Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
File:                     c1428898-ff6a-36ce-9129-b74449e03ae0.roa (raw, json)
Hash identifier:          cpWtWE6qTwtaejjldz81zAK7VShxgwkOUFEr7CQPO50=
Subject key identifier:   77:1C:1D:B1:87:C5:EC:BA:7E:E1:63:AF:43:0D:14:75:F0:C9:F8:3D
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F432858451BF0E2518CE82859F2B22B80
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
Signing time:             Tue 05 Mar 2024 17:58:15 +0000
ROA not before:           Tue 05 Mar 2024 17:58:15 +0000
ROA not after:            Mon 03 Jun 2024 16:58:15 +0000
asID:                     4213
IP address blocks:        74.116.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:f0:e2:51:8c:e8:28:59:f2:b2:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar  5 17:58:15 2024 GMT
            Not After : Jun  3 16:58:15 2024 GMT
        Subject: CN=a7fda819-04f0-4655-8d4b-ab20f74ea003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:c2:8c:ac:24:c2:7a:df:30:a3:56:da:5e:
                    4e:44:a2:20:df:c7:a7:44:af:b0:f7:19:07:f0:af:
                    f2:2c:2c:e7:6f:85:da:3b:50:c9:2b:39:5e:89:72:
                    88:ed:86:85:b0:4f:12:15:e9:9e:ff:da:f7:cc:f4:
                    84:e9:97:2d:55:7d:23:e7:72:4f:fb:2d:d6:10:23:
                    a5:97:29:5d:a6:c8:38:89:d5:20:40:a1:f3:90:a7:
                    d8:36:dc:12:55:3b:4f:ca:aa:8f:17:56:54:03:89:
                    88:74:b6:d1:90:67:f7:f8:18:1c:47:3c:e7:79:44:
                    5d:7e:26:4f:ef:ad:89:12:81:6b:06:b6:43:5e:b0:
                    e6:6c:99:dd:78:04:2d:f2:3d:8b:b9:44:3a:90:30:
                    5b:2e:41:c5:4e:1e:07:72:cf:58:c7:21:b7:48:b2:
                    6c:9c:e5:bc:22:c2:4a:ed:b6:05:5f:c3:9a:57:4b:
                    9e:f3:ce:df:8d:c2:74:ae:2c:4c:7b:fa:38:26:9a:
                    1d:10:2a:ef:c3:7c:8e:96:32:15:da:29:68:6b:8c:
                    7e:66:a3:98:f3:76:c8:6d:75:e4:1d:45:3d:9d:b5:
                    c8:45:86:08:88:80:86:a6:83:ee:26:01:28:fe:cb:
                    70:e2:e4:a5:5a:a8:2f:b3:15:7c:ce:12:6f:9b:07:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1C:1D:B1:87:C5:EC:BA:7E:E1:63:AF:43:0D:14:75:F0:C9:F8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:b7:a2:91:79:d4:d4:8b:3a:f1:0c:78:5f:33:89:6b:5b:
         6b:18:e9:ea:d1:6e:85:1d:52:25:7d:c5:84:66:80:64:8b:e1:
         c8:4f:3d:70:c7:07:65:3a:f1:4a:07:2a:06:c0:c3:02:9b:97:
         7e:60:99:00:56:42:16:6c:46:3d:1b:7e:1a:71:77:de:0b:9d:
         62:e8:c5:e6:50:92:77:53:99:fd:a0:f3:2f:4b:4c:cc:e0:c5:
         79:3f:d8:48:e0:1d:14:29:8b:b2:f5:25:d2:e2:ac:45:7c:dd:
         03:e4:07:12:a0:e6:b4:8a:33:24:b0:d4:d4:20:0e:23:8c:f3:
         19:95:04:55:36:ec:17:c1:9a:76:ac:7a:6e:59:02:7d:6e:36:
         e4:06:01:af:70:01:d5:f6:64:87:97:57:e7:1b:79:3b:3d:92:
         45:72:c9:c8:eb:ad:8c:ba:f7:cb:11:30:b0:a0:8c:83:7a:32:
         54:9d:d1:00:84:80:83:b9:57:30:f1:34:c1:2f:95:69:52:2d:
         03:c4:3e:13:9e:be:ae:16:0a:43:e4:f4:b9:65:b9:74:60:dc:
         64:14:64:c9:54:b7:df:c7:5c:fc:bc:74:d4:0a:13:3b:2e:84:
         0e:bd:51:c8:1d:49:0a:f4:38:d1:3e:dd:ca:e2:ef:db:9b:c9:
         02:89:83:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUb8OJRjOgoWfKyK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI0MDMwNTE3NTgxNVoXDTI0MDYwMzE2NTgxNVowLzEtMCsGA1UEAxMk
YTdmZGE4MTktMDRmMC00NjU1LThkNGItYWIyMGY3NGVhMDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTfCjKwkwnrfMKNW2l5ORKIg38enRK+w9xkH
8K/yLCznb4XaO1DJKzleiXKI7YaFsE8SFeme/9r3zPSE6ZctVX0j53JP+y3WECOl
lyldpsg4idUgQKHzkKfYNtwSVTtPyqqPF1ZUA4mIdLbRkGf3+BgcRzzneURdfiZP
762JEoFrBrZDXrDmbJndeAQt8j2LuUQ6kDBbLkHFTh4Hcs9YxyG3SLJsnOW8IsJK
7bYFX8OaV0ue887fjcJ0rixMe/o4JpodECrvw3yOljIV2iloa4x+ZqOY83bIbXXk
HUU9nbXIRYYIiICGpoPuJgEo/stw4uSlWqgvsxV8zhJvmwd/+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHccHbGHxey6fuFjr0MNFHXwyfg9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvYzE0Mjg4OTgtZmY2YS0z
NmNlLTkxMjktYjc0NDQ5ZTAzYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnQ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFPt6KRedTUizrxDHhfM4lrW2sY6erRboUdUiV9xYRmgGSL4chPPXDH
B2U68UoHKgbAwwKbl35gmQBWQhZsRj0bfhpxd94LnWLoxeZQkndTmf2g8y9LTMzg
xXk/2EjgHRQpi7L1JdLirEV83QPkBxKg5rSKMySw1NQgDiOM8xmVBFU27BfBmnas
em5ZAn1uNuQGAa9wAdX2ZIeXV+cbeTs9kkVyycjrrYy698sRMLCgjIN6MlSd0QCE
gIO5VzDxNMEvlWlSLQPEPhOevq4WCkPk9LlluXRg3GQUZMlUt9/HXPy8dNQKEzsu
hA69UcgdSQr0ONE+3cri79ubyQKJgww=
-----END CERTIFICATE-----
Generated at Sun May 19 18:35:37 2024 by rpki-client on console-ams.rpki-client.org