Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f299cef4-a12b-34b8-be35-26ae77b415a0.roa
File:                     f299cef4-a12b-34b8-be35-26ae77b415a0.roa (raw, json)
Hash identifier:          NWmIQmArcsXbZ9hkUdSYU2bocL57fzAyLxH6xAXsazQ=
Subject key identifier:   F0:3C:3E:16:C5:C4:B2:7C:56:3B:96:1F:D0:A7:42:FF:23:A3:49:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B068AA9EB44B6AABCE680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f299cef4-a12b-34b8-be35-26ae77b415a0.roa
Signing time:             Fri 05 Apr 2024 01:16:44 +0000
ROA not before:           Fri 05 Apr 2024 01:16:44 +0000
ROA not after:            Thu 04 Jul 2024 01:16:44 +0000
asID:                     22394
IP address blocks:        174.41.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:06:8a:a9:eb:44:b6:aa:bc:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:16:44 2024 GMT
            Not After : Jul  4 01:16:44 2024 GMT
        Subject: CN=1675a8d8-68ea-4322-8098-0dc704abf5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:52:88:56:1d:19:ec:9e:92:a4:b0:d8:da:
                    4b:b5:56:2e:35:a3:bf:e2:6d:79:a0:94:8a:d3:17:
                    30:fc:8f:5e:92:5a:ac:f7:4f:25:02:c9:ea:66:a4:
                    8d:66:6f:7d:97:97:4a:38:38:83:de:20:1a:38:6b:
                    34:70:3d:90:cb:4e:8a:1d:00:38:d7:ad:5f:d5:b7:
                    e4:71:80:73:bc:47:2c:19:97:cd:84:d4:31:b1:0c:
                    70:fc:fd:d2:32:7c:7b:2b:8f:13:41:96:a7:79:15:
                    3e:32:e9:63:f5:58:2c:5f:93:38:57:72:01:24:cb:
                    fb:2a:ea:8e:db:bc:01:6d:51:ed:f8:8e:82:86:41:
                    51:cc:63:1a:f6:54:93:87:7e:44:1c:e0:96:ae:d3:
                    a1:ad:b8:b9:fe:e6:10:6b:0d:0e:e8:84:b8:1f:94:
                    94:2d:88:da:c7:7a:a5:69:28:3b:30:15:12:fb:37:
                    9d:fa:25:2c:4a:db:85:40:67:8b:04:36:bf:0f:38:
                    1a:61:15:c1:45:2f:2f:f7:42:ea:24:d4:62:61:c2:
                    86:49:03:a0:b0:57:1f:c1:a0:0a:c1:43:ac:b1:60:
                    f5:f0:a5:85:2c:e7:1c:7c:3a:d5:c3:8a:f2:db:f9:
                    8f:bf:02:7c:be:ec:10:6f:50:68:5a:03:e5:aa:6f:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:3E:16:C5:C4:B2:7C:56:3B:96:1F:D0:A7:42:FF:23:A3:49:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f299cef4-a12b-34b8-be35-26ae77b415a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:de:dc:f9:3a:c0:cd:ab:75:1d:a0:a5:ea:64:90:c8:7a:8d:
         95:94:12:56:d8:84:60:03:b5:69:45:77:af:a0:da:72:8a:88:
         78:6f:d8:70:f5:e1:ba:e0:29:3c:a6:11:76:d3:85:1e:e9:e0:
         cd:65:c9:d8:a3:6d:21:97:74:92:de:bc:6e:a8:c4:f5:45:c9:
         66:26:4c:1d:8f:0b:de:87:9a:fb:18:23:68:83:6d:d8:f2:33:
         36:b2:cf:46:81:aa:a1:ab:0d:b6:4b:ee:0f:00:58:f7:91:05:
         2c:a3:3d:4a:d8:e0:b9:1a:5f:6d:9e:61:6e:01:a5:e1:56:25:
         77:ec:93:68:9a:a1:cd:2b:ef:97:68:8f:e6:f2:21:e4:e2:49:
         46:7c:47:cb:44:66:9e:e6:fa:e6:4d:01:3c:5c:84:b4:9c:bd:
         45:6f:86:23:c7:8f:7c:e6:bc:33:88:c5:5d:d9:77:ab:b8:82:
         af:ab:3a:e5:5d:1d:43:9f:6e:6f:b6:62:71:60:d0:fe:a3:60:
         3e:5e:74:64:aa:b4:a7:e2:45:f2:07:e5:61:09:53:5b:c9:6d:
         11:4c:df:08:2a:df:d9:7f:fc:49:3d:23:40:bd:86:4a:c1:dd:
         04:18:a2:be:df:c6:a9:57:42:19:c8:85:2d:9f:67:81:68:a0:
         35:04:f3:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwiwaKqetEtqq85oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQwNTAxMTY0NFoXDTI0MDcwNDAxMTY0NFowLzEtMCsGA1UEAxMk
MTY3NWE4ZDgtNjhlYS00MzIyLTgwOTgtMGRjNzA0YWJmNWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNpSiFYdGeyekqSw2NpLtVYuNaO/4m15oJSK
0xcw/I9eklqs908lAsnqZqSNZm99l5dKODiD3iAaOGs0cD2Qy06KHQA4161f1bfk
cYBzvEcsGZfNhNQxsQxw/P3SMnx7K48TQZaneRU+Mulj9VgsX5M4V3IBJMv7KuqO
27wBbVHt+I6ChkFRzGMa9lSTh35EHOCWrtOhrbi5/uYQaw0O6IS4H5SULYjax3ql
aSg7MBUS+zed+iUsStuFQGeLBDa/DzgaYRXBRS8v90LqJNRiYcKGSQOgsFcfwaAK
wUOssWD18KWFLOccfDrVw4ry2/mPvwJ8vuwQb1BoWgPlqm8l4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPA8PhbFxLJ8VjuWH9CnQv8jo0k1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjI5OWNlZjQtYTEyYi0z
NGI4LWJlMzUtMjZhZTc3YjQxNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXe3Pk6wM2rdR2gpepkkMh6jZWUElbYhGADtWlFd6+g2nKKiHhv2HD1
4brgKTymEXbThR7p4M1lydijbSGXdJLevG6oxPVFyWYmTB2PC96HmvsYI2iDbdjy
Mzayz0aBqqGrDbZL7g8AWPeRBSyjPUrY4LkaX22eYW4BpeFWJXfsk2iaoc0r75do
j+byIeTiSUZ8R8tEZp7m+uZNATxchLScvUVvhiPHj3zmvDOIxV3Zd6u4gq+rOuVd
HUOfbm+2YnFg0P6jYD5edGSqtKfiRfIH5WEJU1vJbRFM3wgq39l//Ek9I0C9hkrB
3QQYor7fxqlXQhnIhS2fZ4FooDUE80E=
-----END CERTIFICATE-----
Generated at Thu May 9 01:33:31 2024 by rpki-client on console-fra.rpki-client.org