Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/72d6d128-2e82-3548-964c-cbce8ab33ae0.roa
File:                     72d6d128-2e82-3548-964c-cbce8ab33ae0.roa (raw, json)
Hash identifier:          eVdrLwuYM4+AxtS4YUS2UjvjMv+QFPekL3eqWrzPYqw=
Subject key identifier:   D2:C0:C4:00:F9:3A:F3:F3:DD:31:44:DA:83:4C:52:C7:B1:44:66:E9
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A428B0B51EDA733F38952480
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/72d6d128-2e82-3548-964c-cbce8ab33ae0.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     30416
IP address blocks:        69.74.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b0:b5:1e:da:73:3f:38:95:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=336a5054-e63e-4d50-985f-968de108b3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:6c:4f:4e:e8:10:34:d8:73:98:0f:c7:35:
                    78:c5:9f:20:7f:90:e1:b2:4b:5c:08:55:4c:38:9d:
                    67:fb:9d:28:4c:3e:84:10:e8:b4:6a:a7:f6:ed:89:
                    43:77:e8:57:63:b4:18:77:f9:e7:9d:e2:36:10:41:
                    6a:55:64:dc:de:3e:96:81:21:44:d8:21:9e:89:50:
                    22:02:5b:e9:48:6a:b2:c2:4d:4a:95:f8:f6:67:c6:
                    aa:01:9f:47:c3:dc:12:d9:e7:f1:5c:0f:c4:9a:52:
                    21:ac:15:0c:80:3a:59:f2:e7:45:d7:e2:c1:4f:fa:
                    b6:0a:6c:5e:b5:86:21:45:5b:28:74:e3:c3:05:5a:
                    c2:c2:f4:75:f2:2b:c4:9f:cc:cb:3e:8d:be:6b:32:
                    92:65:bb:69:d2:e1:77:ab:d0:e2:c7:82:e4:91:81:
                    b7:a9:76:d5:e2:80:95:79:9e:7d:fc:6f:1b:77:2f:
                    2e:3d:2e:18:c8:e8:c7:f7:f7:38:b4:37:d3:8c:06:
                    68:ce:4c:15:3d:76:49:cd:44:80:50:ed:be:18:2b:
                    22:72:bb:b3:5a:08:00:7a:2d:a7:e3:b6:d8:e6:d2:
                    27:4f:21:d4:db:de:0b:ca:97:f3:c6:20:f7:b8:44:
                    d1:27:17:87:8a:ad:c4:e8:71:f0:15:8f:77:58:81:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:C4:00:F9:3A:F3:F3:DD:31:44:DA:83:4C:52:C7:B1:44:66:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/72d6d128-2e82-3548-964c-cbce8ab33ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:56:27:f9:83:5d:33:5c:4f:81:53:63:27:28:34:a9:7d:78:
         59:3f:f1:0d:3d:44:bd:86:a3:0a:ca:d1:c8:67:f6:dd:00:5c:
         3d:37:50:4c:4f:38:85:a7:28:6e:af:5d:b4:43:95:64:14:d9:
         9f:8b:28:b1:36:fb:f2:58:86:45:d2:dd:01:62:54:0a:ef:9e:
         8c:19:fd:97:c6:05:1f:d0:f7:37:3e:ec:86:67:b3:bf:ec:65:
         c1:7d:9a:4a:cf:a1:a6:6c:af:35:24:5e:4b:9e:2e:60:5d:81:
         45:ae:61:4f:fd:7a:1f:e4:b7:fc:55:9e:a3:1a:72:ec:a0:16:
         f1:fd:02:b4:3f:4f:4c:1c:21:1c:ba:a8:3a:35:ca:96:40:b1:
         36:a4:02:93:4a:37:71:78:f5:1d:fd:d0:a7:a5:5d:3d:85:0f:
         8a:8b:0a:e5:db:a2:63:cf:28:c9:2e:d1:be:b2:96:2b:2a:4b:
         5a:63:98:3f:b5:98:26:cc:d1:8b:86:c7:df:53:81:13:83:fe:
         da:65:06:5d:48:5c:b2:27:3c:1f:a8:d9:ac:a5:5e:ee:44:83:
         28:b5:ac:05:49:99:05:f7:2d:22:27:dc:8b:e8:89:d0:46:c9:
         e1:27:99:aa:94:53:c1:2e:a6:d5:8b:da:28:dc:e0:6b:a0:74:
         29:bd:be:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKLC1HtpzPziVJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk
MzM2YTUwNTQtZTYzZS00ZDUwLTk4NWYtOTY4ZGUxMDhiM2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprlsT07oEDTYc5gPxzV4xZ8gf5DhsktcCFVM
OJ1n+50oTD6EEOi0aqf27YlDd+hXY7QYd/nnneI2EEFqVWTc3j6WgSFE2CGeiVAi
AlvpSGqywk1Klfj2Z8aqAZ9Hw9wS2efxXA/EmlIhrBUMgDpZ8udF1+LBT/q2Cmxe
tYYhRVsodOPDBVrCwvR18ivEn8zLPo2+azKSZbtp0uF3q9Dix4LkkYG3qXbV4oCV
eZ59/G8bdy8uPS4YyOjH9/c4tDfTjAZozkwVPXZJzUSAUO2+GCsicruzWggAei2n
47bY5tInTyHU294LypfzxiD3uETRJxeHiq3E6HHwFY93WIHOXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLAxAD5OvPz3TFE2oNMUsexRGbpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNzJkNmQxMjgtMmU4Mi0z
NTQ4LTk2NGMtY2JjZThhYjMzYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUr+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRWJ/mDXTNcT4FTYycoNKl9eFk/8Q09RL2GowrK0chn9t0AXD03UExP
OIWnKG6vXbRDlWQU2Z+LKLE2+/JYhkXS3QFiVArvnowZ/ZfGBR/Q9zc+7IZns7/s
ZcF9mkrPoaZsrzUkXkueLmBdgUWuYU/9eh/kt/xVnqMacuygFvH9ArQ/T0wcIRy6
qDo1ypZAsTakApNKN3F49R390KelXT2FD4qLCuXbomPPKMku0b6ylisqS1pjmD+1
mCbM0YuGx99TgROD/tplBl1IXLInPB+o2aylXu5Egyi1rAVJmQX3LSIn3IvoidBG
yeEnmaqUU8EuptWL2ijc4GugdCm9vsI=
-----END CERTIFICATE-----
Generated at Tue May 7 06:32:43 2024 by rpki-client on console-ams.rpki-client.org