Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa
File:                     c9a29383-8363-36e5-827b-b3c653f5ba4b.roa (raw, json)
Hash identifier:          FYYlMt2do44b+x8YfSd53LAkqBf6iQyHEo76rhPSH1E=
Subject key identifier:   F4:0F:F8:63:B2:E8:77:9A:6C:CB:EC:EE:4C:35:CA:B7:29:7E:42:73
Certificate issuer:       /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial:       010D0C9F43285848F65BD5AC48934DDD9890EE40
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        74.123.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d5:ac:48:93:4d:dd:98:90:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=5e781551-a7d7-4ff5-b527-45f4ff5f1613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:61:69:fe:85:f6:59:cc:ff:3b:ac:95:df:87:
                    c5:0b:22:a9:73:88:d5:0b:9f:90:66:ec:cb:58:1d:
                    77:d8:fa:04:c9:e6:db:8f:ec:87:48:01:e6:66:b5:
                    bb:84:28:d8:0a:d7:7e:a5:a5:d2:27:34:44:6f:5a:
                    50:91:47:22:10:c2:ec:eb:b9:6e:8c:50:c2:ed:88:
                    81:fc:45:f1:de:f5:a3:e0:c5:e7:ca:89:0c:cb:26:
                    85:e8:98:54:1e:3d:cd:7d:56:f8:d3:8f:53:d2:ae:
                    36:1f:51:c6:f7:8e:97:f3:03:57:14:b3:c4:db:1d:
                    b8:5d:96:50:d2:05:3c:72:71:85:aa:90:a3:67:0f:
                    b5:0a:58:56:64:ff:30:d1:2b:7a:48:05:94:09:a0:
                    a4:cd:8b:83:dd:7c:f8:81:b6:60:6e:f8:c7:97:6b:
                    e4:c8:72:b6:b2:e6:27:64:c8:b8:8b:25:64:0a:6e:
                    c1:80:2b:7f:58:00:84:e7:02:40:85:32:72:b0:d5:
                    61:5d:5c:62:ce:85:fa:33:d5:c4:ce:56:cd:38:46:
                    97:c0:37:03:5d:83:c2:01:da:7f:93:1a:d8:93:d4:
                    be:63:f4:06:c2:35:5f:f0:36:d9:30:44:40:73:5c:
                    0b:e3:8f:a7:4f:5e:65:58:56:3c:20:a8:53:3f:da:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0F:F8:63:B2:E8:77:9A:6C:CB:EC:EE:4C:35:CA:B7:29:7E:42:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:53:dd:f6:9a:03:74:41:ab:44:4c:67:bf:1f:bb:16:ff:bb:
         90:4a:51:48:28:dc:0d:63:e4:91:bd:88:8d:83:3f:ad:62:32:
         90:f0:03:a5:f4:42:8b:83:1e:6b:80:35:72:1d:e4:f7:9a:cb:
         7b:06:96:1b:e8:e6:9b:e2:43:08:f4:42:27:ce:07:05:df:53:
         c5:f6:0a:49:fc:97:53:43:75:04:24:c8:bd:2f:b2:dd:89:5a:
         f5:23:f1:93:ed:c3:dd:26:e7:e0:e3:e0:64:7f:68:63:19:24:
         ee:c6:81:06:88:4d:0f:e6:14:ac:69:70:37:d2:bb:48:d9:94:
         30:42:8c:13:ca:f7:a0:c9:8d:1e:d2:78:a6:4d:91:3a:c5:b0:
         e2:4a:6c:6b:a9:06:c4:fe:d8:db:02:cc:92:3d:aa:5d:fa:66:
         6e:15:e8:88:d8:50:3d:5e:b6:67:97:7e:1e:1c:06:a2:4a:52:
         57:90:44:ab:65:9e:03:bd:9c:21:df:1b:c7:52:0e:92:12:c2:
         87:84:fe:26:c5:3d:cc:06:4c:0f:9b:22:48:30:cf:a9:7a:88:
         ee:49:b9:83:2d:65:d1:2a:0b:56:cc:51:b8:3c:f4:74:8d:d5:
         b8:b5:cf:2e:c2:76:d8:ea:1d:47:59:e2:4b:4b:04:79:d4:83:
         b3:a5:60:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9WsSJNN3ZiQ7kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRkZmIyYzItNmIwZS00ZjJjLTk1NmQtNDk3ZGYwODgx
MDE1MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
NWU3ODE1NTEtYTdkNy00ZmY1LWI1MjctNDVmNGZmNWYxNjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGFp/oX2Wcz/O6yV34fFCyKpc4jVC5+QZuzL
WB132PoEyebbj+yHSAHmZrW7hCjYCtd+paXSJzREb1pQkUciEMLs67lujFDC7YiB
/EXx3vWj4MXnyokMyyaF6JhUHj3NfVb4049T0q42H1HG946X8wNXFLPE2x24XZZQ
0gU8cnGFqpCjZw+1ClhWZP8w0St6SAWUCaCkzYuD3Xz4gbZgbvjHl2vkyHK2suYn
ZMi4iyVkCm7BgCt/WACE5wJAhTJysNVhXVxizoX6M9XEzlbNOEaXwDcDXYPCAdp/
kxrYk9S+Y/QGwjVf8DbZMERAc1wL44+nT15lWFY8IKhTP9okiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQP+GOy6HeabMvs7kw1yrcpfkJzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NGRm
YjJjMi02YjBlLTRmMmMtOTU2ZC00OTdkZjA4ODEwMTUvYzlhMjkzODMtODM2My0z
NmU1LTgyN2ItYjNjNjUzZjViYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDRkZmIyYzItNmIwZS00ZjJjLTk1
NmQtNDk3ZGYwODgxMDE1LzQ0ZGZiMmMyLTZiMGUtNGYyYy05NTZkLTQ5N2RmMDg4
MTAxNS5jcmwwHwYDVR0jBBgwFoAUrKjCp3aNxrzYtX8M8Pq6iUOo2DUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NGRmYjJjMi02YjBlLTRmMmMtOTU2ZC00OTdk
ZjA4ODEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnuRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlT3faaA3RBq0RMZ78fuxb/u5BKUUgo3A1j5JG9iI2DP61iMpDwA6X0
QouDHmuANXId5Peay3sGlhvo5pviQwj0QifOBwXfU8X2Ckn8l1NDdQQkyL0vst2J
WvUj8ZPtw90m5+Dj4GR/aGMZJO7GgQaITQ/mFKxpcDfSu0jZlDBCjBPK96DJjR7S
eKZNkTrFsOJKbGupBsT+2NsCzJI9ql36Zm4V6IjYUD1etmeXfh4cBqJKUleQRKtl
ngO9nCHfG8dSDpISwoeE/ibFPcwGTA+bIkgwz6l6iO5JuYMtZdEqC1bMUbg89HSN
1bi1zy7CdtjqHUdZ4ktLBHnUg7OlYDs=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:18 2025 by rpki-client