Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa/2dae0633-d75b-3802-8b37-2bdff0cb1a57.roa
File:                     2dae0633-d75b-3802-8b37-2bdff0cb1a57.roa (raw, json)
Hash identifier:          AgjxSHJaMY6GDSHWhZ5ngHit8YHxpaN9tnUOvngSSwI=
Subject key identifier:   56:EA:3C:C2:41:64:79:67:93:24:33:1B:29:76:5D:D8:EB:F1:0C:C6
Certificate issuer:       /CN=d02434eb-dd43-43d0-a63f-8eecb7485baa
Certificate serial:       010D0C9F4328584561286117A5A0D2A661DD8680
Authority key identifier: 49:05:60:FA:0C:10:FF:48:10:21:06:F9:83:77:AD:C3:1E:24:3D:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa/2dae0633-d75b-3802-8b37-2bdff0cb1a57.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     29897
IP address blocks:        74.121.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa/d02434eb-dd43-43d0-a63f-8eecb7485baa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa/d02434eb-dd43-43d0-a63f-8eecb7485baa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:61:17:a5:a0:d2:a6:61:dd:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02434eb-dd43-43d0-a63f-8eecb7485baa
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=527d418f-f75f-4384-aeb0-3410b3d48035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:d3:7b:c0:fd:98:c4:12:7f:fb:80:a6:2c:
                    7a:44:a8:b7:11:8e:81:12:15:f1:d4:45:a6:fb:38:
                    9a:21:1e:47:d6:f8:8d:e9:bd:77:6e:b5:e9:52:34:
                    cb:b3:3a:84:68:2c:30:59:bb:b7:82:a1:df:00:83:
                    00:d8:e6:aa:49:36:cb:ae:05:8d:6a:e8:f4:c4:97:
                    53:1c:a4:82:b5:ca:56:1b:02:4a:fc:25:2b:7f:78:
                    d3:c8:4e:df:20:ef:c4:0c:1b:54:0f:82:3e:be:4c:
                    ad:5c:9c:3d:f3:c9:c3:68:d7:9b:fd:0f:01:d4:11:
                    f6:bb:9c:a4:53:96:03:ba:f0:bd:72:e7:01:aa:13:
                    eb:e2:71:42:04:2e:fa:ff:e0:3c:c5:81:d2:97:e7:
                    d9:f2:19:56:94:5c:eb:73:f7:f0:7f:4d:34:97:48:
                    75:4c:f3:b6:b8:6f:f9:d8:45:52:92:cd:57:0f:52:
                    86:5a:c2:38:0c:a8:1f:cd:df:96:ef:46:8e:07:35:
                    52:f0:fd:35:1d:51:81:ed:a7:e0:55:38:37:7f:36:
                    3d:ea:db:d9:e6:51:db:8b:3c:07:1e:bb:5f:44:77:
                    00:ef:d8:58:e9:f0:eb:7b:6f:ea:0b:35:e1:1a:04:
                    c7:6f:7c:f4:60:de:b9:f0:01:29:b3:23:b2:44:06:
                    c4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:3C:C2:41:64:79:67:93:24:33:1B:29:76:5D:D8:EB:F1:0C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa/2dae0633-d75b-3802-8b37-2bdff0cb1a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa/d02434eb-dd43-43d0-a63f-8eecb7485baa.crl

            X509v3 Authority Key Identifier:
