Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa
File:                     e09d4cea-d423-3a06-91f1-682b8b11b34e.roa (raw, json)
Hash identifier:          phRrfjLBsDCyPcP+j1NZFcgUZ3jSWyTvuPzfRmIkPw4=
Subject key identifier:   A9:61:B5:30:DB:67:E3:B0:54:B8:80:79:78:D9:96:1B:7B:32:90:A1
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845B4E8DB5FA7AD60499D2C3200
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     212238
IP address blocks:        45.74.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:db:5f:a7:ad:60:49:9d:2c:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=d4246e1b-ca4d-449e-a757-7aeeef984b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:65:c6:52:a9:9b:d1:93:3f:ab:d3:f2:a3:
                    e8:f8:b1:69:96:ee:a9:c0:48:65:18:31:e7:f9:3d:
                    8a:80:04:df:32:cb:07:6b:70:d2:34:75:f0:93:65:
                    5e:ce:c5:1f:89:cc:a4:5b:ef:7e:b2:48:0d:71:46:
                    91:db:5e:3c:c5:9a:c5:a2:ff:ee:d5:93:e4:a6:4e:
                    12:75:56:d3:20:b7:61:2a:0d:f1:9c:01:80:b3:36:
                    96:9d:a3:ac:47:06:bc:62:a5:2b:bf:ae:65:7f:d8:
                    3e:b3:25:c6:81:2e:4b:96:6d:90:dc:3d:7b:d0:57:
                    ea:0d:6f:e9:1d:42:c7:9e:24:71:40:4a:94:f9:8c:
                    b9:c8:14:a5:94:c0:58:98:59:11:2e:e7:0d:f9:62:
                    45:20:0d:1d:ba:c9:ca:f9:6a:89:3c:46:10:2c:34:
                    77:8e:0b:e3:86:b6:43:82:8a:10:fb:f9:ed:64:5d:
                    bc:f9:39:3a:e7:aa:b6:b1:51:c6:7d:89:7d:bc:56:
                    e1:48:96:b0:c7:28:c6:74:61:3e:c1:11:b1:a0:66:
                    b5:51:9c:07:a2:0a:98:61:d1:1d:61:38:a8:4e:86:
                    45:24:ef:c1:75:98:2e:be:06:f2:75:b8:a3:ca:67:
                    c7:6e:41:e4:f6:1c:80:3a:e9:3a:c8:29:5b:ba:aa:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:B5:30:DB:67:E3:B0:54:B8:80:79:78:D9:96:1B:7B:32:90:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:61:67:0c:92:e4:4b:a1:01:10:09:52:fc:3b:60:f1:5e:16:
         8c:2d:67:4c:94:11:a8:f8:34:a5:c2:b5:99:92:18:98:7c:68:
         04:6e:70:6c:9c:ef:cd:db:06:06:68:c5:b9:f8:60:3f:6f:70:
         b2:b6:ed:32:61:4b:f2:f4:07:42:1d:c0:c6:1f:26:55:71:e5:
         31:93:97:a6:28:c5:06:e9:5e:62:68:9f:c4:23:c8:29:8d:cc:
         50:a4:32:f7:4c:b4:da:c1:92:31:5e:33:f1:de:b7:3f:84:f3:
         e0:c3:be:51:51:d8:c0:7e:82:a6:b7:6f:f3:31:52:a4:e0:52:
         91:ce:bc:58:14:7a:d6:4b:f4:2f:ee:ec:f0:35:09:8d:1e:49:
         a9:b7:94:a3:8a:d9:c3:d2:f9:3a:54:aa:d7:d9:cc:4b:2a:26:
         6b:ac:a7:80:d8:cb:0d:75:ee:9b:05:2b:d6:2f:90:ac:03:62:
         31:9b:a0:9f:ad:b3:51:ae:36:68:fc:59:03:f1:4a:07:fe:75:
         37:14:4c:64:d8:f5:62:a9:46:34:d2:c9:14:eb:25:e9:95:37:
         e8:ca:ff:ca:76:b0:4d:4f:14:e4:c0:76:57:ac:5e:58:a8:34:
         b3:16:d7:84:ae:10:a8:32:76:0a:88:6b:21:86:ee:e2:be:be:
         e9:14:8b:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06Ntfp61gSZ0sMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
ZDQyNDZlMWItY2E0ZC00NDllLWE3NTctN2FlZWVmOTg0YjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm51lxlKpm9GTP6vT8qPo+LFplu6pwEhlGDHn
+T2KgATfMssHa3DSNHXwk2VezsUficykW+9+skgNcUaR2148xZrFov/u1ZPkpk4S
dVbTILdhKg3xnAGAszaWnaOsRwa8YqUrv65lf9g+syXGgS5Llm2Q3D170FfqDW/p
HULHniRxQEqU+Yy5yBSllMBYmFkRLucN+WJFIA0dusnK+WqJPEYQLDR3jgvjhrZD
gooQ+/ntZF28+Tk656q2sVHGfYl9vFbhSJawxyjGdGE+wRGxoGa1UZwHogqYYdEd
YTioToZFJO/BdZguvgbydbijymfHbkHk9hyAOuk6yClbuqqeGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlhtTDbZ+OwVLiAeXjZlht7MpChMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTA5ZDRjZWEtZDQyMy0z
YTA2LTkxZjEtNjgyYjhiMTFiMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdhZwyS5EuhARAJUvw7YPFeFowtZ0yUEaj4NKXCtZmSGJh8aARucGyc
783bBgZoxbn4YD9vcLK27TJhS/L0B0IdwMYfJlVx5TGTl6YoxQbpXmJon8QjyCmN
zFCkMvdMtNrBkjFeM/Hetz+E8+DDvlFR2MB+gqa3b/MxUqTgUpHOvFgUetZL9C/u
7PA1CY0eSam3lKOK2cPS+TpUqtfZzEsqJmusp4DYyw117psFK9YvkKwDYjGboJ+t
s1GuNmj8WQPxSgf+dTcUTGTY9WKpRjTSyRTrJemVN+jK/8p2sE1PFOTAdlesXlio
NLMW14SuEKgydgqIayGG7uK+vukUi+Y=
-----END CERTIFICATE-----
Generated at Wed May 8 20:38:19 2024 by rpki-client on console-ams.rpki-client.org