Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/d7092db7-81e3-3155-b429-6f4681b6bdeb.roa
File:                     d7092db7-81e3-3155-b429-6f4681b6bdeb.roa (raw, json)
Hash identifier:          1Dq26zfB+KGRCc/iEV7/4GmrF83kni6ZHO60ZXJo7Vk=
Subject key identifier:   37:B0:51:41:55:85:3F:B9:98:80:72:B9:21:EE:D5:BE:3B:6E:43:9A
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F432858484C1019C3AC902AC772B8B680
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/d7092db7-81e3-3155-b429-6f4681b6bdeb.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     14401
IP address blocks:        74.123.244.0/22 maxlen: 22
                          104.247.88.0/24 maxlen: 24
                          104.247.89.0/24 maxlen: 24
                          104.247.90.0/23 maxlen: 23
                          140.235.228.0/22 maxlen: 22
                          2607:6880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:19:c3:ac:90:2a:c7:72:b8:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b6482a8c-3fcd-4f59-80f4-4c2c54eb233e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:2c:69:2a:b4:1a:10:15:4a:e2:ce:f9:88:
                    b3:8d:9a:87:5e:96:20:9b:ff:87:5b:4e:66:f6:7f:
                    8a:95:8a:1e:f5:51:d5:1e:c0:97:32:b4:b7:10:b5:
                    d6:33:3b:5b:7d:f0:38:fb:7e:6a:11:4e:78:4e:89:
                    ad:9a:c6:a3:52:fc:a1:a1:36:f6:f2:a7:34:cc:ca:
                    f4:9d:2c:36:bf:8e:6c:ef:9c:f3:36:26:ba:f5:48:
                    d0:c2:98:ee:36:14:5b:c5:2a:f9:58:64:88:61:b5:
                    6a:87:64:86:53:75:de:d4:3e:59:6d:82:0a:7e:ad:
                    2d:46:4a:84:8d:0e:f6:59:d4:bb:ae:52:3b:c1:93:
                    63:db:e1:11:04:6e:54:a9:bd:67:61:76:33:62:63:
                    24:32:8b:06:a7:dd:1a:28:14:e7:07:55:1c:01:d9:
                    92:b3:0a:3f:a0:ba:b1:7e:01:91:0a:b3:70:23:2d:
                    77:b8:72:9e:56:e9:ec:6c:a2:3d:3d:93:41:62:ca:
                    8a:6f:21:07:2a:bd:87:fe:c8:5e:d1:0a:0d:c7:dc:
                    1c:be:1e:ad:1c:77:30:33:04:46:8c:74:f7:33:e3:
                    f0:7c:87:a1:0a:32:46:a3:96:44:8d:73:4b:00:55:
                    21:b9:d0:bc:9a:fd:94:49:62:b1:ae:f9:e4:17:26:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:51:41:55:85:3F:B9:98:80:72:B9:21:EE:D5:BE:3B:6E:43:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/d7092db7-81e3-3155-b429-6f4681b6bdeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.244.0/22
                  104.247.88.0/22
                  140.235.228.0/22
                IPv6:
                  2607:6880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:de:c2:0c:56:65:f4:6a:3e:66:6f:bd:83:5d:4f:42:73:6a:
         56:c4:51:58:12:1c:77:6e:ba:b5:b9:bd:39:b2:18:60:eb:1a:
         50:41:af:22:06:fc:6e:28:d8:5c:7f:00:d6:75:75:d6:c9:1e:
         4e:94:b1:3d:88:42:97:6c:91:a3:be:a2:87:e2:62:a6:02:cd:
         44:46:ef:3d:a3:36:9a:b7:7d:01:b8:09:59:11:d1:74:3f:1c:
         1a:77:2b:60:ea:a8:39:0f:94:49:97:7e:9c:29:1d:2c:18:e8:
         e3:6e:ea:f8:0c:78:4b:d6:0d:d5:96:f1:9d:92:5d:47:ee:57:
         7a:49:a7:b7:15:45:90:d5:24:fb:b7:5a:4e:07:f6:1a:18:e9:
         19:29:5d:84:bb:5e:f6:f2:9c:2e:23:d7:c4:94:31:62:71:36:
         e1:d8:9b:37:ee:55:d5:63:13:25:2c:36:55:3f:c3:50:e9:20:
         73:57:1e:95:90:6e:27:c7:31:d2:24:1c:66:fc:06:84:27:cc:
         89:1f:ed:ed:2c:5f:d1:be:51:f5:91:2f:a2:0b:e1:d4:84:9c:
         00:f7:b4:bf:44:2f:78:52:16:36:f6:58:62:c3:d2:61:b7:00:
         a6:f2:dd:f9:25:37:01:8c:96:5c:95:8b:36:1a:24:73:e3:40:
         c5:58:cc:50
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEhMEBnDrJAqx3K4toAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWI3MzdiODgtZTVjMC00NTNlLTk5ZmEtOTc2N2NlYWQz
ZGI2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YjY0ODJhOGMtM2ZjZC00ZjU5LTgwZjQtNGMyYzU0ZWIyMzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/0saSq0GhAVSuLO+YizjZqHXpYgm/+HW05m
9n+KlYoe9VHVHsCXMrS3ELXWMztbffA4+35qEU54TomtmsajUvyhoTb28qc0zMr0
nSw2v45s75zzNia69UjQwpjuNhRbxSr5WGSIYbVqh2SGU3Xe1D5ZbYIKfq0tRkqE
jQ72WdS7rlI7wZNj2+ERBG5Uqb1nYXYzYmMkMosGp90aKBTnB1UcAdmSswo/oLqx
fgGRCrNwIy13uHKeVunsbKI9PZNBYsqKbyEHKr2H/she0QoNx9wcvh6tHHcwMwRG
jHT3M+PwfIehCjJGo5ZEjXNLAFUhudC8mv2USWKxrvnkFybQ9wIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFDewUUFVhT+5mIByuSHu1b47bkOaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYjcz
N2I4OC1lNWMwLTQ1M2UtOTlmYS05NzY3Y2VhZDNkYjYvZDcwOTJkYjctODFlMy0z
MTU1LWI0MjktNmY0NjgxYjZiZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWI3MzdiODgtZTVjMC00NTNlLTk5
ZmEtOTc2N2NlYWQzZGI2LzFiNzM3Yjg4LWU1YzAtNDUzZS05OWZhLTk3NjdjZWFk
M2RiNi5jcmwwHwYDVR0jBBgwFoAUYKjsGjxBveHLXi8/U1L0T7VqizIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYjczN2I4OC1lNWMwLTQ1M2UtOTlmYS05NzY3
Y2VhZDNkYjYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCSnv0AwQC
aPdYAwQCjOvkMA0EAgACMAcDBQAmB2iAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANHewgxWZfRqPmZvvYNd
T0JzalbEUVgSHHduurW5vTmyGGDrGlBBryIG/G4o2Fx/ANZ1ddbJHk6UsT2IQpds
kaO+oofiYqYCzURG7z2jNpq3fQG4CVkR0XQ/HBp3K2DqqDkPlEmXfpwpHSwY6ONu
6vgMeEvWDdWW8Z2SXUfuV3pJp7cVRZDVJPu3Wk4H9hoY6RkpXYS7XvbynC4j18SU
MWJxNuHYmzfuVdVjEyUsNlU/w1DpIHNXHpWQbifHMdIkHGb8BoQnzIkf7e0sX9G+
UfWRL6IL4dSEnAD3tL9EL3hSFjb2WGLD0mG3AKby3fklNwGMllyVizYaJHPjQMVY
zFA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:47 2025 by rpki-client