Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d370ea3c-49ec-305a-b25a-bf8087a43fba.roa
File:                     d370ea3c-49ec-305a-b25a-bf8087a43fba.roa (raw, json)
Hash identifier:          gBTcQs5b/bh2f/JLfxYhAh5mboFfCMeiUYrzLlQLL8Q=
Subject key identifier:   93:62:50:A7:9C:07:2A:C1:57:84:9A:0A:D3:55:52:A4:47:2E:2E:35
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858393219517F95D5E4B5505BBD80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d370ea3c-49ec-305a-b25a-bf8087a43fba.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        74.87.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:51:7f:95:d5:e4:b5:50:5b:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=e9e84bfc-22d7-4dfc-b235-94a1228d35f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:e4:ab:28:2d:10:2f:c4:c4:ff:4c:cf:40:
                    38:0e:62:bc:5d:a6:0c:77:69:e6:5a:0a:82:7a:41:
                    53:0a:6c:83:a5:91:8c:22:45:aa:18:87:c4:30:b0:
                    aa:4d:38:bf:d3:fa:ae:52:09:22:59:56:19:fe:5b:
                    f0:c5:a5:8c:c9:89:40:e1:e0:44:b2:db:ff:74:27:
                    23:76:f9:04:6a:bb:b7:f8:d2:6c:d8:5f:4c:1b:4e:
                    29:68:ce:3c:2c:ca:8a:68:b2:0f:d5:85:ff:01:3a:
                    10:91:17:30:51:f2:87:c7:4d:88:df:51:79:8f:f6:
                    d8:61:4d:d0:ff:ef:8b:58:5e:4d:53:97:69:54:90:
                    ed:34:c0:f3:08:62:14:bc:9d:4f:2e:9a:bc:5e:d6:
                    03:b9:8b:4c:66:67:84:95:1d:0e:8a:5d:81:69:e8:
                    2a:c3:80:42:26:0b:1b:ef:e6:0f:56:4b:f9:f4:27:
                    6b:b3:aa:88:f8:53:7d:8f:b7:6b:84:a9:55:2d:83:
                    74:ab:cd:84:46:59:6b:48:2e:ff:f5:3f:de:a7:4e:
                    9c:45:96:a7:ea:00:4b:b7:b7:f0:61:00:7c:c9:68:
                    f1:81:60:56:94:98:b9:78:ed:8b:32:a2:a7:98:ae:
                    3d:6e:8d:9d:cd:72:af:44:8a:8d:8d:52:ff:d8:a3:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:62:50:A7:9C:07:2A:C1:57:84:9A:0A:D3:55:52:A4:47:2E:2E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d370ea3c-49ec-305a-b25a-bf8087a43fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:b6:f9:2d:af:5e:a8:57:dd:44:6b:34:fa:0f:63:5f:d2:
         e9:19:f2:a5:0b:71:5b:0e:8c:82:2a:bb:ec:ea:2d:ee:dc:71:
         f9:64:45:9f:b6:20:18:11:85:99:ff:50:e3:0d:d8:21:70:4d:
         49:f3:92:e1:8e:53:60:61:06:21:c0:ee:f1:39:40:60:66:6c:
         54:bd:c3:85:1c:99:4d:2e:6c:2b:81:30:31:b4:a5:ea:a7:38:
         92:39:8d:25:40:36:df:fb:9f:3d:b6:dd:8d:26:ea:dc:4f:8e:
         e8:f9:cc:c2:ec:1d:1b:9f:2a:ff:9d:1c:80:05:ff:f9:2e:c6:
         49:73:13:ae:bf:a9:ad:d0:ea:45:8c:f8:2d:30:9c:6f:b9:95:
         e2:f4:9b:0a:8b:02:96:40:b9:13:f0:4c:01:d0:69:1d:53:9d:
         74:56:12:ca:d0:ec:29:78:f3:62:0c:b3:04:b1:31:40:c8:02:
         df:10:39:30:6d:f2:5f:8e:3b:5d:21:95:d8:b6:bf:d4:5d:e9:
         de:8b:de:ff:51:94:c1:55:ec:73:e4:33:20:b9:24:7c:dd:95:
         bc:8c:b1:fa:d2:2c:54:4b:b4:2b:e7:ea:f7:4d:f6:a8:1e:52:
         92:58:1e:37:33:b8:b5:c2:28:ba:2a:5a:5c:f0:cd:1a:8f:ca:
         85:f2:66:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDkyGVF/ldXktVBbvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIxMDMwOTA1MDAwMFoXDTI3MDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTllODRiZmMtMjJkNy00ZGZjLWIyMzUtOTRhMTIyOGQzNWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU/kqygtEC/ExP9Mz0A4DmK8XaYMd2nmWgqC
ekFTCmyDpZGMIkWqGIfEMLCqTTi/0/quUgkiWVYZ/lvwxaWMyYlA4eBEstv/dCcj
dvkEaru3+NJs2F9MG04paM48LMqKaLIP1YX/AToQkRcwUfKHx02I31F5j/bYYU3Q
/++LWF5NU5dpVJDtNMDzCGIUvJ1PLpq8XtYDuYtMZmeElR0Oil2Baegqw4BCJgsb
7+YPVkv59Cdrs6qI+FN9j7drhKlVLYN0q82ERllrSC7/9T/ep06cRZan6gBLt7fw
YQB8yWjxgWBWlJi5eO2LMqKnmK49bo2dzXKvRIqNjVL/2KMNbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNiUKecByrBV4SaCtNVUqRHLi41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDM3MGVhM2MtNDllYy0z
MDVhLWIyNWEtYmY4MDg3YTQzZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSleKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjBtvktr16oV91EazT6D2Nf0ukZ8qULcVsOjIIqu+zqLe7ccflkRZ+2
IBgRhZn/UOMN2CFwTUnzkuGOU2BhBiHA7vE5QGBmbFS9w4UcmU0ubCuBMDG0peqn
OJI5jSVANt/7nz223Y0m6txPjuj5zMLsHRufKv+dHIAF//kuxklzE66/qa3Q6kWM
+C0wnG+5leL0mwqLApZAuRPwTAHQaR1TnXRWEsrQ7Cl482IMswSxMUDIAt8QOTBt
8l+OO10hldi2v9Rd6d6L3v9RlMFV7HPkMyC5JHzdlbyMsfrSLFRLtCvn6vdN9qge
UpJYHjczuLXCKLoqWlzwzRqPyoXyZmQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:37 2024 by rpki-client on console-fra.rpki-client.org