Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/288b5933-9611-3f02-8e94-03164bbd60ce.roa
File:                     288b5933-9611-3f02-8e94-03164bbd60ce.roa (raw, json)
Hash identifier:          QwMn7WoXIh3Ry3JdDzCIsJ6998rc6sj8IOfiqn9RPqY=
Subject key identifier:   AB:8D:30:E4:29:09:A5:B0:8A:DD:4F:17:32:9A:FE:C8:81:48:44:B6
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848090FAD261C585CDDFD801340
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/288b5933-9611-3f02-8e94-03164bbd60ce.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     396982
IP address blocks:        74.221.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:ad:26:1c:58:5c:dd:fd:80:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=a45fdd80-5f73-469c-9948-6c35496be6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:72:af:e3:d0:39:05:53:7d:a8:b2:1e:5e:
                    b1:e9:e9:9b:17:ea:8d:8e:94:bb:3e:60:22:81:8e:
                    7c:ba:b2:0e:18:7f:b3:7b:74:af:1d:9f:af:eb:f8:
                    90:05:de:75:ce:5a:7c:44:8a:f1:10:ff:10:88:e9:
                    8c:64:36:bb:ef:c6:23:d0:c6:55:73:72:a0:a4:bd:
                    85:fa:55:55:58:aa:91:24:6f:2b:e3:49:e4:d9:81:
                    3c:b8:04:7f:59:ea:d3:f3:d9:99:c7:99:84:4b:f4:
                    6c:bd:e8:7f:16:5a:66:59:8a:6a:0c:1e:91:8d:4e:
                    de:24:28:43:52:4c:4a:12:cb:c6:77:99:72:99:a1:
                    41:19:21:a2:d6:ca:11:c9:37:23:e0:2d:14:fa:4e:
                    7b:72:32:81:94:aa:bf:ac:0d:52:f9:60:83:95:90:
                    63:2a:51:9e:b0:6b:c4:a7:f7:77:f9:f5:53:c4:0d:
                    10:3a:94:16:bd:4a:61:51:bb:cd:86:c0:a2:45:a0:
                    09:56:2a:6b:c5:b1:99:21:22:94:7b:58:b7:c1:7c:
                    a9:5f:01:35:c0:22:05:48:05:3f:b0:3a:1b:e2:28:
                    f4:57:dd:de:a6:28:be:d3:af:cc:ef:c7:dd:d4:09:
                    a7:cf:f0:df:5d:68:fe:48:1d:96:38:86:8c:48:5f:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8D:30:E4:29:09:A5:B0:8A:DD:4F:17:32:9A:FE:C8:81:48:44:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/288b5933-9611-3f02-8e94-03164bbd60ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:25:a9:f2:e0:04:05:52:ea:e7:8d:b8:d4:bf:33:0c:91:df:
         56:a6:d9:7a:7d:44:84:43:71:4c:51:de:cf:cc:da:f8:9e:a8:
         b7:3f:d2:0a:08:c2:14:44:44:dc:3d:63:e3:5a:fd:0f:30:27:
         70:2a:ff:e1:d2:40:78:f0:a0:3d:7c:4f:2b:aa:86:94:56:69:
         43:6b:00:63:98:0e:4e:79:52:18:10:85:dc:e5:38:21:0c:1a:
         71:df:40:ee:0f:1a:77:b5:73:42:6a:c2:72:a5:87:5e:c7:c0:
         78:52:91:62:d3:f2:19:02:c2:30:e0:fe:73:cf:1d:0b:c3:65:
         09:b1:33:aa:dd:2b:16:1d:0f:66:ef:3d:fa:5e:af:77:d0:21:
         53:b1:73:ec:71:44:3d:14:82:6d:92:79:ca:fb:2a:de:52:a7:
         18:34:b1:cb:06:2d:8b:33:50:9b:95:85:b8:c7:88:b5:55:4a:
         a7:8b:30:af:d5:f3:25:8a:17:95:ac:d9:3e:47:9a:14:52:68:
         12:b0:d9:03:ac:b5:0e:8c:2c:26:c3:38:fd:2e:1e:22:1c:62:
         36:68:a4:32:a1:d4:8e:65:f0:7e:20:5e:3d:5d:96:96:6b:35:
         7e:80:5c:bd:9e:ab:cb:75:7d:43:97:2b:dc:25:e8:1c:9f:3f:
         f1:eb:08:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD60mHFhc3f2AE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
YTQ1ZmRkODAtNWY3My00NjljLTk5NDgtNmMzNTQ5NmJlNmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbJyr+PQOQVTfaiyHl6x6embF+qNjpS7PmAi
gY58urIOGH+ze3SvHZ+v6/iQBd51zlp8RIrxEP8QiOmMZDa778Yj0MZVc3KgpL2F
+lVVWKqRJG8r40nk2YE8uAR/WerT89mZx5mES/Rsveh/FlpmWYpqDB6RjU7eJChD
UkxKEsvGd5lymaFBGSGi1soRyTcj4C0U+k57cjKBlKq/rA1S+WCDlZBjKlGesGvE
p/d3+fVTxA0QOpQWvUphUbvNhsCiRaAJViprxbGZISKUe1i3wXypXwE1wCIFSAU/
sDob4ij0V93epii+06/M78fd1Amnz/DfXWj+SB2WOIaMSF+HPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuNMOQpCaWwit1PFzKa/siBSES2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMjg4YjU5MzMtOTYxMS0z
ZjAyLThlOTQtMDMxNjRiYmQ2MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABklqfLgBAVS6ueNuNS/MwyR31am2Xp9RIRDcUxR3s/M2vieqLc/0goI
whRERNw9Y+Na/Q8wJ3Aq/+HSQHjwoD18TyuqhpRWaUNrAGOYDk55UhgQhdzlOCEM
GnHfQO4PGne1c0JqwnKlh17HwHhSkWLT8hkCwjDg/nPPHQvDZQmxM6rdKxYdD2bv
Pfper3fQIVOxc+xxRD0Ugm2Secr7Kt5Spxg0scsGLYszUJuVhbjHiLVVSqeLMK/V
8yWKF5Ws2T5HmhRSaBKw2QOstQ6MLCbDOP0uHiIcYjZopDKh1I5l8H4gXj1dlpZr
NX6AXL2eq8t1fUOXK9wl6ByfP/HrCCE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:14 2025 by rpki-client