Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/faeb4727-8a6f-3d45-8bc8-149bf2aabfbf.roa
File:                     faeb4727-8a6f-3d45-8bc8-149bf2aabfbf.roa (raw, json)
Hash identifier:          +ER8HKyQ+2X/ZhL/BvDOnRjPZ2ry49PBw/Pc5BTuHZc=
Subject key identifier:   E8:81:EF:CE:65:D5:20:2A:B9:8A:5D:B8:49:6B:60:B6:3C:B9:95:F6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583932195E8E2E7715903011CAA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/faeb4727-8a6f-3d45-8bc8-149bf2aabfbf.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     11426
IP address blocks:        74.87.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:5e:8e:2e:77:15:90:30:11:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=7cd9aee1-5de4-445a-b3bd-7b74475d5505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:df:3d:60:c7:ec:aa:7f:1f:a7:53:86:ec:
                    5c:ac:88:92:34:05:45:5a:9a:0c:14:69:53:8b:28:
                    d0:7e:34:37:d4:d4:9d:4c:69:c7:59:1b:cd:66:4b:
                    30:bb:40:a0:67:ea:ab:82:80:3d:79:65:47:55:22:
                    3d:48:cf:08:a3:69:20:0a:43:70:15:28:52:3b:d4:
                    db:cc:a6:c5:6f:e3:0f:47:33:2b:c7:51:91:e2:04:
                    31:c4:c1:5a:7e:8f:41:ae:e5:6c:75:81:17:97:19:
                    32:98:10:67:01:59:1b:f9:4b:1e:a8:e7:da:b8:0e:
                    37:e2:bc:d5:b1:24:aa:74:df:6f:3a:0e:28:0d:ee:
                    83:d4:a1:9c:c0:b6:3c:77:55:77:30:07:a5:e9:f2:
                    30:a9:43:f7:2d:f0:49:ad:fc:15:4e:5e:bd:b6:fc:
                    50:2b:a0:cc:97:4b:0e:f8:9a:da:bb:90:8a:a8:a9:
                    9a:d1:06:7d:7b:ed:f3:cf:da:b7:90:bd:50:41:93:
                    13:d6:b7:21:8b:cf:8a:f9:80:3f:b5:d4:e5:7b:ef:
                    74:b4:66:3a:1b:41:db:d2:bc:ba:73:b1:ae:20:23:
                    55:93:2c:cf:61:1a:ac:81:b9:f5:6c:3d:fd:70:ce:
                    90:f7:73:ba:fe:24:54:97:71:a4:18:80:5d:b9:2b:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:81:EF:CE:65:D5:20:2A:B9:8A:5D:B8:49:6B:60:B6:3C:B9:95:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/faeb4727-8a6f-3d45-8bc8-149bf2aabfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ff:b5:3b:db:46:a3:dc:e1:39:c3:d2:35:22:cf:33:d3:0b:
         c1:7e:13:69:c2:f5:09:61:34:be:83:0e:d3:c4:62:d4:57:22:
         01:db:ac:49:b4:a9:28:a1:9a:13:9b:18:02:01:f6:f8:2c:47:
         d7:ca:58:53:4d:92:c9:ed:a8:40:28:24:9d:da:01:70:80:cb:
         d8:5e:36:db:f9:aa:4a:50:dc:b5:bc:0b:37:e2:b3:ec:bc:e9:
         a1:0e:4b:8c:2c:a5:dc:a0:97:ce:d8:f9:c7:31:d9:ae:95:c2:
         65:45:e0:21:7d:9c:79:28:6c:f4:23:21:c2:2e:14:4a:e0:ce:
         61:fe:19:3c:9a:13:06:50:11:a4:83:79:82:6a:ce:6c:18:dc:
         9d:81:64:c1:77:df:51:71:5d:7c:c8:33:6f:7c:1f:60:fd:26:
         84:1e:5e:73:01:6a:ed:31:82:1d:a6:89:18:28:55:6f:03:ff:
         d4:8a:c0:67:f7:a5:56:72:99:c3:31:92:48:3b:6e:3b:3f:c6:
         be:f0:41:d5:23:5a:c5:6b:2b:69:ee:4b:32:e7:b4:cb:2b:27:
         f6:cd:9d:20:b9:e7:e0:5f:93:cc:78:95:d9:8a:ef:14:c3:a8:
         7d:c5:3b:91:7e:6f:98:ef:55:a2:24:9b:8e:22:d4:a6:2b:12:
         11:b2:cc:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDkyGV6OLncVkDARyqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIxMDMwOTA1MDAwMFoXDTI3MDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
N2NkOWFlZTEtNWRlNC00NDVhLWIzYmQtN2I3NDQ3NWQ1NTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimTfPWDH7Kp/H6dThuxcrIiSNAVFWpoMFGlT
iyjQfjQ31NSdTGnHWRvNZkswu0CgZ+qrgoA9eWVHVSI9SM8Io2kgCkNwFShSO9Tb
zKbFb+MPRzMrx1GR4gQxxMFafo9BruVsdYEXlxkymBBnAVkb+UseqOfauA434rzV
sSSqdN9vOg4oDe6D1KGcwLY8d1V3MAel6fIwqUP3LfBJrfwVTl69tvxQK6DMl0sO
+Jrau5CKqKma0QZ9e+3zz9q3kL1QQZMT1rchi8+K+YA/tdTle+90tGY6G0Hb0ry6
c7GuICNVkyzPYRqsgbn1bD39cM6Q93O6/iRUl3GkGIBduSvn4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiB785l1SAquYpduElrYLY8uZX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZmFlYjQ3MjctOGE2Zi0z
ZDQ1LThiYzgtMTQ5YmYyYWFiZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlfcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7/tTvbRqPc4TnD0jUizzPTC8F+E2nC9QlhNL6DDtPEYtRXIgHbrEm0
qSihmhObGAIB9vgsR9fKWFNNksntqEAoJJ3aAXCAy9heNtv5qkpQ3LW8Czfis+y8
6aEOS4wspdygl87Y+ccx2a6VwmVF4CF9nHkobPQjIcIuFErgzmH+GTyaEwZQEaSD
eYJqzmwY3J2BZMF331FxXXzIM298H2D9JoQeXnMBau0xgh2miRgoVW8D/9SKwGf3
pVZymcMxkkg7bjs/xr7wQdUjWsVrK2nuSzLntMsrJ/bNnSC55+Bfk8x4ldmK7xTD
qH3FO5F+b5jvVaIkm44i1KYrEhGyzGA=
-----END CERTIFICATE-----
Generated at Tue Apr 30 13:16:39 2024 by rpki-client on console-fra.rpki-client.org