Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa
File:                     950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa (raw, json)
Hash identifier:          By/6RBGFsXFdkuMy1rVaSWsKSuxoZj7GI6/tA/8ycMM=
Subject key identifier:   13:92:BC:31:40:BB:C4:D9:BF:1A:89:01:93:97:A9:31:CB:60:02:CB
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858491246A307CDE86C8FDA456540
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     922
IP address blocks:        74.119.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a3:07:cd:e8:6c:8f:da:45:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=2392638b-e8b9-4c16-90b4-efbd29e8cb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:05:bf:5a:44:7b:b7:cb:e7:eb:25:ce:eb:
                    7a:1e:ec:3b:c2:9f:5d:be:3f:94:30:97:91:f6:5d:
                    53:ba:92:a0:ab:05:6f:8b:a6:09:1c:23:d6:09:51:
                    27:d1:8a:3d:97:b0:6a:b5:2f:44:c5:04:d9:9a:50:
                    fb:f4:03:cd:b3:28:86:5f:96:2a:d8:7e:d5:8e:f8:
                    64:b2:f5:b4:d0:d0:1d:dc:70:e0:e6:50:14:60:cc:
                    90:9e:79:f5:a0:3d:63:36:76:22:89:84:f8:98:38:
                    55:79:1e:9a:9f:4a:79:05:6f:63:91:e9:fe:6d:fa:
                    ec:05:69:48:0d:d2:67:31:c6:bd:a4:2e:f6:9f:81:
                    8c:13:ca:0c:a8:64:98:20:25:62:fd:07:3c:dc:82:
                    a3:8b:bc:38:b0:35:80:fe:1b:94:78:f2:70:c8:6e:
                    3c:52:64:07:c2:dd:67:87:0e:ac:c1:3d:d2:ff:bd:
                    2e:83:1f:b9:c0:25:73:04:24:2a:60:27:6f:97:43:
                    de:31:29:96:8e:ad:40:b9:9e:48:15:d2:56:0a:33:
                    bd:e6:97:2f:c3:c7:85:c6:f4:70:5e:0d:b9:c5:0b:
                    42:f6:cb:74:c2:c9:2d:a8:d3:bb:41:08:db:0c:d6:
                    a2:b9:e1:f1:6f:34:da:8b:4f:0e:72:72:62:ee:1f:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:BC:31:40:BB:C4:D9:BF:1A:89:01:93:97:A9:31:CB:60:02:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:91:b9:4b:e9:e6:69:7d:cd:f0:88:4b:ec:f4:aa:ef:65:39:
         a5:0b:8f:3f:a2:5c:12:f4:57:33:c1:d7:76:e8:dd:77:7e:e5:
         35:ab:31:ab:a6:17:c0:4c:16:93:68:97:8d:6c:4a:d3:60:f8:
         45:6a:b4:09:43:ad:47:35:18:67:26:ef:4d:4e:3f:e2:31:0e:
         2b:a6:5a:ae:89:94:c7:35:8d:d3:96:88:de:f6:6d:8b:9e:1b:
         27:06:51:34:1c:de:c4:65:e7:48:a9:0f:4c:fc:67:25:b6:0d:
         3b:af:3a:83:b9:62:d5:f6:50:b2:f8:17:37:22:c8:84:28:d5:
         f2:6d:33:d9:22:94:15:b6:9d:01:53:c5:10:10:49:c7:20:dd:
         2f:a0:ab:41:32:5d:a8:2a:cd:dd:d9:f3:c8:19:a9:b4:0a:8a:
         ce:9d:cd:f0:ae:88:24:57:c2:ec:4b:80:c6:a4:a2:82:ce:fc:
         60:6e:af:10:f2:59:5c:34:4b:d9:99:6c:72:f4:42:e9:4a:0a:
         fd:45:62:fb:de:56:ec:7c:7a:5e:11:02:15:6f:b3:5f:44:d0:
         ae:c6:3e:dc:8a:e5:7e:85:08:bd:96:e5:00:f6:2b:e2:b6:14:
         fc:33:c5:a9:1f:e9:e1:2f:d8:46:d8:2e:fe:55:86:20:be:cf:
         32:08:06:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqMHzehsj9pFZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MjM5MjYzOGItZThiOS00YzE2LTkwYjQtZWZiZDI5ZThjYjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1YFv1pEe7fL5+slzut6Huw7wp9dvj+UMJeR
9l1TupKgqwVvi6YJHCPWCVEn0Yo9l7BqtS9ExQTZmlD79APNsyiGX5Yq2H7Vjvhk
svW00NAd3HDg5lAUYMyQnnn1oD1jNnYiiYT4mDhVeR6an0p5BW9jken+bfrsBWlI
DdJnMca9pC72n4GME8oMqGSYICVi/Qc83IKji7w4sDWA/huUePJwyG48UmQHwt1n
hw6swT3S/70ugx+5wCVzBCQqYCdvl0PeMSmWjq1AuZ5IFdJWCjO95pcvw8eFxvRw
Xg25xQtC9st0wsktqNO7QQjbDNaiueHxbzTai08OcnJi7h+gDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOSvDFAu8TZvxqJAZOXqTHLYALLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvOTUwOTg4YWQtYmJkMi0z
MGNjLWI3ZDctMjUwZGViMmVlNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASneXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeRuUvp5ml9zfCIS+z0qu9lOaULjz+iXBL0VzPB13bo3Xd+5TWrMaum
F8BMFpNol41sStNg+EVqtAlDrUc1GGcm701OP+IxDiumWq6JlMc1jdOWiN72bYue
GycGUTQc3sRl50ipD0z8ZyW2DTuvOoO5YtX2ULL4FzciyIQo1fJtM9kilBW2nQFT
xRAQSccg3S+gq0EyXagqzd3Z88gZqbQKis6dzfCuiCRXwuxLgMakooLO/GBurxDy
WVw0S9mZbHL0QulKCv1FYvveVux8el4RAhVvs19E0K7GPtyK5X6FCL2W5QD2K+K2
FPwzxakf6eEv2EbYLv5VhiC+zzIIBuE=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:10:30 2025 by rpki-client