Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/c02d8d49-8873-3527-88e1-c4a010a4b6f1.roa
File:                     c02d8d49-8873-3527-88e1-c4a010a4b6f1.roa (raw, json)
Hash identifier:          spQ7TD+szGfqEYn8EYRnHrdgKqb9T7/KSW+mX/NHLM8=
Subject key identifier:   36:F3:6F:63:F9:EA:F7:B5:08:6C:F2:6B:55:95:3C:05:73:88:84:07
Certificate issuer:       /CN=81da55c0-e4d8-4f54-a846-3081b08d8dad
Certificate serial:       010D0C9F43285847CA3F7C21879B451E12F55100
Authority key identifier: B2:B1:82:D8:F2:82:F4:BC:08:82:9E:FB:AA:F4:76:A3:7F:FF:D1:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/c02d8d49-8873-3527-88e1-c4a010a4b6f1.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     32799
IP address blocks:        74.122.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7c:21:87:9b:45:1e:12:f5:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81da55c0-e4d8-4f54-a846-3081b08d8dad
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=ff4aff0b-7c52-4b68-aa07-35d6fd892b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:d9:dd:fd:c1:ba:bc:c4:8a:6b:a9:11:5d:
                    36:36:56:08:cb:0e:e9:04:1b:44:02:c4:cd:33:d3:
                    bf:58:07:1e:1c:66:cd:46:68:de:eb:00:c0:f3:51:
                    4a:0b:74:e0:7e:47:31:be:9d:33:ff:82:28:e2:65:
                    02:b4:5f:49:e0:af:44:10:18:14:3b:93:c6:db:25:
                    2e:53:44:be:28:60:21:5f:59:c5:e1:55:b7:f8:44:
                    fd:cb:1a:24:b9:41:fb:7d:b3:67:41:3d:82:c2:91:
                    e2:f2:cb:8d:36:ef:41:85:01:b5:73:dc:cd:64:4b:
                    22:24:83:7d:d4:0f:28:91:e9:6e:2d:f4:6e:9e:75:
                    4a:10:bc:e1:5d:13:df:a6:d9:b4:7b:41:c1:83:3d:
                    24:ee:f8:9d:16:46:cc:e8:2b:29:93:69:7a:2e:21:
                    3f:1b:6b:b6:cb:04:41:41:4f:34:c5:4b:4c:72:4b:
                    f7:5b:59:97:f5:50:cb:46:f0:da:fb:9a:2f:b4:48:
                    58:af:7c:20:f2:c7:f2:04:b9:e2:fd:56:99:37:49:
                    93:cd:df:43:8e:47:1e:42:2c:83:1a:1b:04:e8:59:
                    e1:78:01:46:a4:25:fa:a6:86:d4:bb:87:11:cd:9e:
                    a1:4d:12:c6:a3:17:f9:87:aa:91:2e:aa:03:5a:a8:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:6F:63:F9:EA:F7:B5:08:6C:F2:6B:55:95:3C:05:73:88:84:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/c02d8d49-8873-3527-88e1-c4a010a4b6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.crl

            X509v3 Authority Key Identifier:
                keyid:B2:B1:82:D8:F2:82:F4:BC:08:82:9E:FB:AA:F4:76:A3:7F:FF:D1:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:7d:c4:5d:dd:9a:b6:38:0b:6d:8c:ff:13:27:67:23:d7:db:
         fa:1b:47:5b:b2:57:af:38:61:b1:d8:96:25:56:55:88:8a:f7:
         26:71:c5:f4:18:34:90:46:02:90:2a:0a:ba:94:d0:f3:19:45:
         e1:27:9b:db:76:5a:6e:e7:c8:d6:65:94:26:75:4d:79:17:d8:
         a2:63:60:d0:9c:32:48:27:c5:8f:15:75:c9:c5:82:83:da:54:
         0b:8f:6e:d4:59:d0:02:3d:4d:a4:de:7d:25:ff:d8:84:90:00:
         df:2f:28:73:b2:be:65:57:5d:58:2f:4b:8c:85:b9:c4:26:b1:
         eb:b8:10:7d:e8:22:bd:9a:66:7c:0d:01:6f:8c:1b:16:d4:3c:
         97:7c:ce:a4:07:3f:6e:5d:e2:5e:be:fb:53:5b:53:76:9c:00:
         2f:f9:ed:67:0e:2f:97:83:e0:61:60:19:06:ca:3b:76:0e:05:
         10:6d:26:6e:08:75:e1:e3:1a:bd:05:b7:00:46:32:d1:b7:ef:
         ad:0e:9d:7d:be:23:60:4e:e2:cb:4a:fd:3c:40:07:f5:4d:03:
         74:12:20:03:53:a4:01:fc:42:40:62:35:d4:ab:ed:61:dc:91:
         03:de:37:77:a1:d0:05:88:23:1c:b8:0f:a3:15:09:99:08:6a:
         b8:8a:11:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3whh5tFHhL1UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFkYTU1YzAtZTRkOC00ZjU0LWE4NDYtMzA4MWIwOGQ4
ZGFkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZmY0YWZmMGItN2M1Mi00YjY4LWFhMDctMzVkNmZkODkyYjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOnZ3f3BurzEimupEV02NlYIyw7pBBtEAsTN
M9O/WAceHGbNRmje6wDA81FKC3Tgfkcxvp0z/4Io4mUCtF9J4K9EEBgUO5PG2yUu
U0S+KGAhX1nF4VW3+ET9yxokuUH7fbNnQT2CwpHi8suNNu9BhQG1c9zNZEsiJIN9
1A8okeluLfRunnVKELzhXRPfptm0e0HBgz0k7vidFkbM6Cspk2l6LiE/G2u2ywRB
QU80xUtMckv3W1mX9VDLRvDa+5ovtEhYr3wg8sfyBLni/VaZN0mTzd9DjkceQiyD
GhsE6FnheAFGpCX6pobUu4cRzZ6hTRLGoxf5h6qRLqoDWqh84wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbzb2P56ve1CGzya1WVPAVziIQHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MWRh
NTVjMC1lNGQ4LTRmNTQtYTg0Ni0zMDgxYjA4ZDhkYWQvYzAyZDhkNDktODg3My0z
NTI3LTg4ZTEtYzRhMDEwYTRiNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODFkYTU1YzAtZTRkOC00ZjU0LWE4
NDYtMzA4MWIwOGQ4ZGFkLzgxZGE1NWMwLWU0ZDgtNGY1NC1hODQ2LTMwODFiMDhk
OGRhZC5jcmwwHwYDVR0jBBgwFoAUsrGC2PKC9LwIgp77qvR2o3//0WQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MWRhNTVjMC1lNGQ4LTRmNTQtYTg0Ni0zMDgx
YjA4ZDhkYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnrwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMl9xF3dmrY4C22M/xMnZyPX2/obR1uyV684YbHYliVWVYiK9yZxxfQY
NJBGApAqCrqU0PMZReEnm9t2Wm7nyNZllCZ1TXkX2KJjYNCcMkgnxY8VdcnFgoPa
VAuPbtRZ0AI9TaTefSX/2ISQAN8vKHOyvmVXXVgvS4yFucQmseu4EH3oIr2aZnwN
AW+MGxbUPJd8zqQHP25d4l6++1NbU3acAC/57WcOL5eD4GFgGQbKO3YOBRBtJm4I
deHjGr0FtwBGMtG3760OnX2+I2BO4stK/TxAB/VNA3QSIANTpAH8QkBiNdSr7WHc
kQPeN3eh0AWIIxy4D6MVCZkIariKEY4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:26 2024 by rpki-client on console-ams.rpki-client.org