Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b63fc7a-23b4-35f3-a0ef-4798eac7e9aa.roa
File:                     0b63fc7a-23b4-35f3-a0ef-4798eac7e9aa.roa (raw, json)
Hash identifier:          cpqbwJfqy3+2yyLzq/wXMnOVKLI7x3g80qqEG2ZJrSk=
Subject key identifier:   5C:D6:BA:89:2C:F5:7B:46:61:CB:0C:AF:C1:8F:A1:80:9F:8D:73:01
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858481A44094F784BC372D7B8C180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b63fc7a-23b4-35f3-a0ef-4798eac7e9aa.roa
Signing time:             Thu 05 Dec 2024 05:54:59 +0000
ROA not before:           Thu 05 Dec 2024 05:54:59 +0000
ROA not after:            Wed 05 Mar 2025 05:54:59 +0000
asID:                     9009
IP address blocks:        45.74.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1a:44:09:4f:78:4b:c3:72:d7:b8:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec  5 05:54:59 2024 GMT
            Not After : Mar  5 05:54:59 2025 GMT
        Subject: CN=9f6fa361-f32d-4dbc-8779-1248f8619bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:d2:09:2d:3e:83:53:f9:2f:ca:41:27:08:
                    60:90:27:62:4c:74:f7:11:1b:07:2d:56:86:85:5e:
                    dc:fd:99:9f:87:3a:b6:88:ce:32:f4:0d:8e:6a:1a:
                    11:64:01:78:d7:ba:e8:28:83:34:85:b4:c4:40:c4:
                    80:4b:50:aa:99:eb:a6:69:75:f2:e4:e7:b5:2c:b1:
                    dd:32:f0:60:0b:29:9e:a9:21:ab:c5:e1:55:13:b1:
                    b5:a6:b1:19:81:d0:c7:6d:52:c6:7a:0c:69:04:32:
                    ea:4c:73:94:86:bc:78:5a:91:66:32:75:69:40:3e:
                    97:e2:9e:c3:af:6b:60:41:3c:33:19:d6:43:d8:c5:
                    4a:13:29:b1:23:fe:99:68:6a:66:22:00:b0:8b:01:
                    09:b3:d1:86:c3:d6:cf:f5:ff:3a:ea:e0:ff:9e:a9:
                    91:27:36:31:23:9c:28:b7:8f:99:93:58:c7:42:0f:
                    06:0c:6a:ca:77:50:4a:d6:5f:06:ca:6a:9c:cc:b4:
                    24:07:55:5c:a8:4e:91:f5:e4:20:fb:0d:b7:13:f9:
                    f0:d3:39:94:e0:f7:5c:3a:1d:25:c3:98:95:7e:2f:
                    a7:54:6c:d5:3b:c6:38:5c:0c:aa:b1:0b:54:f7:12:
                    51:67:53:c6:1d:da:c0:54:c4:77:bb:32:43:65:50:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D6:BA:89:2C:F5:7B:46:61:CB:0C:AF:C1:8F:A1:80:9F:8D:73:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b63fc7a-23b4-35f3-a0ef-4798eac7e9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:f9:99:d1:f5:b7:77:55:f6:56:f5:42:7f:cd:c6:48:19:
         83:56:bb:21:58:e0:de:d7:6d:74:36:34:c0:33:8f:2f:d8:6e:
         f2:46:9b:53:50:2f:18:95:1b:90:20:fc:34:c2:d7:2f:64:a5:
         b2:5b:1b:de:25:39:e7:c1:bc:95:e9:d4:b1:ee:34:a9:6e:6e:
         5a:42:37:9a:4d:7a:e4:c3:1a:94:4d:d8:95:98:92:5e:9c:d4:
         91:8d:8c:a7:bd:db:0c:36:0c:b9:0e:b0:24:fa:39:eb:fc:69:
         6d:a8:99:29:b9:9e:3b:70:c9:31:b8:c0:29:c3:f2:61:08:03:
         7e:5d:2f:b7:34:fe:88:14:f3:af:85:5b:dd:32:60:49:46:fe:
         82:61:f2:30:71:ba:ee:2c:2f:52:5c:c3:0b:ea:08:f1:4b:c1:
         ce:76:8d:de:91:a3:73:64:8d:d4:b7:77:2d:78:8d:db:57:0b:
         4c:83:09:9b:64:54:31:0b:cf:84:ac:e1:b4:df:0e:bd:1b:9f:
         e1:8a:09:be:62:0d:7f:3b:6b:32:d8:67:17:14:4c:97:09:63:
         62:48:31:c7:08:21:c5:c1:8b:86:30:62:b1:f3:14:ed:3a:65:
         ab:ce:76:13:22:a3:d1:de:85:dd:a0:8a:f3:15:e6:a0:bd:2a:
         16:5f:43:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgaRAlPeEvDcte4wYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIwNTA1NTQ1OVoXDTI1MDMwNTA1NTQ1OVowLzEtMCsGA1UEAxMk
OWY2ZmEzNjEtZjMyZC00ZGJjLTg3NzktMTI0OGY4NjE5YmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqvSCS0+g1P5L8pBJwhgkCdiTHT3ERsHLVaG
hV7c/Zmfhzq2iM4y9A2OahoRZAF417roKIM0hbTEQMSAS1CqmeumaXXy5Oe1LLHd
MvBgCymeqSGrxeFVE7G1prEZgdDHbVLGegxpBDLqTHOUhrx4WpFmMnVpQD6X4p7D
r2tgQTwzGdZD2MVKEymxI/6ZaGpmIgCwiwEJs9GGw9bP9f866uD/nqmRJzYxI5wo
t4+Zk1jHQg8GDGrKd1BK1l8GymqczLQkB1VcqE6R9eQg+w23E/nw0zmU4PdcOh0l
w5iVfi+nVGzVO8Y4XAyqsQtU9xJRZ1PGHdrAVMR3uzJDZVAotQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzWuoks9XtGYcsMr8GPoYCfjXMBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGI2M2ZjN2EtMjNiNC0z
NWYzLWEwZWYtNDc5OGVhYzdlOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnA+ZnR9bd3VfZW9UJ/zcZIGYNWuyFY4N7XbXQ2NMAzjy/YbvJGm1NQ
LxiVG5Ag/DTC1y9kpbJbG94lOefBvJXp1LHuNKlublpCN5pNeuTDGpRN2JWYkl6c
1JGNjKe92ww2DLkOsCT6Oev8aW2omSm5njtwyTG4wCnD8mEIA35dL7c0/ogU86+F
W90yYElG/oJh8jBxuu4sL1JcwwvqCPFLwc52jd6Ro3NkjdS3dy14jdtXC0yDCZtk
VDELz4Ss4bTfDr0bn+GKCb5iDX87azLYZxcUTJcJY2JIMccIIcXBi4YwYrHzFO06
ZavOdhMio9Hehd2givMV5qC9KhZfQ3o=
-----END CERTIFICATE-----
Generated at Thu Dec 26 09:00:18 2024 by rpki-client on console-ams.rpki-client.org