Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa
File:                     abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa (raw, json)
Hash identifier:          9fBUckBhFML4iCp4IFRT7c1Ua6kP7xS3gqBrfi3tZbY=
Subject key identifier:   D3:FF:C2:E3:58:FB:79:B5:B7:EB:FD:2B:68:1B:45:6E:BC:C1:0B:73
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858473D2606BAEAE5E0A84B686000
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        74.221.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:06:ba:ea:e5:e0:a8:4b:68:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=834d8567-356d-4a06-a2ad-35d19b9c424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:9b:ee:23:01:70:a9:22:21:b2:ee:44:63:
                    31:1f:03:29:ee:75:d1:39:f7:1a:c9:36:66:23:ac:
                    28:12:43:c3:3f:6c:c4:20:aa:af:d5:ac:76:3b:c3:
                    c2:6a:08:5c:be:12:18:82:3d:66:98:c7:90:1a:62:
                    a1:1f:0c:41:05:89:6b:25:2a:41:c7:55:2b:bd:c5:
                    14:aa:f9:2d:e2:51:10:62:6f:6d:bc:a1:f7:3d:f6:
                    b8:65:da:b6:87:a7:6d:6d:2c:bc:99:91:3e:5d:a2:
                    b8:81:e5:07:a5:a6:83:99:58:db:3e:91:35:d8:04:
                    1b:7b:e8:8d:aa:ff:11:09:ca:98:bc:98:b1:fb:ca:
                    9c:b1:be:42:02:bc:1f:0e:a8:fb:0b:31:08:ee:73:
                    ef:c4:8d:47:15:ad:6f:d7:1d:60:43:b4:55:8d:7f:
                    72:5d:67:a7:22:a7:86:b3:b3:62:a8:79:4c:7b:06:
                    86:90:f5:cf:46:12:9d:99:5f:fa:43:81:d2:30:f6:
                    07:e0:85:33:ac:9d:f9:c3:d0:fe:fa:4f:95:78:10:
                    ca:09:95:20:cb:ba:78:52:27:5c:54:81:d6:61:d0:
                    8b:99:47:03:f5:bd:95:9d:e4:ff:f4:85:b1:fd:fc:
                    87:e3:66:54:eb:42:17:7d:1a:79:ff:48:97:88:59:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FF:C2:E3:58:FB:79:B5:B7:EB:FD:2B:68:1B:45:6E:BC:C1:0B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:0f:75:84:79:90:ae:65:70:52:b6:f2:fe:3f:2b:c5:f9:21:
         de:66:7d:64:3b:b1:27:ab:22:43:92:e6:8a:f8:af:02:bf:3e:
         80:e7:e8:03:7d:0f:bd:ef:f3:60:e3:55:1f:dd:1d:31:25:bd:
         48:ff:f2:3b:5d:a6:9f:14:e1:b0:a9:66:8b:de:89:0d:a2:91:
         f3:c8:2c:a1:af:ea:71:97:b8:1f:ef:9e:75:cf:eb:bb:ac:22:
         14:c5:f3:88:59:0c:ff:99:6d:8c:8c:a8:41:6e:8e:0e:ec:e0:
         94:c0:15:c3:9e:a0:e9:3d:4f:70:58:a0:13:78:45:f7:6b:1c:
         18:47:30:78:56:c8:2a:d1:c0:07:2d:fe:81:b5:c2:1e:4e:00:
         91:a7:6b:e0:2e:1c:83:55:6e:f7:f0:97:f4:f0:85:62:7e:dc:
         45:51:7b:8f:5d:0f:c9:d6:13:01:dd:54:24:fc:ab:6b:2b:a7:
         e6:05:42:b5:9a:5e:6c:e1:46:6e:09:f2:db:5c:bb:f7:ab:72:
         e5:25:c4:fb:30:79:6f:3d:3e:49:36:75:9f:3d:69:37:92:a1:
         4b:b0:a8:e8:b7:2d:48:0e:48:1d:aa:37:47:38:75:b3:e0:68:
         aa:ff:d0:24:3a:54:ce:b0:c2:36:6b:03:41:5a:05:b1:3d:3f:
         d1:14:f4:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9Jga66uXgqEtoYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
ODM0ZDg1NjctMzU2ZC00YTA2LWEyYWQtMzVkMTliOWM0MjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCab7iMBcKkiIbLuRGMxHwMp7nXROfcayTZm
I6woEkPDP2zEIKqv1ax2O8PCaghcvhIYgj1mmMeQGmKhHwxBBYlrJSpBx1UrvcUU
qvkt4lEQYm9tvKH3Pfa4Zdq2h6dtbSy8mZE+XaK4geUHpaaDmVjbPpE12AQbe+iN
qv8RCcqYvJix+8qcsb5CArwfDqj7CzEI7nPvxI1HFa1v1x1gQ7RVjX9yXWenIqeG
s7NiqHlMewaGkPXPRhKdmV/6Q4HSMPYH4IUzrJ35w9D++k+VeBDKCZUgy7p4Uidc
VIHWYdCLmUcD9b2VneT/9IWx/fyH42ZU60IXfRp5/0iXiFlxeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNP/wuNY+3m1t+v9K2gbRW68wQtzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYWJmN2JhNTgtMzRmYS0z
OGQwLTlmZjMtYmNmYWIxY2M3YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt2GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM8PdYR5kK5lcFK28v4/K8X5Id5mfWQ7sSerIkOS5or4rwK/PoDn6AN9
D73v82DjVR/dHTElvUj/8jtdpp8U4bCpZoveiQ2ikfPILKGv6nGXuB/vnnXP67us
IhTF84hZDP+ZbYyMqEFujg7s4JTAFcOeoOk9T3BYoBN4RfdrHBhHMHhWyCrRwAct
/oG1wh5OAJGna+AuHINVbvfwl/TwhWJ+3EVRe49dD8nWEwHdVCT8q2srp+YFQrWa
XmzhRm4J8ttcu/ercuUlxPsweW89Pkk2dZ89aTeSoUuwqOi3LUgOSB2qN0c4dbPg
aKr/0CQ6VM6wwjZrA0FaBbE9P9EU9GY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:58 2024 by rpki-client on console-ams.rpki-client.org