Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
File:                     c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa (raw, json)
Hash identifier:          jB74NRnsVCzkd5k+48TmWUgdtYQeDFnjkWA2Q9lmEJg=
Subject key identifier:   0D:BC:2A:1D:02:28:D7:89:33:E3:8A:B2:FC:CD:7D:8F:E2:BB:7D:CC
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584762D64EB02648FC4AD2560D28
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     17278
IP address blocks:        69.74.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4e:b0:26:48:fc:4a:d2:56:0d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=5d780091-e990-41ab-a81b-bdd31b556f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:84:1b:9d:a0:ff:fa:99:85:ea:bf:3e:9d:fd:
                    dd:ca:28:a1:74:fe:2c:3e:e5:7b:13:b6:8a:f9:d0:
                    0d:a4:85:d7:49:e3:8e:8e:78:08:f0:47:c8:be:3c:
                    ab:05:19:18:65:08:02:e9:96:2e:bb:24:cd:a0:84:
                    23:e0:09:5a:5c:51:07:b4:e2:39:ba:c7:e5:5a:6b:
                    59:88:91:43:8b:64:5b:e4:83:36:0b:79:66:b3:56:
                    df:8e:2c:63:a4:49:9f:e3:ab:e2:33:09:a8:6c:c4:
                    69:04:35:11:3a:58:0c:e6:fc:2d:5f:09:50:dd:69:
                    34:98:6c:75:e4:1f:b9:ce:4c:80:3b:67:7f:8c:27:
                    c1:84:03:86:bd:8a:67:b0:8c:6a:49:de:33:12:7a:
                    1c:a8:a8:5e:d8:27:dc:30:c7:80:89:a2:78:30:6d:
                    8e:62:63:75:35:c0:49:1c:e4:bf:98:c7:f9:2a:52:
                    94:17:61:94:e5:77:15:18:7f:08:27:56:a5:18:f5:
                    12:a5:d4:52:f3:5c:f5:ae:86:84:a0:7a:eb:90:44:
                    cd:27:8c:93:da:e9:b2:f9:82:25:f8:48:77:5c:af:
                    48:eb:a9:3b:d7:0a:fd:05:35:96:f4:bd:a5:51:08:
                    b9:ea:b1:e4:f9:ad:3f:0b:59:db:be:d9:be:41:2b:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BC:2A:1D:02:28:D7:89:33:E3:8A:B2:FC:CD:7D:8F:E2:BB:7D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:0a:36:a8:b2:6f:d7:ba:74:e7:02:a6:34:5e:02:a4:45:
         76:a9:4a:0f:69:10:b2:bc:09:91:cb:f9:37:39:50:de:e0:08:
         f0:77:d8:db:5f:16:8a:e2:ea:87:24:13:f1:8e:8e:87:14:18:
         a0:05:87:9b:3b:e1:bc:f8:c1:54:9d:63:f6:d1:ce:5a:1a:03:
         48:2a:59:08:79:5f:09:da:8c:39:97:d5:bd:77:42:a0:4d:0c:
         4b:e8:43:ee:b9:63:b2:e3:f3:ff:12:a9:d2:8f:28:be:6d:b3:
         83:de:ea:d8:6b:51:af:00:4f:c6:3c:ed:02:a2:04:ba:6d:f3:
         fa:7a:4b:9e:54:2f:a3:5e:59:ed:24:29:72:9d:cf:03:75:e8:
         5f:84:e4:53:e4:2e:af:29:77:19:ff:fd:2e:f7:05:d1:7d:f0:
         39:a6:13:8b:54:1c:53:f3:70:65:8c:47:bf:15:32:b3:c6:69:
         8d:c2:a2:ab:f9:e7:0a:1a:a4:d1:a3:f0:ea:4a:27:0f:dc:f5:
         27:a7:38:4c:a8:da:41:c5:91:05:10:cb:a2:85:aa:66:11:14:
         7d:b7:3d:b3:94:0c:60:95:8f:80:84:e0:29:67:65:5d:3f:3d:
         03:6f:0d:29:d1:31:4e:79:da:a5:e4:4b:60:03:d1:66:2e:d1:
         82:66:57:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1k6wJkj8StJWDSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NWQ3ODAwOTEtZTk5MC00MWFiLWE4MWItYmRkMzFiNTU2ZjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIQbnaD/+pmF6r8+nf3dyiihdP4sPuV7E7aK
+dANpIXXSeOOjngI8EfIvjyrBRkYZQgC6ZYuuyTNoIQj4AlaXFEHtOI5usflWmtZ
iJFDi2Rb5IM2C3lms1bfjixjpEmf46viMwmobMRpBDUROlgM5vwtXwlQ3Wk0mGx1
5B+5zkyAO2d/jCfBhAOGvYpnsIxqSd4zEnocqKhe2CfcMMeAiaJ4MG2OYmN1NcBJ
HOS/mMf5KlKUF2GU5XcVGH8IJ1alGPUSpdRS81z1roaEoHrrkETNJ4yT2umy+YIl
+Eh3XK9I66k71wr9BTWW9L2lUQi56rHk+a0/C1nbvtm+QStn6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA28Kh0CKNeJM+OKsvzNfY/iu33MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYzRkMTdiM2MtMzFiMi0z
MGQ1LTk1MTQtYTVhZTJkYTJhMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUrdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAB8Cjaosm/XunTnAqY0XgKkRXapSg9pELK8CZHL+Tc5UN7gCPB32Ntf
Fori6ockE/GOjocUGKAFh5s74bz4wVSdY/bRzloaA0gqWQh5XwnajDmX1b13QqBN
DEvoQ+65Y7Lj8/8SqdKPKL5ts4Pe6thrUa8AT8Y87QKiBLpt8/p6S55UL6NeWe0k
KXKdzwN16F+E5FPkLq8pdxn//S73BdF98DmmE4tUHFPzcGWMR78VMrPGaY3Coqv5
5woapNGj8OpKJw/c9SenOEyo2kHFkQUQy6KFqmYRFH23PbOUDGCVj4CE4ClnZV0/
PQNvDSnRMU552qXkS2AD0WYu0YJmV4Q=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:26 2024 by rpki-client on console-fra.rpki-client.org