Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa
File:                     013914ac-db93-39b5-886d-89f5abbd33e9.roa (raw, json)
Hash identifier:          Jwt4vUoDMC3X0IPbVH1DSmWZwadEp9FzxDVOx0hOCPw=
Subject key identifier:   7D:6F:22:A1:33:4E:6B:98:28:E7:05:EA:85:68:C2:B3:DE:34:66:E2
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB837BD49196734ABB5180
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        74.216.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:83:7b:d4:91:96:73:4a:bb:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=bcfbe97e-e0c7-4088-8689-06e946b145f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:84:06:ed:ea:34:19:71:5b:d4:95:d5:7f:
                    6d:4a:4d:2a:b9:d8:42:82:84:a0:35:ef:82:85:4d:
                    df:9b:bf:03:d1:68:63:7f:a1:fa:7f:c7:16:7a:98:
                    2c:8d:a2:5a:6f:e7:7a:56:7e:24:0c:af:02:18:2b:
                    12:ca:49:1c:aa:f9:95:85:d6:24:2f:c2:a8:45:4e:
                    e3:b3:4e:c1:9f:47:6c:4b:53:68:ea:3f:03:f5:4f:
                    7a:d0:17:5e:97:97:bf:7d:06:e3:9e:c4:c5:ef:01:
                    19:37:f0:c9:64:ad:bc:f2:b6:c8:3d:5d:6e:55:5f:
                    ae:df:5b:f3:26:17:a7:13:17:91:2d:1c:8f:1e:30:
                    11:34:cc:f2:32:68:b9:3d:ce:84:64:7c:29:88:91:
                    37:c1:16:04:3e:2b:60:61:ad:80:fa:81:37:13:8b:
                    8c:0e:a8:f2:88:2f:a9:af:19:b8:89:6f:2d:f3:11:
                    11:a7:45:ad:b8:9f:92:5a:c9:7c:42:1a:69:5a:d4:
                    16:d5:c5:63:fb:70:f8:94:18:54:50:8e:93:31:12:
                    10:b8:c3:fe:08:1d:83:c4:38:e0:29:42:27:a8:33:
                    1a:bf:2d:2a:01:79:c2:d9:13:76:0b:42:30:c9:84:
                    2f:ba:7f:10:a7:e0:e4:61:76:e8:76:15:fa:2d:8f:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6F:22:A1:33:4E:6B:98:28:E7:05:EA:85:68:C2:B3:DE:34:66:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:14:23:5c:18:5f:cc:59:14:94:8b:f0:7c:3b:0b:82:ed:
         ee:b2:d3:45:a1:25:3d:e2:5f:1d:2f:9d:7d:8e:30:c1:a2:ef:
         c5:94:20:e9:61:c1:e9:8e:e5:a8:06:65:14:9a:92:5f:66:46:
         b0:72:39:5b:b7:3c:fc:4d:25:10:a8:a5:b0:65:84:71:df:9d:
         f4:e3:c9:ce:0f:71:c8:c2:d4:ae:85:4d:ec:25:69:17:c9:97:
         16:ae:6d:6a:92:7c:10:ee:ad:bd:c8:4c:3d:c0:de:da:b2:9c:
         39:48:8c:67:41:1a:18:aa:0b:2a:80:b9:1f:f7:e5:05:0c:aa:
         2b:41:16:00:89:04:d6:49:73:0e:b0:46:8f:ce:a9:70:eb:93:
         8d:61:2e:82:d2:1f:ae:af:e7:2e:3a:ad:5f:19:6e:a7:dc:90:
         27:e8:76:aa:b8:0f:ce:5f:03:e2:64:f2:06:ab:1a:9d:62:18:
         54:47:80:8c:2d:7f:a3:ae:2a:eb:8c:91:28:35:fb:f7:83:17:
         b9:ef:1c:9c:eb:b7:cb:2c:e4:b7:16:d5:08:ae:ec:0e:8f:c7:
         6f:05:dc:d9:fb:45:88:3f:ee:c2:43:4f:45:9d:68:e9:a7:de:
         72:f0:a4:68:ca:f8:bc:ed:b4:08:a9:8e:8e:d3:31:d2:8f:fd:
         03:4a:8a:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdb24N71JGWc0q7UYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
YmNmYmU5N2UtZTBjNy00MDg4LTg2ODktMDZlOTQ2YjE0NWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvyEBu3qNBlxW9SV1X9tSk0qudhCgoSgNe+C
hU3fm78D0Whjf6H6f8cWepgsjaJab+d6Vn4kDK8CGCsSykkcqvmVhdYkL8KoRU7j
s07Bn0dsS1No6j8D9U960Bdel5e/fQbjnsTF7wEZN/DJZK288rbIPV1uVV+u31vz
JhenExeRLRyPHjARNMzyMmi5Pc6EZHwpiJE3wRYEPitgYa2A+oE3E4uMDqjyiC+p
rxm4iW8t8xERp0WtuJ+SWsl8QhppWtQW1cVj+3D4lBhUUI6TMRIQuMP+CB2DxDjg
KUInqDMavy0qAXnC2RN2C0IwyYQvun8Qp+DkYXbodhX6LY9TZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1vIqEzTmuYKOcF6oVowrPeNGbiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMDEzOTE0YWMtZGI5My0z
OWI1LTg4NmQtODlmNWFiYmQzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStj/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPtFCNcGF/MWRSUi/B8OwuC7e6y00WhJT3iXx0vnX2OMMGi78WUIOlh
wemO5agGZRSakl9mRrByOVu3PPxNJRCopbBlhHHfnfTjyc4PccjC1K6FTewlaRfJ
lxaubWqSfBDurb3ITD3A3tqynDlIjGdBGhiqCyqAuR/35QUMqitBFgCJBNZJcw6w
Ro/OqXDrk41hLoLSH66v5y46rV8ZbqfckCfodqq4D85fA+Jk8garGp1iGFRHgIwt
f6OuKuuMkSg1+/eDF7nvHJzrt8ss5LcW1Qiu7A6Px28F3Nn7RYg/7sJDT0WdaOmn
3nLwpGjK+LzttAipjo7TMdKP/QNKiiE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:29 2024 by rpki-client on console-fra.rpki-client.org