Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa
File:                     ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa (raw, json)
Hash identifier:          4ETNbPjqu9VhnS990QsXsh3CZO4AHynA3/J2r+iH7WY=
Subject key identifier:   0B:63:D9:1B:02:48:44:6C:BD:F2:28:B1:A2:6D:47:F1:0F:BE:3F:B2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858456822EA0295EBE2BAFFA1E1C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        45.74.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:ea:02:95:eb:e2:ba:ff:a1:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=7dd6a578-4ff8-4080-9acd-8e5eb2f1171d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:22:bf:85:e5:35:39:9f:b0:66:5c:fe:f0:
                    b9:03:b1:d8:c5:2e:50:72:67:6e:63:92:3e:cb:23:
                    eb:26:38:f7:c8:08:dc:82:c2:d3:b0:0d:41:77:db:
                    62:0a:15:0e:1e:15:f8:93:3a:e3:4d:d2:04:c6:53:
                    47:8f:6c:1d:d5:19:38:ce:71:57:39:6e:b3:4e:30:
                    37:30:d6:3e:51:64:3d:81:dd:ac:c2:d6:2d:a4:b0:
                    63:8c:43:06:f3:fe:2d:00:78:61:9d:2e:77:16:c5:
                    e6:01:34:60:67:97:f3:d6:19:06:f3:fa:8c:84:16:
                    d2:a2:5d:25:cc:b7:6b:f6:78:e4:05:60:e3:ee:bb:
                    c5:fc:91:69:54:80:5f:20:34:cf:12:8f:f2:e8:80:
                    ec:e3:90:6a:15:23:13:66:0d:87:0b:45:5a:98:7a:
                    58:e9:95:43:b3:f6:32:d3:9a:f7:06:ce:4f:d2:ef:
                    68:6e:3c:90:66:99:85:e8:97:51:76:bb:a8:74:97:
                    70:06:82:f8:90:80:e9:18:ff:4d:5f:0b:74:6d:ba:
                    2f:bf:2a:40:30:64:05:25:65:33:24:b3:8f:e1:74:
                    cd:03:4c:ba:5b:6c:4c:39:8a:2e:58:00:3c:b5:04:
                    01:8d:31:af:65:02:db:25:74:7f:2a:3a:fe:fd:fc:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:63:D9:1B:02:48:44:6C:BD:F2:28:B1:A2:6D:47:F1:0F:BE:3F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9f:83:80:8e:6d:8b:77:fa:59:33:60:ed:d1:4c:be:4d:05:
         b6:57:0a:81:d1:d2:aa:69:2c:fd:36:d9:63:14:e6:d5:f7:93:
         1d:4b:95:46:d1:de:94:34:5d:c2:1b:17:32:bc:53:2b:05:43:
         f6:5f:92:21:79:15:84:74:48:79:fd:38:4e:10:2a:e1:0a:6a:
         16:47:2e:7c:9d:b6:d5:6e:08:20:93:a6:9f:6a:c9:1e:b5:e6:
         2a:0a:6d:e4:6a:a4:23:31:4a:6a:30:a0:0e:32:c3:31:04:f2:
         3f:9c:f9:37:67:f1:b4:1b:a4:dd:0d:ff:e3:d0:c7:e0:26:1b:
         d2:b4:f3:87:fa:c1:43:6f:75:70:70:60:50:9b:8e:de:05:6f:
         7b:8b:d5:8f:f0:b1:dd:4e:91:91:8d:e5:a0:a1:ba:b8:05:02:
         b1:b8:9a:0e:8e:7e:33:53:10:94:43:47:67:68:65:5c:31:12:
         71:99:b2:a8:6b:b1:ea:8b:ea:8c:5c:b9:df:2c:bf:fe:90:41:
         81:b0:27:3c:14:26:8e:08:c9:ce:2e:f7:87:39:36:f0:14:01:
         50:62:c9:03:c3:18:78:8e:ed:aa:4e:27:89:eb:61:15:16:ea:
         e8:d2:d3:77:fd:90:f5:61:f8:8d:73:eb:de:39:5a:77:9e:e0:
         15:6f:3b:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIuoCleviuv+h4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk
N2RkNmE1NzgtNGZmOC00MDgwLTlhY2QtOGU1ZWIyZjExNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlugiv4XlNTmfsGZc/vC5A7HYxS5QcmduY5I+
yyPrJjj3yAjcgsLTsA1Bd9tiChUOHhX4kzrjTdIExlNHj2wd1Rk4znFXOW6zTjA3
MNY+UWQ9gd2swtYtpLBjjEMG8/4tAHhhnS53FsXmATRgZ5fz1hkG8/qMhBbSol0l
zLdr9njkBWDj7rvF/JFpVIBfIDTPEo/y6IDs45BqFSMTZg2HC0VamHpY6ZVDs/Yy
05r3Bs5P0u9objyQZpmF6JdRdruodJdwBoL4kIDpGP9NXwt0bbovvypAMGQFJWUz
JLOP4XTNA0y6W2xMOYouWAA8tQQBjTGvZQLbJXR/Kjr+/fycLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtj2RsCSERsvfIosaJtR/EPvj+yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2VhZmIyMWEtOGJkYi0z
ZGIwLTg3YmItYjg1ZmNiNTVlZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6fg4CObYt3+lkzYO3RTL5NBbZXCoHR0qppLP022WMU5tX3kx1LlUbR
3pQ0XcIbFzK8UysFQ/ZfkiF5FYR0SHn9OE4QKuEKahZHLnydttVuCCCTpp9qyR61
5ioKbeRqpCMxSmowoA4ywzEE8j+c+Tdn8bQbpN0N/+PQx+AmG9K084f6wUNvdXBw
YFCbjt4Fb3uL1Y/wsd1OkZGN5aChurgFArG4mg6OfjNTEJRDR2doZVwxEnGZsqhr
seqL6oxcud8sv/6QQYGwJzwUJo4Iyc4u94c5NvAUAVBiyQPDGHiO7apOJ4nrYRUW
6ujS03f9kPVh+I1z6945Wnee4BVvO0w=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org