Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa
File:                     a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa (raw, json)
Hash identifier:          ReDH5UgTjKvZk+cla3WHmNFbx8XeE42OOr1JG/nZNes=
Subject key identifier:   E2:B4:24:A3:F7:CC:14:52:99:0C:5E:51:1B:87:A2:49:91:B3:3B:8A
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F432858454AD2CD8754936A947A8C3D50
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     16433
IP address blocks:        74.123.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cd:87:54:93:6a:94:7a:8c:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=1fc4d434-d8bc-4d8d-b145-5b9671d8243d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:73:5b:87:d8:42:7b:a8:84:5c:a9:c1:23:
                    6c:40:a3:cb:2f:1b:2a:71:9a:dd:01:86:40:34:04:
                    36:e1:55:c9:8d:9a:d8:b8:1d:e6:44:cb:40:c2:75:
                    c2:87:a9:a8:b4:bb:a9:40:22:04:cb:0a:0d:cc:e7:
                    b0:9f:9b:f2:b3:f2:ba:4a:88:40:fc:3d:80:63:7b:
                    49:21:33:fa:01:c3:ab:af:5a:e8:3a:63:53:8a:c6:
                    1d:c0:f7:25:1f:f4:75:17:cb:23:4d:9b:0c:91:0c:
                    61:de:71:a2:3c:c3:0e:3f:24:8d:b3:f2:13:3a:ad:
                    2d:4d:ea:fa:b4:31:e1:05:ba:04:ca:61:eb:21:56:
                    86:44:0f:b3:40:87:85:3c:9d:5d:79:59:87:5e:b3:
                    9f:d4:2c:d2:19:81:81:43:eb:ff:75:51:12:42:a2:
                    03:6b:a0:bd:3b:91:7b:09:8c:ab:cd:e2:4a:6c:41:
                    8c:91:3d:e3:6c:69:6f:4d:2c:03:7d:8e:3f:84:6c:
                    70:3a:57:ca:09:19:e1:f4:60:2b:77:72:cc:de:4a:
                    3e:a4:58:d3:eb:66:d9:c5:e8:73:f3:24:90:9c:38:
                    72:49:69:ae:d7:34:84:24:f8:3f:2b:40:d1:a4:e8:
                    57:d8:99:3d:05:94:97:74:3b:78:46:a7:3a:59:b2:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B4:24:A3:F7:CC:14:52:99:0C:5E:51:1B:87:A2:49:91:B3:3B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:b9:50:c9:63:7e:8a:17:52:b2:9e:17:0e:6e:0c:f9:38:
         18:23:a2:61:2a:a0:37:42:32:9e:85:5e:15:52:45:b5:42:ce:
         8f:35:f7:1c:20:75:af:b0:4d:14:96:3e:03:8b:a2:6a:ff:d5:
         93:ba:e7:f6:7e:6e:e6:f8:46:8f:5f:7f:28:90:01:09:52:36:
         47:14:e6:f1:88:36:88:63:6a:00:07:3e:2a:9b:db:53:2a:92:
         b9:39:95:92:d8:a1:70:22:61:24:ae:c2:81:c5:b8:00:f5:d0:
         88:62:82:21:9b:a2:d6:26:8e:dd:12:0a:05:70:d0:50:9e:db:
         3b:03:bf:d9:f9:53:53:01:3c:66:6c:5c:00:fb:50:3f:c7:57:
         99:05:35:f0:af:c6:ba:72:54:55:3d:62:11:a1:bf:b2:20:ab:
         7b:5b:83:5a:93:2c:ea:08:f7:5f:3e:e8:b8:76:ab:78:1d:9e:
         6c:d7:c1:a9:65:c4:30:e7:68:7b:47:8a:4d:e8:19:90:f1:e1:
         93:1b:90:4e:48:98:0f:a3:8c:6f:a4:d4:9c:36:3c:90:ce:67:
         b6:32:0f:ba:15:92:59:2d:a2:19:1c:cb:6b:d0:de:eb:d6:ee:
         81:60:99:0b:86:45:a7:bb:8c:31:b3:a1:fa:c3:9d:cd:64:b6:
         8d:2a:1c:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK0s2HVJNqlHqMPVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1
ZDUwMB4XDTI0MDMyMjEzMDAzNFoXDTI0MDYyMDEzMDAzNFowLzEtMCsGA1UEAxMk
MWZjNGQ0MzQtZDhiYy00ZDhkLWIxNDUtNWI5NjcxZDgyNDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuZzW4fYQnuohFypwSNsQKPLLxsqcZrdAYZA
NAQ24VXJjZrYuB3mRMtAwnXCh6motLupQCIEywoNzOewn5vys/K6SohA/D2AY3tJ
ITP6AcOrr1roOmNTisYdwPclH/R1F8sjTZsMkQxh3nGiPMMOPySNs/ITOq0tTer6
tDHhBboEymHrIVaGRA+zQIeFPJ1deVmHXrOf1CzSGYGBQ+v/dVESQqIDa6C9O5F7
CYyrzeJKbEGMkT3jbGlvTSwDfY4/hGxwOlfKCRnh9GArd3LM3ko+pFjT62bZxehz
8ySQnDhySWmu1zSEJPg/K0DRpOhX2Jk9BZSXdDt4Rqc6WbKJgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOK0JKP3zBRSmQxeURuHokmRszuKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm
NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYTk0YTJiNmItOTAzZS0z
N2NiLWJkZTctYzliODVlZDcyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw
OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl
NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi
MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnsoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqduVDJY36KF1KynhcObgz5OBgjomEqoDdCMp6FXhVSRbVCzo819xwg
da+wTRSWPgOLomr/1ZO65/Z+bub4Ro9ffyiQAQlSNkcU5vGINohjagAHPiqb21Mq
krk5lZLYoXAiYSSuwoHFuAD10IhigiGbotYmjt0SCgVw0FCe2zsDv9n5U1MBPGZs
XAD7UD/HV5kFNfCvxrpyVFU9YhGhv7Igq3tbg1qTLOoI918+6Lh2q3gdnmzXwall
xDDnaHtHik3oGZDx4ZMbkE5ImA+jjG+k1Jw2PJDOZ7YyD7oVklktohkcy2vQ3uvW
7oFgmQuGRae7jDGzofrDnc1kto0qHHg=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org