Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa
File:                     d655159a-661f-3b96-b635-e8b5d4a0a95a.roa (raw, json)
Hash identifier:          2/ui936tW+7aB2FNQIcRQrWyeblj3/WuNdHVbp5gcN0=
Subject key identifier:   39:5A:2B:15:A4:46:F3:5D:80:B4:16:3C:53:3F:0F:38:3C:92:81:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A35D9B346E393C4326EA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa
Signing time:             Fri 19 Apr 2024 01:03:51 +0000
ROA not before:           Fri 19 Apr 2024 01:03:51 +0000
ROA not after:            Thu 18 Jul 2024 01:03:51 +0000
asID:                     6167
IP address blocks:        72.96.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:35:d9:b3:46:e3:93:c4:32:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:03:51 2024 GMT
            Not After : Jul 18 01:03:51 2024 GMT
        Subject: CN=b194d4c3-a432-45c3-be93-6378ad3ebc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:99:d6:a6:a3:9d:d0:67:fb:6f:2b:7c:94:
                    d8:9e:8b:3f:fe:94:72:b5:ef:e0:a5:11:28:00:bb:
                    e4:b8:9e:43:75:87:eb:03:af:44:a9:04:9a:47:3e:
                    34:6b:7e:fc:ee:1b:98:c9:78:0b:83:04:91:e4:4f:
                    eb:d6:c4:1c:97:5f:5e:d2:33:e8:c8:35:34:b4:29:
                    24:c5:da:2e:26:0c:8f:0b:ba:a7:7d:df:0f:0e:21:
                    b4:b4:07:e7:bf:9e:b7:4a:d0:79:a3:df:35:86:db:
                    a2:52:26:77:d7:fc:b1:84:54:48:10:0a:3d:2a:7d:
                    ea:bf:b3:58:f4:da:93:c6:5d:d8:bf:3e:0f:11:bc:
                    94:3a:b7:89:aa:2f:db:00:ca:20:bb:0d:45:3d:93:
                    7f:f1:56:6a:2c:28:f4:a4:22:10:39:d7:ee:4d:92:
                    7b:15:c2:ac:88:d7:e2:9f:6f:d5:7a:1b:4e:06:41:
                    93:f7:16:08:43:ed:87:70:bb:a3:1e:8a:dc:c8:08:
                    ea:f7:97:91:98:8e:0b:4c:0e:67:87:72:4f:22:c9:
                    b2:7e:a7:66:12:dd:6e:57:94:7b:0a:91:db:a7:f2:
                    61:59:bc:7a:3f:f3:6c:37:c3:5d:57:2f:2a:bb:df:
                    90:0c:1f:2a:8f:a2:d5:9d:6f:05:c3:4f:70:8c:be:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5A:2B:15:A4:46:F3:5D:80:B4:16:3C:53:3F:0F:38:3C:92:81:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:da:82:b0:54:22:58:37:5f:0b:f8:f4:09:70:20:33:30:
         85:c6:90:5c:67:a7:69:e2:dc:86:3b:d8:00:b0:e6:ff:c0:41:
         25:dd:4f:94:ad:36:fd:4f:c1:46:b0:84:1b:da:94:32:d6:76:
         b4:b8:a5:31:a3:3f:77:85:0b:70:a2:3f:3b:46:de:22:25:f4:
         ef:87:31:82:61:5e:94:9f:31:36:22:54:ad:44:43:88:0a:63:
         db:20:f6:c0:40:08:4d:f0:87:47:88:5b:09:0d:c6:38:51:8a:
         d1:2b:8d:2d:50:55:2c:01:79:cc:23:41:cb:e0:64:3f:e6:01:
         2d:fd:b8:af:b7:44:86:bb:84:77:d0:fa:ae:95:ae:12:c9:ea:
         d3:c9:dc:9e:f8:90:e2:39:72:08:13:f4:24:a1:33:8a:69:29:
         5e:f8:b1:c9:c1:a9:e2:51:54:c9:94:b2:a3:be:ce:bb:ee:a2:
         ac:83:29:2b:ff:20:9a:1e:00:a8:a6:b6:82:17:e6:81:db:d5:
         bf:21:d4:89:44:ab:c0:d0:09:9d:40:97:a9:b6:a8:d7:c7:5f:
         2e:2b:86:d3:b1:13:23:70:ff:dd:28:7f:26:a0:3a:12:bc:71:
         ef:55:1d:10:66:ba:f1:c8:9a:6a:cf:a2:f8:53:e8:4e:7b:2a:
         4b:8b:7b:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWXmjXZs0bjk8QybqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxOTAxMDM1MVoXDTI0MDcxODAxMDM1MVowLzEtMCsGA1UEAxMk
YjE5NGQ0YzMtYTQzMi00NWMzLWJlOTMtNjM3OGFkM2ViYzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWZ1qajndBn+28rfJTYnos//pRyte/gpREo
ALvkuJ5DdYfrA69EqQSaRz40a3787huYyXgLgwSR5E/r1sQcl19e0jPoyDU0tCkk
xdouJgyPC7qnfd8PDiG0tAfnv563StB5o981htuiUiZ31/yxhFRIEAo9Kn3qv7NY
9NqTxl3Yvz4PEbyUOreJqi/bAMoguw1FPZN/8VZqLCj0pCIQOdfuTZJ7FcKsiNfi
n2/VehtOBkGT9xYIQ+2HcLujHorcyAjq95eRmI4LTA5nh3JPIsmyfqdmEt1uV5R7
CpHbp/JhWbx6P/NsN8NdVy8qu9+QDB8qj6LVnW8Fw09wjL6uawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlaKxWkRvNdgLQWPFM/Dzg8koG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDY1NTE1OWEtNjYxZi0z
Yjk2LWI2MzUtZThiNWQ0YTBhOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGCuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPx2oKwVCJYN18L+PQJcCAzMIXGkFxnp2ni3IY72ACw5v/AQSXdT5St
Nv1PwUawhBvalDLWdrS4pTGjP3eFC3CiPztG3iIl9O+HMYJhXpSfMTYiVK1EQ4gK
Y9sg9sBACE3wh0eIWwkNxjhRitErjS1QVSwBecwjQcvgZD/mAS39uK+3RIa7hHfQ
+q6VrhLJ6tPJ3J74kOI5cggT9CShM4ppKV74scnBqeJRVMmUsqO+zrvuoqyDKSv/
IJoeAKimtoIX5oHb1b8h1IlEq8DQCZ1Al6m2qNfHXy4rhtOxEyNw/90ofyagOhK8
ce9VHRBmuvHImmrPovhT6E57KkuLe5E=
-----END CERTIFICATE-----
Generated at Sat May 11 21:54:51 2024 by rpki-client on console-fra.rpki-client.org