                keyid:49:05:60:FA:0C:10:FF:48:10:21:06:F9:83:77:AD:C3:1E:24:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d02434eb-dd43-43d0-a63f-8eecb7485baa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:2d:f0:55:e2:32:24:5b:c4:68:07:5c:8b:69:2d:84:e4:
         2a:b8:64:ba:4f:ea:81:e9:88:9c:7b:59:31:3d:e5:f8:b8:47:
         6e:2d:95:c6:fb:23:64:ed:a6:55:9b:53:5d:8b:f0:01:6c:71:
         af:b3:0b:a0:03:d5:3d:e7:56:95:08:9b:f5:37:b9:9d:8d:64:
         43:6e:72:40:40:a1:75:95:d4:2b:ed:eb:e8:af:e8:b8:4a:7f:
         bf:ea:35:24:5a:18:cd:19:d4:12:5b:e4:10:b0:32:f1:2e:6a:
         af:8c:3b:08:3d:33:43:39:9f:4c:07:83:8d:c3:ea:36:b2:08:
         0a:80:a5:5a:25:32:89:bc:fe:3b:02:c5:19:46:a2:95:c4:8d:
         8c:c7:21:e4:30:fb:2f:d5:8f:33:27:49:0e:56:1b:dd:c6:89:
         66:14:1c:53:30:63:ac:94:cf:09:76:54:84:92:b2:0e:08:2c:
         45:06:a6:3a:05:b9:34:fc:42:27:ef:6e:94:c7:65:f2:61:63:
         6a:b1:32:23:8f:f5:51:3c:48:e9:1f:f8:a8:b0:b2:17:38:35:
         6d:91:d8:8e:6f:16:85:1d:3d:29:de:46:9e:12:71:48:3f:13:
         f2:1e:94:f4:c7:58:12:6f:79:2e:c1:94:2b:b7:e2:24:63:3c:
         fa:4a:41:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKGEXpaDSpmHdhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAyNDM0ZWItZGQ0My00M2QwLWE2M2YtOGVlY2I3NDg1
YmFhMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
NTI3ZDQxOGYtZjc1Zi00Mzg0LWFlYjAtMzQxMGIzZDQ4MDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEDTe8D9mMQSf/uApix6RKi3EY6BEhXx1EWm
+ziaIR5H1viN6b13brXpUjTLszqEaCwwWbu3gqHfAIMA2OaqSTbLrgWNauj0xJdT
HKSCtcpWGwJK/CUrf3jTyE7fIO/EDBtUD4I+vkytXJw988nDaNeb/Q8B1BH2u5yk
U5YDuvC9cucBqhPr4nFCBC76/+A8xYHSl+fZ8hlWlFzrc/fwf000l0h1TPO2uG/5
2EVSks1XD1KGWsI4DKgfzd+W70aOBzVS8P01HVGB7afgVTg3fzY96tvZ5lHbizwH
HrtfRHcA79hY6fDre2/qCzXhGgTHb3z0YN658AEpsyOyRAbEPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbqPMJBZHlnkyQzGyl2Xdjr8QzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMDI0
MzRlYi1kZDQzLTQzZDAtYTYzZi04ZWVjYjc0ODViYWEvMmRhZTA2MzMtZDc1Yi0z
ODAyLThiMzctMmJkZmYwY2IxYTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDAyNDM0ZWItZGQ0My00M2QwLWE2
M2YtOGVlY2I3NDg1YmFhL2QwMjQzNGViLWRkNDMtNDNkMC1hNjNmLThlZWNiNzQ4
NWJhYS5jcmwwHwYDVR0jBBgwFoAUSQVg+gwQ/0gQIQb5g3etwx4kPc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMDI0MzRlYi1kZDQzLTQzZDAtYTYzZi04ZWVj
Yjc0ODViYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9rLfBV4jIkW8RoB1yLaS2E5Cq4ZLpP6oHpiJx7WTE95fi4R24tlcb7
I2TtplWbU12L8AFsca+zC6AD1T3nVpUIm/U3uZ2NZENuckBAoXWV1Cvt6+iv6LhK
f7/qNSRaGM0Z1BJb5BCwMvEuaq+MOwg9M0M5n0wHg43D6jayCAqApVolMom8/jsC
xRlGopXEjYzHIeQw+y/VjzMnSQ5WG93GiWYUHFMwY6yUzwl2VISSsg4ILEUGpjoF
uTT8QifvbpTHZfJhY2qxMiOP9VE8SOkf+Kiwshc4NW2R2I5vFoUdPSneRp4ScUg/
E/IelPTHWBJveS7BlCu34iRjPPpKQe8=
-----END CERTIFICATE-----
Generated at Fri May 10 03:02:48 2024 by rpki-client on console-ams.rpki-client.org