Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b395de-0521-3794-84c8-bf5c503a1c67.roa
File:                     74b395de-0521-3794-84c8-bf5c503a1c67.roa (raw, json)
Hash identifier:          iPBEcNBmJfWqE69hd4lfGEt7pgnzXUGEsXufTa5PGnw=
Subject key identifier:   BD:17:DA:3A:52:2F:A3:5D:19:C9:34:19:E9:3D:5F:24:ED:2C:FE:56
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847D56A040EDE9F178522F23B00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b395de-0521-3794-84c8-bf5c503a1c67.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     54113
IP address blocks:        157.5.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:04:0e:de:9f:17:85:22:f2:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=75549e83-f1b5-4313-a5ab-37b97cef91af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:be:cd:d0:c5:74:60:ab:2b:6e:09:67:8a:
                    fd:61:d2:47:02:a3:f2:34:26:bc:94:b2:da:33:23:
                    72:6f:0f:02:ba:61:2d:00:29:9e:e1:59:ef:0f:fd:
                    5e:8c:8d:d9:0d:8a:9f:18:4c:1b:08:96:54:a7:86:
                    af:e7:cc:28:22:bc:1e:64:ff:8c:79:d0:33:c0:80:
                    c7:1b:44:fd:ec:07:50:52:62:70:76:5c:99:d5:41:
                    13:cd:a7:fb:e5:f3:b9:fe:55:49:f5:d0:62:ef:cb:
                    be:30:22:e5:d7:e5:1c:62:27:93:47:59:80:7d:1d:
                    da:96:1f:fd:e1:8f:1a:ec:c5:fe:ad:32:eb:04:98:
                    11:06:d4:13:5c:35:e0:aa:18:2e:e7:5d:cf:0b:f4:
                    fa:34:6e:ef:3a:47:e6:92:7f:e5:26:8d:e1:6b:c8:
                    03:dc:7f:53:ad:7e:2b:12:8b:77:5c:b0:3c:22:4b:
                    22:d4:ef:22:4d:b9:98:11:44:d8:f1:48:5a:de:7b:
                    79:99:6d:01:c9:bd:51:31:ea:4b:a0:f4:05:1f:ab:
                    cf:8c:2b:a9:a9:ae:68:87:a9:98:6b:f5:25:82:a2:
                    0a:98:b1:41:34:28:e1:80:bd:86:7b:d0:44:bc:92:
                    77:84:9e:15:42:79:c1:a2:de:75:fb:5a:26:0b:db:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:17:DA:3A:52:2F:A3:5D:19:C9:34:19:E9:3D:5F:24:ED:2C:FE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b395de-0521-3794-84c8-bf5c503a1c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:e8:ee:d8:56:24:6e:14:27:46:ca:02:4a:42:8f:4d:8d:
         62:5f:86:5e:bf:75:70:45:ff:2f:00:dd:62:19:4a:d0:b8:dc:
         0a:49:cf:59:d5:86:8c:ba:b7:0a:51:a3:67:8a:cb:c0:4d:90:
         62:93:84:55:8c:2c:bc:d2:c2:ac:05:97:d5:b5:10:2a:62:25:
         64:da:77:15:80:7c:d8:81:85:e9:ec:c3:0c:57:be:77:ad:db:
         76:f6:51:2a:b1:92:22:b9:ff:48:24:47:9a:28:91:75:72:3e:
         20:39:f7:34:69:d9:31:2b:40:de:ab:c8:5f:7b:e2:79:1f:97:
         ad:85:c8:32:e1:5a:40:23:79:eb:6c:74:61:2d:b0:db:05:ab:
         06:8b:27:7c:9e:f2:bd:3e:7d:d6:09:86:59:9c:5f:48:e9:82:
         63:79:8b:00:e1:4f:34:5f:79:ab:b4:da:d0:16:bd:aa:6a:dc:
         0a:ab:2c:9a:2c:bc:f7:6f:6a:cc:07:d7:e9:7d:5c:41:7f:dd:
         75:e2:7d:25:64:e8:52:8a:1a:6f:63:13:71:92:d8:b6:56:c0:
         d7:6f:7a:e0:65:bf:5f:04:d9:63:93:b0:8b:38:10:f0:69:47:
         ee:aa:6d:a7:14:ea:25:4d:27:b2:e7:19:5f:52:ed:69:06:6c:
         03:46:24:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVagQO3p8XhSLyOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
NzU1NDllODMtZjFiNS00MzEzLWE1YWItMzdiOTdjZWY5MWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMS+zdDFdGCrK24JZ4r9YdJHAqPyNCa8lLLa
MyNybw8CumEtACme4VnvD/1ejI3ZDYqfGEwbCJZUp4av58woIrweZP+MedAzwIDH
G0T97AdQUmJwdlyZ1UETzaf75fO5/lVJ9dBi78u+MCLl1+UcYieTR1mAfR3alh/9
4Y8a7MX+rTLrBJgRBtQTXDXgqhgu513PC/T6NG7vOkfmkn/lJo3ha8gD3H9TrX4r
Eot3XLA8Iksi1O8iTbmYEUTY8Uha3nt5mW0Byb1RMepLoPQFH6vPjCupqa5oh6mY
a/UlgqIKmLFBNCjhgL2Ge9BEvJJ3hJ4VQnnBot51+1omC9tjswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0X2jpSL6NdGck0Gek9XyTtLP5WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzRiMzk1ZGUtMDUyMS0z
Nzk0LTg0YzgtYmY1YzUwM2ExYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTY6O7YViRuFCdGygJKQo9NjWJfhl6/dXBF/y8A3WIZStC43ApJz1nV
hoy6twpRo2eKy8BNkGKThFWMLLzSwqwFl9W1ECpiJWTadxWAfNiBhenswwxXvnet
23b2USqxkiK5/0gkR5ookXVyPiA59zRp2TErQN6ryF974nkfl62FyDLhWkAjeets
dGEtsNsFqwaLJ3ye8r0+fdYJhlmcX0jpgmN5iwDhTzRfeau02tAWvapq3AqrLJos
vPdvaswH1+l9XEF/3XXifSVk6FKKGm9jE3GS2LZWwNdveuBlv18E2WOTsIs4EPBp
R+6qbacU6iVNJ7LnGV9S7WkGbANGJNI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:21 2024 by rpki-client on console-ams.rpki-client.org