Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f5d2d7bd-df8d-3e43-bf2d-745e3efeae10.roa
File:                     f5d2d7bd-df8d-3e43-bf2d-745e3efeae10.roa (raw, json)
Hash identifier:          ayBDzkr2SdLJ3hISTFvbd+hK8tPR0Ts2dB3cFyBnjH4=
Subject key identifier:   5D:08:D7:95:8B:2F:E7:E3:ED:BC:72:2E:63:68:18:E6:87:4D:97:2A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A996419D47419DB846E826A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f5d2d7bd-df8d-3e43-bf2d-745e3efeae10.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397219
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:41:9d:47:41:9d:b8:46:e8:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=589a808a-fb08-4840-98fc-d9628da35730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:25:ae:c2:ef:f8:e2:f2:72:dc:06:7a:15:
                    d9:a3:1c:6b:d7:66:e5:60:32:b3:c3:e9:80:43:e4:
                    f1:78:d0:0a:c2:47:de:43:0a:52:d5:99:57:0e:a5:
                    fc:39:40:85:78:f3:e6:d4:38:66:4b:62:e9:0d:ee:
                    47:3a:a1:c1:87:74:60:cf:78:04:10:47:ee:54:67:
                    c8:c6:99:b5:3a:1c:8b:42:ef:5f:67:02:35:f3:d7:
                    47:de:9c:91:c2:8d:9a:2a:36:8c:95:25:b8:ca:8d:
                    f4:53:ff:52:98:4f:6e:43:43:70:c8:8a:08:b8:69:
                    51:08:b3:32:e7:21:ed:cb:9c:5d:3c:95:25:80:80:
                    50:39:1c:b4:2b:21:c0:88:b8:ec:6f:2a:1c:66:3f:
                    cd:de:14:53:4f:a4:cb:b6:52:14:4a:e3:5b:f0:21:
                    55:b0:66:66:b5:ae:6d:56:61:49:f3:27:22:14:97:
                    a9:7d:af:b7:d9:be:72:02:0c:0d:52:1e:15:03:72:
                    73:b1:e3:a7:d3:98:fa:bf:83:88:18:ff:f5:9f:5d:
                    29:af:d6:2d:e8:06:84:fd:e4:f1:d0:a0:56:96:ee:
                    4a:88:ad:b1:f3:09:ce:0e:0c:1c:70:67:2c:c9:73:
                    f1:30:37:e6:ba:38:dd:af:b0:1a:e8:2d:5f:2a:9c:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:08:D7:95:8B:2F:E7:E3:ED:BC:72:2E:63:68:18:E6:87:4D:97:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f5d2d7bd-df8d-3e43-bf2d-745e3efeae10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:79:ba:0d:88:88:09:1f:01:f5:5b:c5:89:14:82:0b:1d:22:
         80:d4:ed:d0:2f:30:fb:3b:fe:a3:06:35:87:3f:8f:f3:6f:fd:
         b0:9e:05:d3:9b:c7:19:b8:43:6f:77:31:df:b8:18:a3:a0:88:
         3d:20:9b:6e:14:2a:ef:ed:71:07:22:62:00:8e:89:00:e9:7d:
         fc:fb:eb:7b:97:f1:a8:d2:fb:38:d9:7f:0c:e4:d2:a0:e5:a7:
         08:5a:28:ca:fc:b1:4a:46:22:65:4f:97:dd:52:3c:50:dd:e8:
         9c:6f:ae:f2:f9:ff:97:b6:60:d9:2a:b9:cd:02:0e:ae:98:9d:
         44:80:9d:93:a2:cd:6b:b4:bb:d1:fa:ee:31:83:84:bf:ce:c9:
         51:11:a0:d6:de:8b:90:0a:e6:1f:5b:16:e0:06:4f:fe:04:be:
         a2:2f:09:cd:05:f5:a5:07:e1:6f:9e:2c:3e:96:1b:1f:70:e0:
         2e:8c:3e:d6:02:00:10:19:d2:b1:07:75:a3:93:06:e0:8e:f8:
         b1:65:bd:d4:72:17:06:b6:90:af:3e:e5:25:35:a3:c6:24:be:
         8f:71:6e:b4:58:b4:c7:ed:1a:0e:cd:78:e1:71:26:21:42:16:
         9b:bb:7d:a5:9b:9a:dd:36:3a:9c:a1:66:a5:15:a4:4e:5e:1a:
         83:16:2d:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkGdR0GduEboJqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTg5YTgwOGEtZmIwOC00ODQwLTk4ZmMtZDk2MjhkYTM1NzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEAlrsLv+OLyctwGehXZoxxr12blYDKzw+mA
Q+TxeNAKwkfeQwpS1ZlXDqX8OUCFePPm1DhmS2LpDe5HOqHBh3Rgz3gEEEfuVGfI
xpm1OhyLQu9fZwI189dH3pyRwo2aKjaMlSW4yo30U/9SmE9uQ0NwyIoIuGlRCLMy
5yHty5xdPJUlgIBQORy0KyHAiLjsbyocZj/N3hRTT6TLtlIUSuNb8CFVsGZmta5t
VmFJ8yciFJepfa+32b5yAgwNUh4VA3JzseOn05j6v4OIGP/1n10pr9Yt6AaE/eTx
0KBWlu5KiK2x8wnODgwccGcsyXPxMDfmujjdr7Aa6C1fKpwFHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0I15WLL+fj7bxyLmNoGOaHTZcqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjVkMmQ3YmQtZGY4ZC0z
ZTQzLWJmMmQtNzQ1ZTNlZmVhZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJ5ug2IiAkfAfVbxYkUggsdIoDU7dAvMPs7/qMGNYc/j/Nv/bCeBdOb
xxm4Q293Md+4GKOgiD0gm24UKu/tcQciYgCOiQDpffz763uX8ajS+zjZfwzk0qDl
pwhaKMr8sUpGImVPl91SPFDd6JxvrvL5/5e2YNkquc0CDq6YnUSAnZOizWu0u9H6
7jGDhL/OyVERoNbei5AK5h9bFuAGT/4EvqIvCc0F9aUH4W+eLD6WGx9w4C6MPtYC
ABAZ0rEHdaOTBuCO+LFlvdRyFwa2kK8+5SU1o8Ykvo9xbrRYtMftGg7NeOFxJiFC
Fpu7faWbmt02OpyhZqUVpE5eGoMWLdM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:42 2025 by rpki-client