Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/9eabb92a-16ab-3751-8346-2df048f36827.roa
File:                     9eabb92a-16ab-3751-8346-2df048f36827.roa (raw, json)
Hash identifier:          gKI36DU0uFhJlXsKd1ZFLmeLJ5UQkVp9jANX3Bu8k9M=
Subject key identifier:   29:FB:AF:25:0C:1A:98:72:B5:B5:20:84:F9:A7:B7:B1:A5:C0:B1:30
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858477BF664F5EA64E4242C1E8400
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/9eabb92a-16ab-3751-8346-2df048f36827.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     395123
IP address blocks:        74.50.216.0/23 maxlen: 23
                          74.50.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:64:f5:ea:64:e4:24:2c:1e:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=422c79a7-e4a9-4d79-a995-2a0a2bfae9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:6f:6b:d0:69:b0:f1:2a:da:bc:9a:59:b3:
                    a7:da:30:c2:4d:80:9c:21:91:83:ad:80:8b:ab:6a:
                    20:36:4a:d0:0c:70:58:d0:6f:d2:03:12:dc:f5:46:
                    53:e1:33:c8:68:07:cb:f1:0f:97:94:7c:c2:99:07:
                    ce:97:b5:1c:4b:62:4c:6b:ac:7e:35:4c:92:39:71:
                    f3:71:96:49:fb:52:49:d7:df:21:04:d6:cc:dc:dd:
                    cd:80:ae:c3:42:31:07:5e:ac:3f:15:46:60:f8:69:
                    0f:51:c0:24:55:63:cc:72:df:f1:dd:48:65:95:86:
                    04:8d:6b:4c:1f:9c:19:0a:f6:4e:fe:ae:0b:33:26:
                    4e:fc:0f:c1:8a:36:1f:cb:a1:ce:ad:6d:92:cd:86:
                    6b:18:22:5d:bf:72:55:65:d4:6d:7f:96:5c:97:98:
                    98:21:89:6b:39:9d:40:20:97:77:3b:0c:25:e6:7a:
                    fb:94:4b:b4:68:2f:e8:2a:3a:6a:8c:d3:55:40:21:
                    9e:cf:e6:60:a2:6c:f1:f8:d7:a6:48:c2:da:82:7d:
                    50:69:2c:70:82:28:ed:2c:94:e9:14:3a:a9:18:b3:
                    d2:8e:a9:e4:f7:b3:af:99:c1:03:0b:49:92:9a:4a:
                    a1:ea:98:13:bd:0b:f9:fb:f2:f6:ff:9d:4b:57:99:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:AF:25:0C:1A:98:72:B5:B5:20:84:F9:A7:B7:B1:A5:C0:B1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/9eabb92a-16ab-3751-8346-2df048f36827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.216.0/23
                  74.50.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:0c:1d:cf:eb:e2:8a:82:7c:bf:c1:a6:ab:2c:f4:3c:77:
         cb:cf:63:ee:4f:d0:e1:8a:56:ac:c4:0b:59:1f:7b:83:66:7c:
         65:b0:d9:f2:a7:69:75:db:7e:a9:b7:17:5f:5d:40:3c:b4:de:
         e1:d8:34:a0:81:d0:a0:3a:c5:15:0d:67:4f:c0:d9:b6:ca:cc:
         f6:c9:5f:58:a0:37:91:5d:43:60:8f:e2:da:a0:41:a3:34:2f:
         8f:64:a0:9c:a6:8d:3a:5b:be:10:f4:12:17:3d:a3:9f:3f:f2:
         6e:39:3f:b4:fa:1e:8a:04:53:61:cf:d1:fe:a6:3e:7f:41:5a:
         fc:ff:07:7b:ea:99:ec:3e:34:dd:7a:b8:9a:39:9d:b8:38:a8:
         0c:15:6f:cc:75:0f:7b:42:73:6d:8a:b4:3f:1e:10:2f:ac:5c:
         e3:d8:22:72:10:95:72:78:62:7a:ac:53:f5:91:7a:be:da:4f:
         44:26:54:64:fa:f0:8e:36:9c:04:05:0b:16:28:2c:db:be:18:
         80:eb:b3:1d:45:3b:80:1e:c0:ae:ec:f1:2a:e0:90:ec:11:a2:
         3b:cf:3a:af:a5:39:89:4e:96:05:a4:8b:bb:18:c2:d5:a7:0a:
         46:59:f3:cb:b0:81:b9:bf:9c:08:24:2d:6f:e6:0f:6d:5a:46:
         9f:0e:c2:ca
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEd79mT16mTkJCwehAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk
NDIyYzc5YTctZTRhOS00ZDc5LWE5OTUtMmEwYTJiZmFlOWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxABva9BpsPEq2ryaWbOn2jDCTYCcIZGDrYCL
q2ogNkrQDHBY0G/SAxLc9UZT4TPIaAfL8Q+XlHzCmQfOl7UcS2JMa6x+NUySOXHz
cZZJ+1JJ198hBNbM3N3NgK7DQjEHXqw/FUZg+GkPUcAkVWPMct/x3UhllYYEjWtM
H5wZCvZO/q4LMyZO/A/BijYfy6HOrW2SzYZrGCJdv3JVZdRtf5Zcl5iYIYlrOZ1A
IJd3Owwl5nr7lEu0aC/oKjpqjNNVQCGez+Zgomzx+NemSMLagn1QaSxwgijtLJTp
FDqpGLPSjqnk97OvmcEDC0mSmkqh6pgTvQv5+/L2/51LV5m5AwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCn7ryUMGphytbUghPmnt7GlwLEwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvOWVhYmI5MmEtMTZhYi0z
NzUxLTgzNDYtMmRmMDQ4ZjM2ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBSjLYAwQB
SjLeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABboDB3P6+KKgny/waarLPQ8d8vPY+5P0OGKVqzEC1kfe4Nm
fGWw2fKnaXXbfqm3F19dQDy03uHYNKCB0KA6xRUNZ0/A2bbKzPbJX1igN5FdQ2CP
4tqgQaM0L49koJymjTpbvhD0Ehc9o58/8m45P7T6HooEU2HP0f6mPn9BWvz/B3vq
mew+NN16uJo5nbg4qAwVb8x1D3tCc22KtD8eEC+sXOPYInIQlXJ4YnqsU/WRer7a
T0QmVGT68I42nAQFCxYoLNu+GIDrsx1FO4AewK7s8SrgkOwRojvPOq+lOYlOlgWk
i7sYwtWnCkZZ88uwgbm/nAgkLW/mD21aRp8Owso=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org