Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b063f877-0e80-3cc1-8508-c11793f64c6b.roa
File:                     b063f877-0e80-3cc1-8508-c11793f64c6b.roa (raw, json)
Hash identifier:          1kqyP4yqAcknRQd7js64Sfe4c3xOR0eV/NCMK2C21XU=
Subject key identifier:   13:7A:8B:61:F5:86:45:B9:40:E5:DF:84:5E:35:F8:23:F8:79:AB:42
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584769D0CFACF778F4178AD6A1C0
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b063f877-0e80-3cc1-8508-c11793f64c6b.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     399122
IP address blocks:        74.123.96.0/24 maxlen: 24
                          2602:fcd5:2::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:cf:ac:f7:78:f4:17:8a:d6:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=c548184c-469f-4977-8731-5496ed8ff996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:b7:5a:e1:e5:d4:38:16:c4:63:a9:e1:59:
                    08:66:c1:b7:79:1c:be:60:b7:0f:39:59:23:14:0d:
                    86:09:1f:e7:f6:63:ac:25:d9:61:02:3f:c3:b2:60:
                    58:f0:26:78:ac:1a:18:55:7b:a6:3f:be:46:14:bb:
                    0e:51:df:96:a4:24:fd:00:87:3e:94:9e:0b:bb:02:
                    33:f3:7a:b5:d9:30:75:b0:a8:2d:2d:71:d7:f0:13:
                    ae:f6:6f:0d:72:b5:86:c1:9f:1d:8f:e4:3f:54:2d:
                    77:12:1b:91:77:7b:3b:bb:7b:f7:4b:bc:e3:50:50:
                    8d:1e:96:0d:06:aa:87:88:b0:66:61:71:2c:98:3c:
                    c6:de:17:e7:09:42:0b:40:a3:b3:bc:07:95:48:0d:
                    72:3d:10:c4:4f:62:47:56:68:66:4d:46:47:ba:2d:
                    6a:ec:d8:89:69:a1:66:45:11:c1:5e:22:a5:3e:91:
                    a6:8f:85:7d:f7:f8:f4:29:2f:a5:ff:2a:29:49:85:
                    e9:55:9f:0a:51:fb:89:f7:97:c7:e7:94:da:2d:c8:
                    61:43:a9:5a:d1:e7:d7:42:ff:cd:71:6b:e2:c3:f6:
                    a6:f7:fa:eb:c8:bb:a9:b1:61:06:8c:d3:53:a3:9a:
                    37:88:22:6c:6f:51:ba:23:39:53:64:61:d1:86:e0:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:8B:61:F5:86:45:B9:40:E5:DF:84:5E:35:F8:23:F8:79:AB:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b063f877-0e80-3cc1-8508-c11793f64c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.96.0/24
                IPv6:
                  2602:fcd5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:46:b8:16:85:de:a6:ac:d8:f6:a0:91:3d:11:b9:72:27:d9:
         d0:73:c5:aa:3d:08:31:01:22:b7:71:22:5b:3c:be:59:c7:4b:
         c6:75:02:f2:80:0c:ff:e1:45:54:f4:64:4b:22:77:bc:d3:1d:
         19:2f:2b:37:47:34:50:eb:c8:b3:be:c7:d5:78:92:9b:34:65:
         ec:e8:f3:2c:72:51:bf:0f:e5:ba:f2:5e:6c:69:1e:59:24:0a:
         b2:c3:ff:fa:f1:e2:bd:ca:4f:59:63:57:6f:6c:d0:c5:94:3e:
         26:d4:1d:c4:1e:a9:ab:49:52:bf:e0:31:8a:63:d5:17:fc:67:
         2c:ea:1c:0f:a9:d5:80:bb:d8:6e:58:66:63:aa:26:ae:55:48:
         cd:49:fa:33:66:95:3b:b6:3a:6d:aa:f6:8d:f8:22:d2:f4:a9:
         67:15:69:84:74:7c:9e:78:5f:52:92:cb:89:aa:ef:a4:0c:78:
         5a:0a:f3:96:33:2f:d6:aa:98:e2:c5:10:b6:2b:a5:d1:7e:ff:
         54:32:da:6e:98:78:a0:5a:c2:c3:81:c3:8a:f1:a9:ff:bf:80:
         60:e1:4d:66:27:37:a3:52:30:93:be:05:31:85:2c:3a:89:7c:
         79:e0:88:f7:03:a5:36:4d:6b:e6:74:ad:80:d0:01:6c:a0:24:
         d2:2e:f3:b5
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEdp0M+s93j0F4rWocAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0
NGM1MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
YzU0ODE4NGMtNDY5Zi00OTc3LTg3MzEtNTQ5NmVkOGZmOTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIK3WuHl1DgWxGOp4VkIZsG3eRy+YLcPOVkj
FA2GCR/n9mOsJdlhAj/DsmBY8CZ4rBoYVXumP75GFLsOUd+WpCT9AIc+lJ4LuwIz
83q12TB1sKgtLXHX8BOu9m8NcrWGwZ8dj+Q/VC13EhuRd3s7u3v3S7zjUFCNHpYN
BqqHiLBmYXEsmDzG3hfnCUILQKOzvAeVSA1yPRDET2JHVmhmTUZHui1q7NiJaaFm
RRHBXiKlPpGmj4V99/j0KS+l/yopSYXpVZ8KUfuJ95fH55TaLchhQ6la0efXQv/N
cWviw/am9/rryLupsWEGjNNTo5o3iCJsb1G6IzlTZGHRhuATZwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFBN6i2H1hkW5QOXfhF41+CP4eatCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2
MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvYjA2M2Y4NzctMGU4MC0z
Y2MxLTg1MDgtYzExNzkzZjY0YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk
MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0
NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy
NDkzNDQ0YzUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQASntgMA8E
AgACMAkDBwEmAvzVAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaEa4FoXepqzY9qCRPRG5cifZ0HPFqj0I
MQEit3EiWzy+WcdLxnUC8oAM/+FFVPRkSyJ3vNMdGS8rN0c0UOvIs77H1XiSmzRl
7OjzLHJRvw/luvJebGkeWSQKssP/+vHivcpPWWNXb2zQxZQ+JtQdxB6pq0lSv+Ax
imPVF/xnLOocD6nVgLvYblhmY6omrlVIzUn6M2aVO7Y6bar2jfgi0vSpZxVphHR8
nnhfUpLLiarvpAx4WgrzljMv1qqY4sUQtiul0X7/VDLabph4oFrCw4HDivGp/7+A
YOFNZic3o1Iwk74FMYUsOol8eeCI9wOlNk1r5nStgNABbKAk0i7ztQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:09 2024 by rpki-client on console-ams.rpki-client.org