Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa
File:                     7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa (raw, json)
Hash identifier:          HAczmIfDK20GVOI/vTWTi+MV4OiB57+c02HualNwyMY=
Subject key identifier:   CE:6B:3A:82:B2:25:B6:33:67:40:A1:26:D0:07:CB:BB:02:FC:DB:EF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847872132A8EF0B7D0CF4A0AF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        45.74.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:32:a8:ef:0b:7d:0c:f4:a0:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=7d24ab08-9571-480f-8a95-32231914b21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:55:7e:1c:64:c2:ca:a3:9e:10:89:e7:9a:
                    b7:e9:cf:65:27:0b:53:90:52:58:fa:12:70:6f:40:
                    a8:bb:63:2c:53:89:59:6a:26:de:1f:da:1f:0f:c0:
                    dc:aa:f3:ad:4b:04:ac:5e:9d:cd:24:42:d4:43:14:
                    ae:f9:4b:d3:e6:af:92:f8:e4:40:06:db:65:92:57:
                    25:8d:61:1c:a9:77:b1:7b:53:48:39:bb:a3:6f:46:
                    c3:b1:5d:55:ad:d9:c0:7e:04:24:14:5f:8b:dd:60:
                    ea:b4:c4:e1:ba:16:01:e8:ef:8f:8e:cb:04:c4:8a:
                    aa:9a:63:74:36:6c:47:7e:0e:c3:d7:7b:45:5a:f4:
                    72:8a:d1:d6:18:f6:5e:88:e7:4f:ca:85:27:60:98:
                    16:eb:05:95:29:e8:2b:53:84:33:9c:a9:c2:a5:77:
                    3b:4b:07:eb:ff:2c:a4:e0:ef:3e:14:74:65:e1:71:
                    8f:a2:d7:fc:58:9d:87:70:d7:f9:9b:56:8a:80:65:
                    fa:a6:13:c3:71:c2:c6:5b:69:63:30:74:32:70:ae:
                    6d:92:d2:61:81:88:fa:b3:df:30:5b:96:df:2c:74:
                    2e:08:ed:bc:e3:30:dc:53:03:07:31:38:56:58:91:
                    c0:3e:3b:86:36:84:df:6e:0f:81:de:41:0b:66:39:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:3A:82:B2:25:B6:33:67:40:A1:26:D0:07:CB:BB:02:FC:DB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:f0:42:26:38:97:24:10:ca:84:22:e9:71:eb:55:9f:5b:
         23:8d:ea:e3:75:99:42:ea:61:e7:96:70:8b:e4:9e:66:a4:60:
         93:85:45:48:03:08:9e:cb:73:96:b3:50:97:7e:6b:f8:3a:51:
         56:ff:c3:de:08:ec:54:0e:a1:93:8c:6c:88:87:70:48:aa:55:
         3d:d6:1b:e8:1d:af:55:af:53:e8:dc:84:1c:45:a8:3a:7e:99:
         9a:34:e4:a8:f3:0f:c8:eb:35:fd:60:f6:0a:32:3f:f5:25:a0:
         4f:f4:d2:65:5e:be:cd:94:eb:25:96:a2:b8:55:de:cd:67:6f:
         97:90:d8:1c:86:36:03:00:77:fa:8b:54:d0:b6:85:65:86:5d:
         29:20:d2:6e:24:c7:d2:f7:b5:6b:96:5e:81:53:42:2d:77:5f:
         66:93:73:0c:20:fa:2a:34:08:a9:b0:c7:22:98:a8:86:c9:6b:
         ab:e6:ff:b1:35:91:89:c6:aa:4f:2b:b4:6b:56:00:80:77:aa:
         d6:22:a0:08:20:76:bb:ab:ce:47:9a:4c:39:3f:2f:e3:6a:06:
         18:19:cd:6d:83:a6:07:13:29:61:28:24:f3:f2:32:6e:54:fd:
         3b:35:dd:6c:1b:bd:a9:ac:25:eb:85:b0:26:9a:c8:04:95:72:
         2a:20:c6:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHITKo7wt9DPSgrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
N2QyNGFiMDgtOTU3MS00ODBmLThhOTUtMzIyMzE5MTRiMjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj1VfhxkwsqjnhCJ55q36c9lJwtTkFJY+hJw
b0Cou2MsU4lZaibeH9ofD8DcqvOtSwSsXp3NJELUQxSu+UvT5q+S+ORABttlklcl
jWEcqXexe1NIObujb0bDsV1VrdnAfgQkFF+L3WDqtMThuhYB6O+PjssExIqqmmN0
NmxHfg7D13tFWvRyitHWGPZeiOdPyoUnYJgW6wWVKegrU4QznKnCpXc7Swfr/yyk
4O8+FHRl4XGPotf8WJ2HcNf5m1aKgGX6phPDccLGW2ljMHQycK5tktJhgYj6s98w
W5bfLHQuCO284zDcUwMHMThWWJHAPjuGNoTfbg+B3kELZjl12QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5rOoKyJbYzZ0ChJtAHy7sC/NvvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2Q2MDFkYWQtMDdlMy0z
YTNiLTgwNDItZWQ1MGFhOWQ4NjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABga8EImOJckEMqEIulx61WfWyON6uN1mULqYeeWcIvknmakYJOFRUgD
CJ7Lc5azUJd+a/g6UVb/w94I7FQOoZOMbIiHcEiqVT3WG+gdr1WvU+jchBxFqDp+
mZo05KjzD8jrNf1g9goyP/UloE/00mVevs2U6yWWorhV3s1nb5eQ2ByGNgMAd/qL
VNC2hWWGXSkg0m4kx9L3tWuWXoFTQi13X2aTcwwg+io0CKmwxyKYqIbJa6vm/7E1
kYnGqk8rtGtWAIB3qtYioAggdrurzkeaTDk/L+NqBhgZzW2DpgcTKWEoJPPyMm5U
/Ts13WwbvamsJeuFsCaayASVciogxk8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org