Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
File:                     c1428898-ff6a-36ce-9129-b74449e03ae0.roa (raw, json)
Hash identifier:          olxVlcLeEOdbeW0aIU5m+I9V63zVN1qez1s7dThlYco=
Subject key identifier:   BB:0A:23:81:87:75:73:B0:5E:06:92:80:F6:9E:5D:8C:34:15:92:0F
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847BAC6ACB22016B1497D8E37D0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     4213
IP address blocks:        74.116.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:ac:b2:20:16:b1:49:7d:8e:37:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=eac5b2b0-9e86-4fd0-844c-f7a1bdae3bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:ea:39:2f:93:04:8a:27:d2:93:25:1f:b5:
                    75:8e:62:ea:43:56:3c:aa:4b:d8:0f:1d:b9:0c:10:
                    8c:1d:c8:3c:7e:1e:42:d8:ea:80:2e:39:45:7b:4f:
                    c2:fa:5c:ec:28:b8:b8:73:55:6a:a6:4b:bd:74:93:
                    3a:2e:4c:ce:98:ec:66:96:46:5a:1b:51:29:db:01:
                    bb:19:be:92:fd:c5:9c:b4:f6:2d:fb:6b:03:51:6c:
                    da:a7:19:9c:cf:d1:89:e0:e2:62:0d:d5:65:b9:26:
                    89:c1:69:d5:94:c2:43:04:82:c4:96:1b:5b:54:da:
                    b2:a3:23:66:1d:37:60:29:ff:2c:28:cf:57:e4:56:
                    23:a6:86:be:0f:22:12:98:5e:f8:76:7b:c1:c9:9b:
                    7c:51:01:96:47:a6:ad:39:98:56:9b:13:7f:1b:de:
                    30:a5:cb:01:87:ba:b2:0b:d4:34:14:19:98:b9:aa:
                    61:b0:02:e2:44:a0:dd:01:dd:2b:01:e0:34:4c:c9:
                    f8:09:de:b5:83:60:15:82:cf:d2:1e:0b:a5:18:fb:
                    c8:2c:0d:b6:02:9e:58:80:fe:03:b8:e0:b2:1b:87:
                    4c:5a:b9:9f:fb:d9:0e:cc:69:59:1d:dd:1d:8d:59:
                    66:b9:6e:7d:93:8e:bd:71:6f:40:2d:32:81:36:c1:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0A:23:81:87:75:73:B0:5E:06:92:80:F6:9E:5D:8C:34:15:92:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a3:d8:a5:60:fb:03:d6:71:70:fb:3a:74:fc:fc:51:e1:39:
         ac:bd:7b:4f:60:5d:d6:09:d2:a8:34:20:81:76:62:54:38:3a:
         cf:33:a2:93:a3:28:98:35:c3:d5:6f:69:bf:b1:b2:23:cd:a1:
         b7:77:0f:10:3c:3b:fe:6d:98:de:10:e0:f7:cc:b3:b6:4e:3f:
         47:4b:3a:44:0c:2e:c6:a6:25:6c:e5:b2:bc:f0:ae:40:c1:d6:
         f0:3c:1a:33:a0:3d:56:e0:83:ca:9f:45:ea:ff:55:35:2c:3a:
         b4:51:cf:e5:2a:ad:89:ba:99:bd:44:8c:16:97:54:5c:85:22:
         18:49:63:7f:73:cd:f3:54:9c:ab:2b:0a:38:2f:91:2f:41:83:
         82:09:e5:33:0f:42:7d:76:b5:59:3d:e1:73:da:64:f3:53:7f:
         53:02:c8:11:9c:05:35:d3:5d:63:ab:56:a8:55:65:6c:7d:7c:
         01:30:55:ef:5e:0b:49:f3:07:ed:55:30:80:47:0c:53:9a:17:
         2f:bb:c8:95:bc:a4:8a:ea:c1:fd:70:09:72:1e:de:0c:a7:66:
         c2:0f:02:69:b9:51:87:c8:6f:ba:8e:de:25:0c:7c:4a:cf:5a:
         cc:97:e0:06:3f:fa:25:76:67:fe:dc:31:59:25:cf:54:38:6e:
         63:dd:be:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqyyIBaxSX2ON9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
ZWFjNWIyYjAtOWU4Ni00ZmQwLTg0NGMtZjdhMWJkYWUzYmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5vqOS+TBIon0pMlH7V1jmLqQ1Y8qkvYDx25
DBCMHcg8fh5C2OqALjlFe0/C+lzsKLi4c1Vqpku9dJM6LkzOmOxmlkZaG1Ep2wG7
Gb6S/cWctPYt+2sDUWzapxmcz9GJ4OJiDdVluSaJwWnVlMJDBILElhtbVNqyoyNm
HTdgKf8sKM9X5FYjpoa+DyISmF74dnvByZt8UQGWR6atOZhWmxN/G94wpcsBh7qy
C9Q0FBmYuaphsALiRKDdAd0rAeA0TMn4Cd61g2AVgs/SHgulGPvILA22Ap5YgP4D
uOCyG4dMWrmf+9kOzGlZHd0djVlmuW59k469cW9ALTKBNsGZHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsKI4GHdXOwXgaSgPaeXYw0FZIPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvYzE0Mjg4OTgtZmY2YS0z
NmNlLTkxMjktYjc0NDQ5ZTAzYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnQ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2j2KVg+wPWcXD7OnT8/FHhOay9e09gXdYJ0qg0IIF2YlQ4Os8zopOj
KJg1w9Vvab+xsiPNobd3DxA8O/5tmN4Q4PfMs7ZOP0dLOkQMLsamJWzlsrzwrkDB
1vA8GjOgPVbgg8qfRer/VTUsOrRRz+UqrYm6mb1EjBaXVFyFIhhJY39zzfNUnKsr
CjgvkS9Bg4IJ5TMPQn12tVk94XPaZPNTf1MCyBGcBTXTXWOrVqhVZWx9fAEwVe9e
C0nzB+1VMIBHDFOaFy+7yJW8pIrqwf1wCXIe3gynZsIPAmm5UYfIb7qO3iUMfErP
WsyX4AY/+iV2Z/7cMVklz1Q4bmPdvis=
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:15:12 2024 by rpki-client on console-fra.rpki-client.org