Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa
File:                     f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa (raw, json)
Hash identifier:          PKZ6ISzQu2pt1x37mp1z75pUzqB6r7d1bZJPXEDossA=
Subject key identifier:   BA:30:BA:B5:D4:B0:8C:F6:EE:B4:D3:A7:58:D2:FD:98:E6:81:B9:29
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858477EC10FD9BD33F22821B41D80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     21949
IP address blocks:        74.213.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0f:d9:bd:33:f2:28:21:b4:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=d1612506-d4b2-420c-88e0-bd52f8d8724d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:35:a4:c9:f8:65:ee:f9:69:1d:f4:9e:31:
                    1d:ea:4c:1d:5e:54:fb:58:e3:b1:f2:2c:1a:dc:45:
                    f8:ba:0a:6b:e0:7d:6d:dc:2d:16:f7:c4:ea:10:28:
                    e9:2b:f3:3d:dd:d9:f9:a3:d1:cd:51:1a:48:09:73:
                    8d:6b:19:b5:fb:43:98:97:7f:44:62:e3:1a:1f:f8:
                    67:8a:ca:77:42:af:25:8d:66:5d:9e:1b:e5:52:a8:
                    cf:1a:63:58:97:e8:0b:18:28:e4:69:49:6f:14:fa:
                    6d:fa:93:25:09:49:9a:e8:62:17:20:3f:42:fc:ba:
                    5a:ce:13:b0:26:89:69:a6:d3:c2:83:de:aa:50:c4:
                    20:a7:65:30:55:b8:d9:13:6f:0d:e6:d1:30:42:d0:
                    53:32:e3:ee:83:76:b0:60:b1:df:e2:51:bf:1d:3f:
                    9a:79:92:b1:d2:6d:9e:08:94:c9:08:10:fb:f3:01:
                    2e:6f:73:e1:f0:8c:44:14:26:3a:35:73:f9:d2:b1:
                    f9:28:8f:46:f0:d2:21:08:9b:a1:98:cf:46:a0:84:
                    f9:28:0f:ce:b2:81:cf:a1:e9:f6:cb:44:03:e3:a2:
                    27:63:fa:92:16:47:7a:8b:23:ae:dc:1a:5d:d2:a7:
                    c3:86:4e:ed:33:8c:5a:0a:41:75:53:25:19:14:13:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:BA:B5:D4:B0:8C:F6:EE:B4:D3:A7:58:D2:FD:98:E6:81:B9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.213.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:93:41:02:52:29:c4:4e:c8:30:f0:a4:29:f4:69:7d:b9:
         40:d3:fb:49:bd:38:bf:1f:dc:2f:90:bf:8f:4f:69:61:fa:9b:
         1d:16:41:02:b2:b3:23:b4:ff:46:56:2a:9f:2d:92:49:b5:5f:
         5b:c2:c8:62:06:3f:03:ac:a0:88:9a:9b:6f:c1:9b:9b:78:9d:
         02:2b:fa:b8:15:14:c8:db:b6:8d:d3:29:05:04:22:a3:e0:64:
         3d:79:07:97:51:86:d4:54:12:94:ab:29:b0:3d:0b:14:d4:4c:
         4f:5f:97:2e:9b:ee:e9:9f:97:34:6c:e0:e6:02:5d:3c:99:50:
         1d:14:a2:bc:53:90:38:9c:02:82:08:70:f9:dd:61:9c:3e:44:
         ec:80:e2:54:f2:50:72:af:67:2a:61:47:05:c1:51:87:83:ee:
         92:52:a3:e8:95:df:ff:b4:2b:6d:3e:53:43:54:30:0b:d1:a8:
         06:9a:a2:1d:2b:b2:64:4f:14:f5:a5:c3:67:a2:2b:bc:12:21:
         da:e6:42:e4:02:78:e3:f4:b7:57:cb:9a:0f:cf:ac:8f:50:7d:
         ae:89:f3:8f:f6:ba:cf:56:80:74:e3:1d:2e:ca:47:cb:9c:b4:
         5e:da:2c:92:eb:26:d8:8a:6b:6a:ac:92:1d:0d:84:e2:25:c9:
         64:54:8a:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wQ/ZvTPyKCG0HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZDE2MTI1MDYtZDRiMi00MjBjLTg4ZTAtYmQ1MmY4ZDg3MjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NY1pMn4Ze75aR30njEd6kwdXlT7WOOx8iwa
3EX4ugpr4H1t3C0W98TqECjpK/M93dn5o9HNURpICXONaxm1+0OYl39EYuMaH/hn
isp3Qq8ljWZdnhvlUqjPGmNYl+gLGCjkaUlvFPpt+pMlCUma6GIXID9C/LpazhOw
JolpptPCg96qUMQgp2UwVbjZE28N5tEwQtBTMuPug3awYLHf4lG/HT+aeZKx0m2e
CJTJCBD78wEub3Ph8IxEFCY6NXP50rH5KI9G8NIhCJuhmM9GoIT5KA/OsoHPoen2
y0QD46InY/qSFkd6iyOu3Bpd0qfDhk7tM4xaCkF1UyUZFBNRcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLowurXUsIz27rTTp1jS/ZjmgbkpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjlmOGRjZDgtMjFmNS0z
MDMxLWExYWEtZjFiZjBmOWJiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELOk0ECUinETsgw8KQp9Gl9uUDT+0m9OL8f3C+Qv49PaWH6mx0WQQKy
syO0/0ZWKp8tkkm1X1vCyGIGPwOsoIiam2/Bm5t4nQIr+rgVFMjbto3TKQUEIqPg
ZD15B5dRhtRUEpSrKbA9CxTUTE9fly6b7umflzRs4OYCXTyZUB0UorxTkDicAoII
cPndYZw+ROyA4lTyUHKvZyphRwXBUYeD7pJSo+iV3/+0K20+U0NUMAvRqAaaoh0r
smRPFPWlw2eiK7wSIdrmQuQCeOP0t1fLmg/PrI9Qfa6J84/2us9WgHTjHS7KR8uc
tF7aLJLrJtiKa2qskh0NhOIlyWRUipQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org