Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3416aee-da5a-3536-837d-8a0c660dcfd4.roa
File:                     b3416aee-da5a-3536-837d-8a0c660dcfd4.roa (raw, json)
Hash identifier:          FSAfLWOeQWVy7Sj22+FK2vVIwtR+Ba5QoQQWwLt3HJE=
Subject key identifier:   DA:D2:08:5F:F1:4A:AE:83:61:A5:2A:C2:C7:FC:73:46:4E:E2:B4:2A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F155308985BDEB597E13D4A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3416aee-da5a-3536-837d-8a0c660dcfd4.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        74.124.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:30:89:85:bd:eb:59:7e:13:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=55f9e0a9-09cd-4923-8956-85aac749175d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:20:b8:f6:3e:d5:34:e5:f4:0d:e3:bb:c3:
                    76:c2:79:99:67:de:f4:4e:19:ce:39:aa:6c:e1:ad:
                    32:76:6f:fb:f3:26:f7:70:82:46:c2:56:10:f3:2e:
                    ae:67:04:e4:eb:c1:c3:30:71:2b:a0:7b:a7:35:4f:
                    07:02:cf:36:2d:3e:fa:fe:6c:1b:00:4f:0a:2b:40:
                    6a:34:9a:0b:07:57:b0:b9:1c:0e:82:9a:09:67:0f:
                    03:fc:0e:dd:43:4d:2d:5c:81:71:a1:97:16:69:56:
                    82:db:7c:ae:da:ae:eb:f0:f5:6d:37:45:49:68:a4:
                    d8:9a:88:62:75:83:33:b8:eb:48:24:a9:1c:e3:b8:
                    e4:ed:65:57:87:4d:38:12:b5:3c:2f:9f:7d:68:db:
                    d3:c5:07:66:59:5d:06:ab:11:b6:a2:6d:3f:28:25:
                    d3:cc:e6:4c:c7:db:9a:17:e4:ca:8b:f9:9f:b1:45:
                    f3:02:7c:1b:d0:29:de:aa:fa:3c:66:f6:27:eb:cb:
                    a4:4b:f5:9e:9d:50:8d:08:55:f5:d4:dd:38:42:e3:
                    fd:28:68:c3:19:90:dc:9e:d3:31:0f:1d:5d:90:e6:
                    20:79:04:02:28:9e:7d:ef:a3:07:49:51:07:03:94:
                    ce:21:56:dc:08:2f:e6:f3:da:aa:90:48:96:37:fd:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:08:5F:F1:4A:AE:83:61:A5:2A:C2:C7:FC:73:46:4E:E2:B4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3416aee-da5a-3536-837d-8a0c660dcfd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:87:4f:4a:9f:c5:2f:63:66:32:10:95:0c:5b:8a:05:8a:
         5b:01:1c:7c:76:a4:c7:ef:82:84:08:38:07:6f:87:46:13:87:
         01:d4:59:d7:9f:91:9d:bb:18:b2:e2:7a:2e:b0:51:ee:fc:a4:
         f2:15:6f:ce:93:5f:87:71:21:9e:55:02:10:ac:e6:d6:3a:af:
         16:4e:2c:3a:bf:1f:25:a1:c0:a4:bf:29:d3:dc:4d:70:ee:93:
         73:7c:aa:4c:5f:f0:25:8f:07:d7:fb:39:5a:c3:ac:ca:72:fb:
         e4:d4:a6:04:3c:fe:7f:3f:14:f3:cf:ad:49:7c:9e:b3:d0:5f:
         45:fa:a9:65:a0:84:01:90:c7:a1:b3:80:3b:1a:69:71:fe:5c:
         07:ca:4d:0d:b3:1f:d3:96:55:ec:ab:ea:3c:9b:91:4e:cf:22:
         5a:e0:0a:91:f7:78:bc:80:65:bf:72:87:c9:c3:f7:1b:43:6c:
         de:32:ea:4f:f9:0e:b3:0b:5e:19:7f:69:5a:0b:42:4b:ab:cc:
         35:8e:3e:aa:27:40:2e:0d:67:8f:5f:3d:ee:22:61:1c:9c:52:
         bd:64:9c:b1:15:ce:16:00:8b:71:ab:e3:bd:de:2a:e7:69:00:
         32:44:8b:05:6f:85:e0:b8:7c:f0:00:00:fb:19:8c:41:17:84:
         b2:21:4e:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTCJhb3rWX4T1KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
NTVmOWUwYTktMDljZC00OTIzLTg5NTYtODVhYWM3NDkxNzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw0guPY+1TTl9A3ju8N2wnmZZ970ThnOOaps
4a0ydm/78yb3cIJGwlYQ8y6uZwTk68HDMHEroHunNU8HAs82LT76/mwbAE8KK0Bq
NJoLB1ewuRwOgpoJZw8D/A7dQ00tXIFxoZcWaVaC23yu2q7r8PVtN0VJaKTYmohi
dYMzuOtIJKkc47jk7WVXh004ErU8L599aNvTxQdmWV0GqxG2om0/KCXTzOZMx9ua
F+TKi/mfsUXzAnwb0Cneqvo8ZvYn68ukS/WenVCNCFX11N04QuP9KGjDGZDcntMx
Dx1dkOYgeQQCKJ5976MHSVEHA5TOIVbcCC/m89qqkEiWN/2ZeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrSCF/xSq6DYaUqwsf8c0ZO4rQqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjM0MTZhZWUtZGE1YS0z
NTM2LTgzN2QtOGEwYzY2MGRjZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSnzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnth09Kn8UvY2YyEJUMW4oFilsBHHx2pMfvgoQIOAdvh0YThwHUWdef
kZ27GLLiei6wUe78pPIVb86TX4dxIZ5VAhCs5tY6rxZOLDq/HyWhwKS/KdPcTXDu
k3N8qkxf8CWPB9f7OVrDrMpy++TUpgQ8/n8/FPPPrUl8nrPQX0X6qWWghAGQx6Gz
gDsaaXH+XAfKTQ2zH9OWVeyr6jybkU7PIlrgCpH3eLyAZb9yh8nD9xtDbN4y6k/5
DrMLXhl/aVoLQkurzDWOPqonQC4NZ49fPe4iYRycUr1knLEVzhYAi3Gr473eKudp
ADJEiwVvheC4fPAAAPsZjEEXhLIhTpk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:06:19 2024 by rpki-client on console-fra.rpki-client.org