxMTAwN1oXDTI0MDgwMTAxMTAwN1owLzEtMCsGA1UEAxMk
YjA1ZTZiYjEtNGI1MS00MDUwLWFkZDYtYmM4Y2VmYjI3NWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigvS5g/5WnVS53Eaiz3IrON3e3/dbKyV2IWl
JEIIkIcnmNbgd0nQ5YGPxNuLMSaApnJayqTYWUQJicc3FnY4uyGwF3eBMZBwVWml
VxWXHXcW0UIhWvAyHOkgMoyjCJzJdEw7ob/dvUx/VXcPyDKOOMwmlQaczz6QhopA
w9vBr+bpMF2D0tiQt33d1Gnx3QXppWpXvPfDXSGS1VraU0NgAVJJnPvLUzQE1j3G
NSoYIkFIgNk4ZGDc8dqdyNj7Nm2zGo1BoER+CW/pmDct8QsGK7+9KCmNWNEKX1oD
pyg6/MXxsaRM7WYPCaBqHew9aPykwNSX6slIKtPIHPqqMhIXUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAILlySYNvoMnleaSQFlwKOLoI2LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzc0NTA4ZDAtNGQyMi0z
Yjc2LTkwZDgtMzE5OWE4NjE1Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGxBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbMPfMXjtbRNwYrGVhF9ZLh1XulT+PQB6HWLiO14wm119muLpfibysY
eM1CkOU/74xDvum2/sSGAt42DHhTWYNJPzqnYyVCi+x8OGj6tk4/WnvqBXTj4vV0
3cEUMj1MHbJi2MkkxO6VbwqgKBSosGty1i1lkS6B1s5PnkXmkeYyoiPp3rD9eU5+
yeVwDvq/jth1HwhAoQ+BhXlNbbhtEqbXIVJhX/88Gn1I4NTBC/yZhsObxK3aGtFQ
dUqx62SdiwFglDmaK8/SpifbgUzC/RSOxIqC6Kf865VxZuLk0tCmXFlUHbGv2lvX
vw7JmgVOJhK3LtailWUdonNZtHc4lXI=
-----END CERTIFICATE-----
Generated at Sun May 19 15:57:41 2024 by rpki-client on console-fra.rpki-client.org