Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/9cecf7b8-b41c-384c-8ebf-25dfd1b55d3b.roa
File:                     9cecf7b8-b41c-384c-8ebf-25dfd1b55d3b.roa (raw, json)
Hash identifier:          hva61dmYJCJ+by/GudckwaAicOv1LQJVbGI0erH1T80=
Subject key identifier:   F9:A4:19:B2:0E:26:5E:9E:73:C2:C1:8F:91:F0:4E:0F:7F:9A:F8:EE
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F4328584510502985FB445F0FAE9A0080
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/9cecf7b8-b41c-384c-8ebf-25dfd1b55d3b.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        74.117.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:29:85:fb:44:5f:0f:ae:9a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=816ed151-13ba-4d40-9635-cf8c90bd6166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:56:d2:ed:c4:bc:a1:9d:8a:48:c0:3d:32:
                    97:8a:b3:bc:d4:0a:ca:d3:ee:ec:f0:44:62:0a:a5:
                    22:3f:51:d9:bd:a0:6e:03:64:07:24:e6:08:11:14:
                    1b:a3:93:32:2f:27:d8:fb:05:37:b5:bd:96:f7:2c:
                    79:c6:11:f3:fe:4e:41:ed:07:05:20:90:db:57:ba:
                    65:7a:fe:0a:6a:6f:db:e4:fa:9c:86:7c:80:c9:53:
                    bd:04:77:e9:72:a5:d1:ec:24:2e:df:66:73:39:f4:
                    1d:57:87:d9:a4:32:57:13:73:ed:16:05:90:51:23:
                    9f:cd:d5:c4:f9:52:d3:23:e0:dd:8a:ab:9b:e4:b6:
                    6f:6f:39:c4:64:39:62:58:3b:89:68:8d:ea:40:2b:
                    b4:a6:f3:e9:1d:84:dd:ec:ee:4c:ce:04:9c:2e:31:
                    e9:05:ac:a7:69:f1:17:bc:11:45:52:d3:57:56:e3:
                    c0:ab:f1:33:51:07:6f:21:a9:78:bd:05:36:75:02:
                    9e:d4:29:c0:f0:3f:3d:12:88:bf:00:ae:e6:25:8e:
                    da:f0:0d:46:bd:ee:3a:ce:cc:70:7b:d0:18:33:8f:
                    56:42:57:d8:8b:53:2b:17:64:15:95:5a:7d:7d:a4:
                    d2:4c:58:65:ff:af:f0:1c:d6:aa:4d:14:f9:98:ee:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A4:19:B2:0E:26:5E:9E:73:C2:C1:8F:91:F0:4E:0F:7F:9A:F8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/9cecf7b8-b41c-384c-8ebf-25dfd1b55d3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:75:f2:16:45:1b:39:9f:68:0c:54:2a:b2:24:6b:d1:fc:
         6b:cd:fb:88:c9:d5:a6:7b:f5:d5:15:32:8e:f1:b1:ef:0a:45:
         44:d3:37:58:35:7c:a8:bf:40:a4:98:67:f6:b2:55:68:54:32:
         ca:93:12:a9:4d:a0:6d:df:10:a6:15:f7:24:fa:1f:26:90:6d:
         f3:c6:9f:59:45:d0:7a:97:8d:0c:8b:0e:8c:22:40:73:62:d8:
         8e:bd:1b:6f:99:62:99:d3:b9:00:64:cc:28:a7:00:00:8b:a1:
         35:6f:f6:cf:14:5c:88:65:18:3c:8b:19:33:b1:27:fe:e8:68:
         06:a0:73:fc:27:6e:83:11:70:a8:6d:3d:cf:fe:24:f6:ad:1d:
         ed:4f:45:7d:b9:d4:1a:f6:b7:c3:f1:cf:64:bd:b3:bc:12:bb:
         d8:85:f9:ed:27:22:3e:d5:00:61:83:05:8b:a2:ff:06:57:2e:
         7c:19:b0:b4:7b:9c:56:d5:d4:2a:fe:7e:fe:6e:db:7d:b5:e4:
         37:96:21:4e:88:59:92:b3:8d:2e:19:5a:17:9e:21:80:ee:22:
         db:f0:bc:c2:70:2b:e4:47:85:50:71:1d:ca:51:19:b7:c6:34:
         96:3f:bb:8d:d8:0d:8f:d2:d4:3f:e5:b2:cf:1a:a3:66:24:bc:
         fc:08:2b:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUQUCmF+0RfD66aAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzUxODhlMjAtMTI5Ny00YjYxLWE0OTQtMWNhMDAzNjc3
N2YyMB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk
ODE2ZWQxNTEtMTNiYS00ZDQwLTk2MzUtY2Y4YzkwYmQ2MTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNpW0u3EvKGdikjAPTKXirO81ArK0+7s8ERi
CqUiP1HZvaBuA2QHJOYIERQbo5MyLyfY+wU3tb2W9yx5xhHz/k5B7QcFIJDbV7pl
ev4Kam/b5PqchnyAyVO9BHfpcqXR7CQu32ZzOfQdV4fZpDJXE3PtFgWQUSOfzdXE
+VLTI+Ddiqub5LZvbznEZDliWDuJaI3qQCu0pvPpHYTd7O5MzgScLjHpBaynafEX
vBFFUtNXVuPAq/EzUQdvIal4vQU2dQKe1CnA8D89Eoi/AK7mJY7a8A1Gve46zsxw
e9AYM49WQlfYi1MrF2QVlVp9faTSTFhl/6/wHNaqTRT5mO5t2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmkGbIOJl6ec8LBj5HwTg9/mvjuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4
OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2EwMDM2Nzc3ZjIvOWNlY2Y3YjgtYjQxYy0z
ODRjLThlYmYtMjVkZmQxYjU1ZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzUxODhlMjAtMTI5Ny00YjYxLWE0
OTQtMWNhMDAzNjc3N2YyL2M1MTg4ZTIwLTEyOTctNGI2MS1hNDk0LTFjYTAwMzY3
NzdmMi5jcmwwHwYDVR0jBBgwFoAUuYyjHfkVx9gVEusrJXXT5sRul7YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2Ew
MDM2Nzc3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnURMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdMdfIWRRs5n2gMVCqyJGvR/GvN+4jJ1aZ79dUVMo7xse8KRUTTN1g1
fKi/QKSYZ/ayVWhUMsqTEqlNoG3fEKYV9yT6HyaQbfPGn1lF0HqXjQyLDowiQHNi
2I69G2+ZYpnTuQBkzCinAACLoTVv9s8UXIhlGDyLGTOxJ/7oaAagc/wnboMRcKht
Pc/+JPatHe1PRX251Br2t8Pxz2S9s7wSu9iF+e0nIj7VAGGDBYui/wZXLnwZsLR7
nFbV1Cr+fv5u23215DeWIU6IWZKzjS4ZWheeIYDuItvwvMJwK+RHhVBxHcpRGbfG
NJY/u43YDY/S1D/lss8ao2YkvPwIK4M=
-----END CERTIFICATE-----
Generated at Wed May 1 19:31:39 2024 by rpki-client on console-fra.rpki-client.org