Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14bef6c8-2daf-35b6-badd-fd600e247611.roa
File:                     14bef6c8-2daf-35b6-badd-fd600e247611.roa (raw, json)
Hash identifier:          mGzH3ZVRqafPN7vQ6WVI6NSeJnEBd8tVpcV1SDZFNsI=
Subject key identifier:   F6:17:89:A5:01:16:B8:F6:2C:A8:FE:8F:B7:D7:3F:52:4E:D5:94:7C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DF4FB041E144D3BFADAC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14bef6c8-2daf-35b6-badd-fd600e247611.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.88.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:f4:fb:04:1e:14:4d:3b:fa:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=114a0f44-ff88-44c1-90ac-d6d855a5676a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:f4:0b:1a:51:01:65:64:a1:0d:b9:9b:87:
                    93:f6:93:ae:48:7e:5b:41:9f:fa:b5:c6:35:e1:89:
                    91:c3:7d:04:f4:72:ae:04:f7:0f:f8:cc:ab:fd:50:
                    f1:5a:47:f5:6a:e3:5b:cf:82:b9:28:17:25:63:e2:
                    d2:c1:90:67:4d:8a:a1:ca:a9:29:61:84:1a:3a:3d:
                    cf:78:38:f8:11:59:37:06:e4:b0:81:60:7f:0e:97:
                    8e:1e:69:cf:06:8a:b9:0c:6f:86:ce:de:96:15:80:
                    85:82:84:6e:7b:9d:60:d0:02:e7:7c:65:2b:e4:88:
                    ef:0c:e9:bd:83:f0:4a:ee:de:6a:6a:1b:0e:9b:a7:
                    7c:f5:02:ac:bc:c1:65:b3:9c:59:b8:87:cd:25:5c:
                    ba:e9:71:1a:c5:24:43:94:e1:c6:f4:60:5c:5b:5d:
                    f3:72:c5:9e:ae:cf:0b:b9:a6:96:41:e8:8f:89:6b:
                    93:b6:b7:3e:be:e5:c8:28:e1:b3:f9:72:a7:9d:02:
                    06:ee:ae:2e:60:ed:c4:5d:a8:2f:5b:be:45:28:c4:
                    51:a8:8d:25:02:b6:39:3c:85:94:70:0a:3a:3c:da:
                    86:8a:c9:4f:56:8a:53:e6:44:6b:4a:14:f0:0f:80:
                    7e:e2:bd:1f:d5:a5:9d:3e:9c:64:b0:5d:d0:35:1e:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:17:89:A5:01:16:B8:F6:2C:A8:FE:8F:B7:D7:3F:52:4E:D5:94:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14bef6c8-2daf-35b6-badd-fd600e247611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.88.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:2c:6d:ad:58:c5:1f:10:a2:dc:8c:e0:21:15:e4:a4:d8:
         cc:b1:21:93:9a:d3:fe:39:9e:92:21:1e:26:e8:1f:be:79:23:
         cd:c6:55:48:e8:18:c4:1b:2e:4b:ff:42:21:93:09:b8:d0:95:
         f9:f7:e2:bd:7c:99:e6:73:11:3c:e6:16:4f:6e:b1:b8:57:a1:
         32:15:ef:18:d0:d0:f7:6a:06:41:cf:6b:b1:57:ed:d2:10:9f:
         b1:a5:5c:70:92:f3:ed:4d:35:df:e4:eb:7d:7a:95:b9:7d:d6:
         5c:f5:7f:6e:ae:37:ca:de:49:2d:ce:0d:ed:ad:57:58:2c:57:
         37:4d:2b:89:13:6b:61:2b:e8:12:a1:b2:10:43:6a:79:f1:de:
         37:19:5a:84:fd:a5:4c:e2:89:82:7d:53:6f:fc:8c:8d:70:58:
         e1:fd:89:48:2b:57:20:93:3b:ca:9f:ae:fa:38:39:22:31:21:
         4c:6d:94:89:9d:6a:e8:40:5f:65:9a:66:1f:b6:a8:70:0e:27:
         d8:16:34:51:82:ec:57:51:d7:73:d9:fc:8a:18:d9:4e:dc:81:
         83:bd:c0:ce:4f:cf:c4:d1:d8:ca:40:58:6a:ab:50:1d:ff:67:
         c6:08:fc:87:a7:34:cb:ba:ef:69:b6:0c:da:89:19:a7:8c:54:
         88:77:83:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijfT7BB4UTTv62sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MTE0YTBmNDQtZmY4OC00NGMxLTkwYWMtZDZkODU1YTU2NzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFv0CxpRAWVkoQ25m4eT9pOuSH5bQZ/6tcY1
4YmRw30E9HKuBPcP+Myr/VDxWkf1auNbz4K5KBclY+LSwZBnTYqhyqkpYYQaOj3P
eDj4EVk3BuSwgWB/DpeOHmnPBoq5DG+Gzt6WFYCFgoRue51g0ALnfGUr5IjvDOm9
g/BK7t5qahsOm6d89QKsvMFls5xZuIfNJVy66XEaxSRDlOHG9GBcW13zcsWers8L
uaaWQeiPiWuTtrc+vuXIKOGz+XKnnQIG7q4uYO3EXagvW75FKMRRqI0lArY5PIWU
cAo6PNqGislPVopT5kRrShTwD4B+4r0f1aWdPpxksF3QNR6ksQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYXiaUBFrj2LKj+j7fXP1JO1ZR8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTRiZWY2YzgtMmRhZi0z
NWI2LWJhZGQtZmQ2MDBlMjQ3NjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1iwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHr4LG2tWMUfEKLcjOAhFeSk2MyxIZOa0/45npIhHiboH755I83GVUjo
GMQbLkv/QiGTCbjQlfn34r18meZzETzmFk9usbhXoTIV7xjQ0PdqBkHPa7FX7dIQ
n7GlXHCS8+1NNd/k6316lbl91lz1f26uN8reSS3ODe2tV1gsVzdNK4kTa2Er6BKh
shBDannx3jcZWoT9pUziiYJ9U2/8jI1wWOH9iUgrVyCTO8qfrvo4OSIxIUxtlImd
auhAX2WaZh+2qHAOJ9gWNFGC7FdR13PZ/IoY2U7cgYO9wM5Pz8TR2MpAWGqrUB3/
Z8YI/IenNMu672m2DNqJGaeMVIh3gwU=
-----END CERTIFICATE-----
Generated at Mon May 13 02:03:47 2024 by rpki-client on console-fra.rpki-client.org