Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4216fe5-d382-3b25-a6bc-cbb2ea069d66.roa
File:                     a4216fe5-d382-3b25-a6bc-cbb2ea069d66.roa (raw, json)
Hash identifier:          y484S1BrcrWQAMNK4+FxSvFLifE6VcAYU5zVjMuJGDE=
Subject key identifier:   BB:82:6E:D7:E1:B0:5F:31:DD:01:97:29:DE:60:9E:D2:4A:8E:DC:D7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583C9276197E40F0218C6BAF9122
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4216fe5-d382-3b25-a6bc-cbb2ea069d66.roa
Signing time:             Wed 12 Jan 2022 05:00:00 +0000
ROA not before:           Wed 12 Jan 2022 05:00:00 +0000
ROA not after:            Wed 05 Jan 2028 05:00:00 +0000
asID:                     20001
IP address blocks:        74.87.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:92:76:19:7e:40:f0:21:8c:6b:af:91:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan 12 05:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2028 GMT
        Subject: CN=f1fac278-468f-48ed-9033-eb869b3f9707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:c6:11:90:2a:1a:34:21:c0:25:f7:c3:28:
                    32:66:78:28:50:0c:03:4d:73:20:81:3f:a9:d7:db:
                    d9:23:61:20:54:af:3a:80:1e:9b:ce:18:51:d2:8d:
                    53:7b:4a:02:77:80:85:62:fd:89:23:31:37:76:7b:
                    88:34:95:93:01:98:d8:7f:51:b3:f9:93:b8:d4:b2:
                    5b:d4:0c:f6:1b:5f:b0:f0:ba:d9:61:30:fe:3a:bc:
                    f8:cf:74:7f:94:40:53:0c:c6:e8:35:68:96:65:c6:
                    b6:4c:8f:92:ea:91:c1:a1:aa:e3:3e:bf:35:7e:31:
                    9e:45:e2:b0:cc:1e:f3:74:9b:c1:8b:a9:74:f8:b5:
                    2c:22:c1:9d:50:6e:90:6e:e3:52:7a:5a:06:14:71:
                    fa:37:b7:d0:b9:c3:6a:23:cd:02:6d:e8:d5:f8:0a:
                    33:51:8d:7b:b4:f1:4f:c2:e7:87:ba:56:dd:7e:bf:
                    53:bc:18:2e:80:a2:c6:60:85:8a:41:1f:59:49:1a:
                    17:b6:e8:4c:3f:c4:80:46:6d:02:76:87:16:33:e5:
                    72:d5:be:c5:f3:74:2b:23:54:bd:9f:47:cc:1e:d8:
                    8f:b4:40:e7:09:29:0d:de:8f:2b:a9:74:61:1f:28:
                    7c:f0:7b:cf:c2:31:13:8d:4c:bc:41:e8:50:14:5c:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:82:6E:D7:E1:B0:5F:31:DD:01:97:29:DE:60:9E:D2:4A:8E:DC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4216fe5-d382-3b25-a6bc-cbb2ea069d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:ca:09:c5:99:91:d6:d7:c4:54:bc:87:12:1d:85:4f:52:
         0a:8e:4a:33:62:9c:8c:64:0d:1f:0b:eb:b1:ad:8f:1e:06:48:
         65:ea:85:9d:98:81:be:d0:a8:15:88:8c:e1:46:29:50:7d:f4:
         9d:c4:0e:7a:a0:bc:9d:b0:4b:50:cd:07:ce:db:06:d4:58:3b:
         a6:2e:88:4d:11:69:70:2f:cc:e5:8c:5d:c9:6d:68:12:f5:79:
         55:b3:16:48:c7:eb:0e:7b:14:53:07:47:2b:70:6a:01:f7:80:
         d9:15:a9:80:16:59:3c:01:fd:cd:15:41:90:be:dd:80:97:b2:
         97:b8:4d:c9:c9:e5:95:2d:d9:ae:4a:2e:41:74:58:c3:46:65:
         b7:54:57:d0:8d:ae:2b:39:1d:31:66:81:e9:11:b6:8f:61:28:
         e3:d4:ea:38:30:d9:c9:4b:cb:4f:50:81:db:c5:23:ad:d2:d1:
         18:eb:dd:11:fc:fb:56:25:08:fa:f9:18:c7:d4:3f:ca:63:8d:
         35:c4:94:3b:3a:f1:5b:75:a5:32:1b:70:1e:19:50:ac:1b:b5:
         ba:56:55:e5:01:f5:68:b6:b3:83:dd:3e:2d:07:e6:bb:8b:91:
         45:90:e3:19:d9:0d:82:28:fa:ea:db:10:dd:69:58:2d:c9:e6:
         14:46:d0:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDySdhl+QPAhjGuvkSIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIyMDExMjA1MDAwMFoXDTI4MDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjFmYWMyNzgtNDY4Zi00OGVkLTkwMzMtZWI4NjliM2Y5NzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPXGEZAqGjQhwCX3wygyZngoUAwDTXMggT+p
19vZI2EgVK86gB6bzhhR0o1Te0oCd4CFYv2JIzE3dnuINJWTAZjYf1Gz+ZO41LJb
1Az2G1+w8LrZYTD+Orz4z3R/lEBTDMboNWiWZca2TI+S6pHBoarjPr81fjGeReKw
zB7zdJvBi6l0+LUsIsGdUG6QbuNSeloGFHH6N7fQucNqI80CbejV+AozUY17tPFP
wueHulbdfr9TvBgugKLGYIWKQR9ZSRoXtuhMP8SARm0CdocWM+Vy1b7F83QrI1S9
n0fMHtiPtEDnCSkN3o8rqXRhHyh88HvPwjETjUy8QehQFFyBJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuCbtfhsF8x3QGXKd5gntJKjtzXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTQyMTZmZTUtZDM4Mi0z
YjI1LWE2YmMtY2JiMmVhMDY5ZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT7ygnFmZHW18RUvIcSHYVPUgqOSjNinIxkDR8L67Gtjx4GSGXqhZ2Y
gb7QqBWIjOFGKVB99J3EDnqgvJ2wS1DNB87bBtRYO6YuiE0RaXAvzOWMXcltaBL1
eVWzFkjH6w57FFMHRytwagH3gNkVqYAWWTwB/c0VQZC+3YCXspe4TcnJ5ZUt2a5K
LkF0WMNGZbdUV9CNris5HTFmgekRto9hKOPU6jgw2clLy09QgdvFI63S0Rjr3RH8
+1YlCPr5GMfUP8pjjTXElDs68Vt1pTIbcB4ZUKwbtbpWVeUB9Wi2s4PdPi0H5ruL
kUWQ4xnZDYIo+urbEN1pWC3J5hRG0GI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org