Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa
File:                     b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa (raw, json)
Hash identifier:          BEq1q0oZuqXGeK9aIPgNXcEliDA3c0CSXbK+3+CJRt4=
Subject key identifier:   9D:60:60:70:AE:54:77:1A:3A:1B:4E:D8:7A:93:B3:3C:7E:15:85:D4
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F432858471BA5A9BB668823A0FAF92E80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     1239
IP address blocks:        74.91.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:a9:bb:66:88:23:a0:fa:f9:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=0c2411c5-ddd1-4aca-a043-a7c09945b9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:35:8d:a2:84:80:d3:15:f5:7e:a1:c2:1b:
                    94:1a:e4:2b:3e:02:05:72:c3:18:95:b8:25:b7:ac:
                    1c:16:bf:a2:2a:1d:b6:9d:30:ba:93:41:ad:8a:9c:
                    42:56:22:fb:e2:7c:6b:34:0f:a1:38:44:00:36:a3:
                    08:26:66:d1:cd:66:1e:9e:23:f0:fe:8e:e2:9c:0e:
                    97:a6:00:ab:c9:0d:10:05:d4:78:ad:73:18:c0:35:
                    96:83:71:0f:65:ba:74:08:86:2d:cb:b6:ac:62:c9:
                    02:9b:f8:cf:92:35:ac:3b:f9:ae:aa:0b:47:ba:e3:
                    da:ff:1b:20:55:9d:a8:6b:d0:5f:ca:fa:49:c1:68:
                    a0:63:cf:a2:07:0d:d9:72:61:fa:48:ac:96:2e:b6:
                    67:13:d6:16:e0:9d:f7:63:ab:eb:c1:d7:88:55:d9:
                    78:05:58:c3:7e:0c:ed:48:70:15:8c:57:db:b3:85:
                    e7:31:6d:92:fb:05:d8:4e:ed:16:e4:dc:d8:37:dc:
                    11:26:7a:91:41:3e:9e:0a:bf:e0:1a:71:79:9b:56:
                    ba:f1:d1:0a:e4:85:dc:a1:45:c7:84:5a:d2:9d:2d:
                    59:14:2c:76:8e:da:95:73:d4:1f:37:6e:19:4b:01:
                    e4:b3:27:91:38:cd:20:b6:3f:39:b5:50:1f:5d:da:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:60:60:70:AE:54:77:1A:3A:1B:4E:D8:7A:93:B3:3C:7E:15:85:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:07:bd:1f:cb:99:6d:ff:82:e1:ec:9d:90:fb:65:30:87:02:
         b7:5e:cc:c7:d5:d7:15:21:d5:f3:58:9d:58:41:9f:1e:8f:42:
         d2:c1:0a:dc:99:80:70:24:55:58:5e:56:65:4a:7c:a7:4a:f4:
         fd:a3:3c:52:f6:2d:28:7e:62:9d:95:f9:1b:1d:53:66:28:ac:
         53:26:5d:e5:a5:5a:06:94:96:1f:06:fb:f5:8a:4c:b7:3c:ef:
         07:09:70:7d:57:2e:82:6a:c8:4d:1d:f2:82:29:45:b7:41:66:
         12:5d:42:22:ef:5a:78:f9:74:ad:a9:b4:65:ac:48:ae:0d:d5:
         63:68:a9:08:a7:11:81:86:f3:96:37:59:04:70:20:33:49:92:
         45:24:1e:54:87:e7:41:ab:43:1c:2b:bc:18:83:ea:2d:62:d9:
         22:c7:0f:8c:43:cf:a5:78:10:24:7d:5e:bb:c0:ac:9f:13:f9:
         95:06:bf:77:3a:e9:6b:34:0f:21:6a:62:4c:5f:bb:c9:3e:b6:
         75:7a:ff:b0:b6:27:44:a0:44:69:71:96:ad:ee:29:dd:76:62:
         e7:2e:b3:a4:4b:2a:b0:80:94:aa:d8:6a:32:df:ea:1f:de:93:
         97:a7:66:c5:73:ec:4b:ad:8f:6d:91:a5:45:0a:c0:00:09:f7:
         7c:3e:f2:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcbpam7ZogjoPr5LoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1
OTFmMB4XDTI0MDkwNTAxMDAzMFoXDTI0MTIwNDAyMDAzMFowLzEtMCsGA1UEAxMk
MGMyNDExYzUtZGRkMS00YWNhLWEwNDMtYTdjMDk5NDViOWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXc1jaKEgNMV9X6hwhuUGuQrPgIFcsMYlbgl
t6wcFr+iKh22nTC6k0GtipxCViL74nxrNA+hOEQANqMIJmbRzWYeniPw/o7inA6X
pgCryQ0QBdR4rXMYwDWWg3EPZbp0CIYty7asYskCm/jPkjWsO/muqgtHuuPa/xsg
VZ2oa9BfyvpJwWigY8+iBw3ZcmH6SKyWLrZnE9YW4J33Y6vrwdeIVdl4BVjDfgzt
SHAVjFfbs4XnMW2S+wXYTu0W5NzYN9wRJnqRQT6eCr/gGnF5m1a68dEK5IXcoUXH
hFrSnS1ZFCx2jtqVc9QfN24ZSwHksyeROM0gtj85tVAfXdq3QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1gYHCuVHcaOhtO2HqTszx+FYXUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5
OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvYjIzNmMxZDUtYzUyNy0z
ZjRmLWEzMzctYWFiOWE0NWVkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi
Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2
NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj
NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlsxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIHvR/LmW3/guHsnZD7ZTCHArdezMfV1xUh1fNYnVhBnx6PQtLBCtyZ
gHAkVVheVmVKfKdK9P2jPFL2LSh+Yp2V+RsdU2YorFMmXeWlWgaUlh8G+/WKTLc8
7wcJcH1XLoJqyE0d8oIpRbdBZhJdQiLvWnj5dK2ptGWsSK4N1WNoqQinEYGG85Y3
WQRwIDNJkkUkHlSH50GrQxwrvBiD6i1i2SLHD4xDz6V4ECR9XrvArJ8T+ZUGv3c6
6Ws0DyFqYkxfu8k+tnV6/7C2J0SgRGlxlq3uKd12Yucus6RLKrCAlKrYajLf6h/e
k5enZsVz7Eutj22RpUUKwAAJ93w+8sI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org