Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa
File:                     7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa (raw, json)
Hash identifier:          oSyXLiNCgFORN/gXpF2jZV7yC/1ZNi8cq/rCpIibbqY=
Subject key identifier:   A3:47:A1:03:E7:4A:CB:DC:33:DC:9A:5C:A5:5A:13:88:2C:9F:8F:14
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A15E19CE28727F5685ED4428
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     14350
IP address blocks:        69.74.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:19:ce:28:72:7f:56:85:ed:44:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=a6314168-eb59-4c6c-8800-143a9bb80e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9a:0c:64:8d:f5:30:f9:7d:41:fc:1b:df:0e:
                    12:68:99:2c:85:06:f2:02:2b:a6:c5:26:bd:7e:be:
                    64:48:f7:5d:9d:6c:7f:4c:0b:ef:ff:4c:cc:50:bd:
                    ff:ed:f1:e2:b3:3d:4f:81:f5:15:f7:57:7e:fe:51:
                    83:56:a5:6e:15:12:7b:84:ad:43:50:02:3d:6f:d9:
                    be:d1:6e:a7:30:12:17:f5:3c:26:22:bb:fe:da:1f:
                    38:c1:ea:58:c5:41:c5:e4:47:0d:37:ae:f4:10:08:
                    75:2c:0f:ab:01:fa:31:1b:03:9f:b7:a2:86:9e:af:
                    ae:2d:8a:12:67:2e:c3:42:83:65:9d:1f:86:ca:37:
                    c6:8f:62:46:c0:da:49:43:d9:36:0d:bc:53:f4:9e:
                    1a:75:9d:6a:25:ad:d2:1b:7b:42:27:ab:9e:5b:9b:
                    fc:6d:92:30:88:3b:c3:6e:40:e1:2a:77:42:3f:39:
                    1d:4d:8f:4d:a9:9d:5d:e6:bf:96:a7:e8:f8:68:e6:
                    43:c5:0c:d7:e6:b8:7c:8f:93:ba:83:15:c6:e3:00:
                    8b:b8:07:22:36:ab:5b:77:86:53:c7:5b:b3:fc:68:
                    96:76:a4:7b:eb:f0:9a:8d:dd:ab:3a:97:69:91:b6:
                    ed:b7:9d:50:c4:c9:d2:57:6f:f0:9f:0c:48:9f:bb:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:47:A1:03:E7:4A:CB:DC:33:DC:9A:5C:A5:5A:13:88:2C:9F:8F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:e3:c0:bf:aa:3d:7d:89:3c:5a:d2:59:4f:ab:75:00:39:
         b1:38:00:fe:d7:95:2b:87:d7:d6:b5:c9:20:4e:52:07:2e:ff:
         51:6a:a6:f5:47:d2:6f:c8:bc:b3:09:24:f2:ec:6f:34:5a:22:
         84:6d:5b:ff:c2:22:28:9d:a9:30:de:5a:73:d4:27:1f:9e:08:
         c9:0c:e7:61:a8:eb:68:e5:84:7f:fc:f6:ca:15:33:87:2f:42:
         b0:35:4d:9d:f5:b1:94:b5:a6:db:e3:4e:31:f6:df:68:9d:5f:
         68:47:09:c2:53:c5:b9:88:de:d9:60:83:68:12:dd:ad:69:0a:
         63:0a:8f:57:74:05:49:5e:68:22:62:f5:a4:04:9c:84:28:b5:
         28:d2:d9:30:f3:f7:3b:86:1e:14:43:cd:0d:e8:4c:0f:84:d2:
         e4:9d:74:fa:2a:ca:bb:f4:ba:9d:7e:f3:27:dc:7c:dc:a0:fd:
         13:4e:c1:fc:ad:c1:13:61:16:b4:f6:8c:3f:11:d0:23:ca:95:
         61:41:0c:8a:72:36:95:8c:a9:56:7a:35:05:77:39:d2:84:3f:
         ab:9e:4f:f7:74:99:2e:92:28:e5:58:67:97:03:e8:94:59:f2:
         2d:06:b1:7d:3c:76:61:c1:5d:9c:ef:b2:41:d0:f7:19:9b:dc:
         37:b4:24:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXhnOKHJ/VoXtRCgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
YTYzMTQxNjgtZWI1OS00YzZjLTg4MDAtMTQzYTliYjgwZTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZoMZI31MPl9Qfwb3w4SaJkshQbyAiumxSa9
fr5kSPddnWx/TAvv/0zMUL3/7fHisz1PgfUV91d+/lGDVqVuFRJ7hK1DUAI9b9m+
0W6nMBIX9TwmIrv+2h84wepYxUHF5EcNN670EAh1LA+rAfoxGwOft6KGnq+uLYoS
Zy7DQoNlnR+GyjfGj2JGwNpJQ9k2DbxT9J4adZ1qJa3SG3tCJ6ueW5v8bZIwiDvD
bkDhKndCPzkdTY9NqZ1d5r+Wp+j4aOZDxQzX5rh8j5O6gxXG4wCLuAciNqtbd4ZT
x1uz/GiWdqR76/Cajd2rOpdpkbbtt51QxMnSV2/wnwxIn7teaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNHoQPnSsvcM9yaXKVaE4gsn48UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvN2JmOWEyZTQtNDVlMS0z
Nzg3LTkzNTYtZGRhYzVkNmY1N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUqRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADG648C/qj19iTxa0llPq3UAObE4AP7XlSuH19a1ySBOUgcu/1FqpvVH
0m/IvLMJJPLsbzRaIoRtW//CIiidqTDeWnPUJx+eCMkM52Go62jlhH/89soVM4cv
QrA1TZ31sZS1ptvjTjH232idX2hHCcJTxbmI3tlgg2gS3a1pCmMKj1d0BUleaCJi
9aQEnIQotSjS2TDz9zuGHhRDzQ3oTA+E0uSddPoqyrv0up1+8yfcfNyg/RNOwfyt
wRNhFrT2jD8R0CPKlWFBDIpyNpWMqVZ6NQV3OdKEP6ueT/d0mS6SKOVYZ5cD6JRZ
8i0GsX08dmHBXZzvskHQ9xmb3De0JDU=
-----END CERTIFICATE-----
Generated at Tue May 7 07:04:40 2024 by rpki-client on console-fra.rpki-client.org