Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/23a0fdf8-308b-3799-826a-481cdce8e5ce.roa
File:                     23a0fdf8-308b-3799-826a-481cdce8e5ce.roa (raw, json)
Hash identifier:          l1TAj6gtIhtvqKBwczMMjZ1zwxVXVymfL69GTmb7hqQ=
Subject key identifier:   2D:F0:A0:73:80:96:C1:B8:75:A8:85:C8:AF:D6:27:71:87:4A:3D:DC
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F43285848E59BCCB4BD38235183000640
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/23a0fdf8-308b-3799-826a-481cdce8e5ce.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     19528
IP address blocks:        74.209.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:cc:b4:bd:38:23:51:83:00:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=f383f59b-2775-45ea-8c85-beb2188bb61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:b2:f5:1e:d7:3c:23:89:e2:1f:c0:1b:f4:
                    95:7b:75:04:13:2f:f2:67:27:2c:b4:aa:3f:86:1c:
                    e8:64:df:f8:ad:99:32:1d:ef:82:00:db:ca:cd:40:
                    fb:a1:fa:78:96:3b:10:8b:27:17:66:67:12:3e:5f:
                    0a:e8:cc:62:4b:a2:f2:aa:67:c6:49:bd:f2:8d:ed:
                    22:bf:e0:af:d2:bd:0a:0a:42:dc:30:dd:4c:c3:b8:
                    29:a3:17:f8:2e:37:13:45:6b:c9:01:84:00:4e:03:
                    53:99:7c:d3:4b:81:b0:21:8b:12:e7:78:2f:7c:16:
                    48:d6:f8:bb:5c:4e:b1:31:1d:76:8b:c5:91:d8:22:
                    d3:9a:d3:1e:46:ee:8e:2e:e7:6a:10:89:63:1b:f8:
                    d4:e2:58:5c:8e:6b:7e:d1:5b:9e:1e:b7:22:25:64:
                    39:4d:cf:62:5f:9c:f9:0c:0d:1d:c8:2d:8f:f3:52:
                    4b:af:62:28:75:07:c9:ee:58:68:45:af:e6:7d:12:
                    f1:50:1f:d6:9b:56:a0:1c:8f:bc:f1:36:1c:3a:e8:
                    0c:43:a6:62:5f:2d:f3:87:69:1f:2a:b6:09:73:20:
                    b6:38:60:d0:f1:24:85:9b:e0:7b:06:7e:cb:f0:7d:
                    ed:c5:fe:fb:06:92:8e:83:14:1d:c3:fb:c8:38:07:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:A0:73:80:96:C1:B8:75:A8:85:C8:AF:D6:27:71:87:4A:3D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/23a0fdf8-308b-3799-826a-481cdce8e5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:0d:19:48:4b:63:9d:59:84:c3:3b:54:ee:d4:2b:88:20:
         ce:c4:03:8d:74:a8:2f:68:85:c0:1c:0e:d3:03:a4:34:83:94:
         86:d4:d4:0b:ca:1a:e3:98:f6:ff:35:ac:fc:44:30:83:bc:e2:
         b0:3c:c5:d3:d3:c3:ec:52:48:50:cb:f6:96:c1:b1:e6:76:0b:
         f0:16:66:08:b1:9d:7e:72:15:94:7f:31:f8:5c:2b:5e:f8:75:
         b2:26:e1:8b:a8:ee:f5:90:fd:e9:f4:82:9a:9d:3d:ac:f7:f6:
         2a:d4:53:dc:88:ed:98:c3:9b:87:4d:47:51:5b:3f:69:8b:ec:
         36:17:c3:9f:1e:82:bb:2c:8f:2d:f8:13:75:d6:b5:be:a1:6c:
         13:a7:7f:ce:a1:e0:52:f1:97:a6:6c:58:d6:e3:78:b6:be:e0:
         f5:e5:e6:64:56:c1:36:f7:05:70:27:35:f0:85:b4:5e:92:25:
         30:76:be:2c:58:60:3e:ec:0d:29:0f:7b:a5:9a:c8:f1:8c:5b:
         42:f3:3e:78:bf:51:55:ca:7b:47:94:51:bd:34:41:5b:1a:a7:
         57:ec:f1:b2:24:7e:af:fa:32:f6:6f:11:be:55:de:fa:e7:9e:
         8b:21:37:cb:03:0b:af:54:55:32:a9:f9:f6:51:e4:ee:77:3a:
         21:74:64:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8y0vTgjUYMABkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi
MWMzMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjM4M2Y1OWItMjc3NS00NWVhLThjODUtYmViMjE4OGJiNjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwWy9R7XPCOJ4h/AG/SVe3UEEy/yZycstKo/
hhzoZN/4rZkyHe+CANvKzUD7ofp4ljsQiycXZmcSPl8K6MxiS6LyqmfGSb3yje0i
v+Cv0r0KCkLcMN1Mw7gpoxf4LjcTRWvJAYQATgNTmXzTS4GwIYsS53gvfBZI1vi7
XE6xMR12i8WR2CLTmtMeRu6OLudqEIljG/jU4lhcjmt+0VueHrciJWQ5Tc9iX5z5
DA0dyC2P81JLr2IodQfJ7lhoRa/mfRLxUB/Wm1agHI+88TYcOugMQ6ZiXy3zh2kf
KrYJcyC2OGDQ8SSFm+B7Bn7L8H3txf77BpKOgxQdw/vIOAeYVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3woHOAlsG4daiFyK/WJ3GHSj3cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3
MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvMjNhMGZkZjgtMzA4Yi0z
Nzk5LTgyNmEtNDgxY2RjZThlNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj
NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0
YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm
NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStG9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENrDRlIS2OdWYTDO1Tu1CuIIM7EA410qC9ohcAcDtMDpDSDlIbU1AvK
GuOY9v81rPxEMIO84rA8xdPTw+xSSFDL9pbBseZ2C/AWZgixnX5yFZR/MfhcK174
dbIm4Yuo7vWQ/en0gpqdPaz39irUU9yI7ZjDm4dNR1FbP2mL7DYXw58egrssjy34
E3XWtb6hbBOnf86h4FLxl6ZsWNbjeLa+4PXl5mRWwTb3BXAnNfCFtF6SJTB2vixY
YD7sDSkPe6WayPGMW0LzPni/UVXKe0eUUb00QVsap1fs8bIkfq/6MvZvEb5V3vrn
noshN8sDC69UVTKp+fZR5O53OiF0ZHs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:51 2025 by rpki-client