Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/23f883ec-56fe-3196-89e8-0794fb7b308b.roa
File:                     23f883ec-56fe-3196-89e8-0794fb7b308b.roa (raw, json)
Hash identifier:          1b6eBpsIVHxr25pOoQ1nlcszPFarxqsLGp++rpYQQsI=
Subject key identifier:   B9:CE:F7:D3:62:E8:C2:C1:CE:E6:0C:61:E3:BB:BF:2E:DD:D2:00:98
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285845A15DFB3E923FF85376A75D00
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/23f883ec-56fe-3196-89e8-0794fb7b308b.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     134176
IP address blocks:        74.115.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fb:3e:92:3f:f8:53:76:a7:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=f9b94e5a-4e88-40b4-9f66-ebe21195806f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:50:7d:4c:e5:04:9d:85:55:b5:d0:49:2a:
                    af:2d:47:a4:d1:19:f0:84:4c:00:81:76:4e:3f:a5:
                    e9:85:3c:71:65:51:fa:25:19:ed:dc:ea:75:ce:40:
                    01:1a:34:e6:dd:26:c8:6d:20:43:7b:b3:47:4e:c9:
                    a1:35:9b:93:f9:73:75:0e:f7:ab:5c:98:bf:85:2b:
                    30:b4:cc:cf:af:6c:d5:8d:b4:b4:7b:64:df:65:2c:
                    6d:ab:ab:15:d2:ba:46:63:ec:46:ab:7d:a6:6c:70:
                    bf:26:63:ee:56:9b:04:0f:75:a4:ee:36:fd:d9:f3:
                    a7:7b:3f:5e:a2:0d:71:94:b3:99:e5:d3:b0:d3:c0:
                    e6:6d:d6:6e:f1:28:4c:84:69:55:29:3f:de:b6:ed:
                    2e:93:32:f4:e1:f3:d8:ee:42:53:69:3f:b4:26:8e:
                    fa:66:37:eb:8f:ad:c4:26:47:09:ce:56:f7:b5:90:
                    e4:70:f7:87:88:a5:30:e3:99:5a:ca:10:7c:3a:a6:
                    da:9f:3e:fb:9e:eb:f3:72:44:57:d2:07:69:d9:75:
                    3d:71:29:65:b0:3a:62:3d:8d:dc:f8:4a:45:5d:37:
                    3e:51:65:c8:60:53:af:5a:8e:92:a4:eb:b4:a9:27:
                    86:77:b9:ad:6f:0b:76:03:37:38:cd:8e:60:0f:31:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CE:F7:D3:62:E8:C2:C1:CE:E6:0C:61:E3:BB:BF:2E:DD:D2:00:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/23f883ec-56fe-3196-89e8-0794fb7b308b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d5:3c:8c:d2:e5:aa:21:e8:e1:bd:79:42:39:a9:61:c3:a6:
         15:43:e7:c9:b4:7d:9d:30:90:ec:02:a2:3c:71:81:72:ba:86:
         2e:ba:f6:d5:70:0d:61:c1:8a:d7:7e:f2:9d:eb:25:05:92:df:
         e3:e1:77:c0:83:14:f5:e5:9c:25:49:76:95:2f:bf:b6:71:36:
         f9:7c:f2:be:7e:32:c4:47:a4:d2:6b:50:d1:31:01:fa:cb:1b:
         0c:e4:c1:37:7d:a6:90:35:b5:4e:a1:fc:58:bb:ed:1e:72:50:
         04:9d:d7:5f:93:38:7b:00:6f:c3:aa:9f:3e:24:b3:12:e1:c3:
         82:62:d4:cc:22:56:c0:a7:07:38:16:e4:02:ec:95:7f:76:df:
         e7:06:a6:ba:98:08:5d:e7:95:cf:4e:98:28:46:41:b3:59:70:
         00:71:26:92:bc:64:16:c4:ac:24:0c:fc:5f:53:f0:84:ec:7b:
         78:5b:4b:fc:03:de:68:69:37:6e:55:9e:f4:c4:1a:c1:86:49:
         52:e1:94:57:91:86:bd:d8:6d:15:e7:49:5e:b0:6f:b8:ea:7f:
         c3:cc:3b:ed:41:81:53:94:8f:97:21:a6:f2:2b:3b:18:02:ac:
         f4:cc:59:dc:0f:6c:e1:1f:13:be:97:4d:3c:52:f1:d4:b3:36:
         db:e2:ab:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXfs+kj/4U3anXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxY2JmMjctMGRjZS00NjU3LWEzMTctN2M3ZDg2MjQ1
OTg2MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
ZjliOTRlNWEtNGU4OC00MGI0LTlmNjYtZWJlMjExOTU4MDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAxQfUzlBJ2FVbXQSSqvLUek0RnwhEwAgXZO
P6XphTxxZVH6JRnt3Op1zkABGjTm3SbIbSBDe7NHTsmhNZuT+XN1DverXJi/hSsw
tMzPr2zVjbS0e2TfZSxtq6sV0rpGY+xGq32mbHC/JmPuVpsED3Wk7jb92fOnez9e
og1xlLOZ5dOw08DmbdZu8ShMhGlVKT/etu0ukzL04fPY7kJTaT+0Jo76Zjfrj63E
JkcJzlb3tZDkcPeHiKUw45layhB8Oqbanz77nuvzckRX0gdp2XU9cSllsDpiPY3c
+EpFXTc+UWXIYFOvWo6SpOu0qSeGd7mtbwt2Azc4zY5gDzHn8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLnO99Ni6MLBzuYMYeO7vy7d0gCYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNTFj
YmYyNy0wZGNlLTQ2NTctYTMxNy03YzdkODYyNDU5ODYvMjNmODgzZWMtNTZmZS0z
MTk2LTg5ZTgtMDc5NGZiN2IzMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjUxY2JmMjctMGRjZS00NjU3LWEz
MTctN2M3ZDg2MjQ1OTg2L2I1MWNiZjI3LTBkY2UtNDY1Ny1hMzE3LTdjN2Q4NjI0
NTk4Ni5jcmwwHwYDVR0jBBgwFoAUaRc4XP15VPQRWj0qU6i0ZpalNMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNTFjYmYyNy0wZGNlLTQ2NTctYTMxNy03Yzdk
ODYyNDU5ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnMGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKfVPIzS5aoh6OG9eUI5qWHDphVD58m0fZ0wkOwCojxxgXK6hi669tVw
DWHBitd+8p3rJQWS3+Phd8CDFPXlnCVJdpUvv7ZxNvl88r5+MsRHpNJrUNExAfrL
GwzkwTd9ppA1tU6h/Fi77R5yUASd11+TOHsAb8Oqnz4ksxLhw4Ji1MwiVsCnBzgW
5ALslX923+cGprqYCF3nlc9OmChGQbNZcABxJpK8ZBbErCQM/F9T8ITse3hbS/wD
3mhpN25VnvTEGsGGSVLhlFeRhr3YbRXnSV6wb7jqf8PMO+1BgVOUj5chpvIrOxgC
rPTMWdwPbOEfE76XTTxS8dSzNtviq2c=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:44:56 2024 by rpki-client on console-fra.rpki-client.org