Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/379bb32e-ec43-31e2-887c-a1926830aa8f.roa
File:                     379bb32e-ec43-31e2-887c-a1926830aa8f.roa (raw, json)
Hash identifier:          q23HdIi7phSLcVSANjCEO+0ESbjyEHGXbHLhOAKPDzM=
Subject key identifier:   86:EB:89:31:8A:59:E7:25:C3:35:15:7A:40:2E:06:F2:57:BE:75:0B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583932198B02862A33AF2FDE0880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/379bb32e-ec43-31e2-887c-a1926830aa8f.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        74.218.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:8b:02:86:2a:33:af:2f:de:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=8b58d31c-5756-48a1-ab02-40f1c28f2a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:f1:c6:94:ac:2c:54:73:3d:21:74:5c:ef:
                    05:6a:92:01:02:89:71:6c:ec:81:1a:85:28:6e:39:
                    6e:d2:76:45:a5:9e:45:23:5b:c3:55:6f:13:51:4b:
                    2b:c0:05:83:b4:f3:1f:5c:88:fa:df:fa:5e:9d:c9:
                    35:2c:cf:37:85:ef:52:f0:f2:cb:00:06:8e:d9:77:
                    da:7e:6e:48:09:72:18:6f:b8:90:52:15:2c:5e:47:
                    d0:a3:1f:4b:3a:a1:c1:bf:3b:4d:35:1d:cf:76:2a:
                    34:82:de:27:dd:cf:30:83:d8:83:50:a5:6c:20:16:
                    e6:02:56:e4:89:6e:64:6b:ce:f0:2a:d4:38:bb:59:
                    ce:d8:bf:ba:bc:23:72:1c:0e:0e:21:fa:42:07:71:
                    9b:e4:8b:c0:70:af:c5:98:3f:1e:a4:45:86:f9:0c:
                    fe:c1:41:7e:e5:51:32:e9:04:9d:a4:fc:97:62:4e:
                    f8:98:56:90:bc:1a:f2:78:d4:32:c4:c5:6b:a5:42:
                    3a:75:61:85:70:e5:d2:10:2b:00:57:cf:0d:c5:a7:
                    84:e1:be:fb:43:72:53:65:ac:90:a8:bd:73:0f:af:
                    43:c1:8f:04:59:43:cc:40:b7:ee:36:83:3f:59:b2:
                    24:b7:c7:bb:83:c1:c2:ca:1d:0a:c8:07:16:5e:42:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EB:89:31:8A:59:E7:25:C3:35:15:7A:40:2E:06:F2:57:BE:75:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/379bb32e-ec43-31e2-887c-a1926830aa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:84:59:6d:22:b4:cb:80:35:7f:df:7e:e8:54:4d:d4:1a:26:
         89:ce:de:c9:2d:17:ae:7f:2e:fe:b3:69:1b:a2:28:4a:07:1c:
         38:6a:9b:ac:eb:63:fa:9d:aa:45:f9:d7:03:09:e6:58:43:00:
         12:80:3c:6d:07:19:10:9a:cb:49:7b:39:82:ae:82:fc:33:3c:
         1b:5b:b6:be:6c:af:ad:36:12:0f:4a:75:57:16:11:d8:7c:be:
         c6:f6:8a:93:1d:b2:3f:82:5c:ec:12:b9:56:28:15:a5:35:2c:
         f8:c3:14:e1:2c:6d:d8:b7:66:59:56:ec:22:2f:95:84:1f:36:
         16:cc:a5:72:ce:e9:1e:b5:52:0b:13:df:0b:0f:d4:c0:c9:0b:
         43:f1:37:0b:69:77:11:99:fe:73:fe:8a:5d:bd:01:e6:e0:fa:
         e8:bb:ab:ad:a8:f8:ea:d5:e5:07:00:d2:f6:80:a2:d0:f9:4c:
         1a:47:e9:22:74:25:f4:d4:17:03:f2:fd:67:c0:00:f5:d5:f6:
         97:48:73:cd:03:9e:ca:87:d0:06:41:d6:be:71:95:77:75:6a:
         4d:12:a3:2a:0b:94:8e:ff:d4:e4:e5:81:a9:78:ed:ab:8c:ac:
         9e:07:7b:65:03:49:80:3f:90:bf:3a:af:d6:13:fa:69:a3:71:
         6c:44:6e:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDkyGYsChiozry/eCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIxMDMwOTA1MDAwMFoXDTI3MDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
OGI1OGQzMWMtNTc1Ni00OGExLWFiMDItNDBmMWMyOGYyYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSXxxpSsLFRzPSF0XO8FapIBAolxbOyBGoUo
bjlu0nZFpZ5FI1vDVW8TUUsrwAWDtPMfXIj63/penck1LM83he9S8PLLAAaO2Xfa
fm5ICXIYb7iQUhUsXkfQox9LOqHBvztNNR3Pdio0gt4n3c8wg9iDUKVsIBbmAlbk
iW5ka87wKtQ4u1nO2L+6vCNyHA4OIfpCB3Gb5IvAcK/FmD8epEWG+Qz+wUF+5VEy
6QSdpPyXYk74mFaQvBryeNQyxMVrpUI6dWGFcOXSECsAV88NxaeE4b77Q3JTZayQ
qL1zD69DwY8EWUPMQLfuNoM/WbIkt8e7g8HCyh0KyAcWXkJrywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbriTGKWeclwzUVekAuBvJXvnULMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMzc5YmIzMmUtZWM0My0z
MWUyLTg4N2MtYTE5MjY4MzBhYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOEWW0itMuANX/ffuhUTdQaJonO3sktF65/Lv6zaRuiKEoHHDhqm6zr
Y/qdqkX51wMJ5lhDABKAPG0HGRCay0l7OYKugvwzPBtbtr5sr602Eg9KdVcWEdh8
vsb2ipMdsj+CXOwSuVYoFaU1LPjDFOEsbdi3ZllW7CIvlYQfNhbMpXLO6R61UgsT
3wsP1MDJC0PxNwtpdxGZ/nP+il29Aebg+ui7q62o+OrV5QcA0vaAotD5TBpH6SJ0
JfTUFwPy/WfAAPXV9pdIc80DnsqH0AZB1r5xlXd1ak0SoyoLlI7/1OTlgal47auM
rJ4He2UDSYA/kL86r9YT+mmjcWxEbm4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:24 2024 by rpki-client on console-fra.rpki-client.org