Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa
File:                     90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa (raw, json)
Hash identifier:          TSlJ0Rh74HDd06WC6yIk2Dvm/iatJjsjvF4NOCh7FZw=
Subject key identifier:   1A:D5:25:28:28:2A:A9:92:A2:3C:4C:97:67:FA:96:AB:2A:3F:AC:75
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285849287E669572466A38EFECCE80
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     13984
IP address blocks:        74.117.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:66:95:72:46:6a:38:ef:ec:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=3f73b2c2-359d-455f-ba79-bf5628489b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:74:67:4f:2b:32:4b:19:8d:01:20:ae:3f:4f:
                    bf:f2:fa:12:2f:c6:18:e1:35:c3:9a:bb:7b:e5:b3:
                    e4:cb:bd:cc:ec:6e:6f:79:22:4b:8b:69:f5:fc:30:
                    45:41:f8:13:ee:5d:36:98:21:86:18:0b:14:18:43:
                    cc:7f:21:7d:91:76:e8:c7:11:81:c2:99:2b:be:0b:
                    27:71:2b:ab:31:45:25:e4:96:0a:aa:ac:f1:38:35:
                    55:be:66:5d:77:21:23:3a:fe:80:e4:7b:35:61:5e:
                    93:47:1c:23:c2:30:c1:2a:c5:59:14:cb:ee:2e:00:
                    73:07:d4:cd:0c:89:fe:20:f0:18:1d:f2:ce:13:de:
                    bf:20:39:85:b7:f2:6f:1c:03:60:1b:96:ae:43:56:
                    fd:6b:13:59:ab:52:b1:81:11:b9:f9:cc:1f:d4:0a:
                    0a:70:5d:89:ec:b1:61:84:13:b5:75:9a:af:ec:48:
                    d9:33:bd:71:b3:bf:b4:c4:fa:2e:f6:b6:74:c5:89:
                    e2:c3:2f:13:23:db:dd:13:ca:af:ae:a7:16:05:1f:
                    02:73:a9:10:f9:ce:a2:e6:38:40:21:43:73:87:70:
                    e7:37:e1:10:ae:23:29:c1:1f:c7:28:8f:c6:2f:67:
                    55:5f:97:11:75:77:53:e1:59:78:8b:a0:09:b3:69:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D5:25:28:28:2A:A9:92:A2:3C:4C:97:67:FA:96:AB:2A:3F:AC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:3f:3a:e3:04:0e:73:82:c2:b0:94:c4:88:64:07:9b:f3:
         7e:f7:f0:a9:d9:de:d0:ef:47:05:2b:f9:c1:87:b8:98:f2:a3:
         ba:1d:23:b1:68:62:91:33:2f:28:c4:73:ca:a9:e8:fa:e9:e4:
         f7:6e:2d:d2:c6:f6:61:ad:7c:8f:26:56:ec:c2:b3:2f:bb:6e:
         5c:36:98:14:9b:36:cc:f2:91:b1:bc:2a:29:7e:53:7b:96:76:
         36:bc:b1:b4:91:c7:3f:4a:a0:bf:ef:bb:c9:aa:2f:72:78:0e:
         83:10:50:80:49:90:fb:a8:85:3f:98:d2:d0:61:70:61:7d:88:
         59:fc:9a:4d:1c:13:e8:20:95:08:f5:1f:a0:69:e8:2e:dc:3d:
         7a:82:8a:13:5f:a4:b7:3a:e7:4f:d0:a5:10:21:71:d0:e8:3b:
         01:f8:f0:74:bd:16:d9:43:98:06:a0:d3:22:3e:06:e6:2c:8b:
         eb:1e:be:73:ff:e0:e2:95:a5:6e:bf:64:df:39:84:e6:3c:41:
         53:a9:bd:90:ce:6a:c5:df:99:24:a6:6b:53:c9:a7:a4:d4:3b:
         e4:4f:d7:4f:6e:05:41:2b:40:2c:d9:28:c6:78:02:f3:22:30:
         b4:54:9b:60:3d:77:20:41:5b:46:25:4b:94:1e:42:3c:45:76:
         f5:33:a9:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmaVckZqOO/szoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2
NGMzMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
M2Y3M2IyYzItMzU5ZC00NTVmLWJhNzktYmY1NjI4NDg5YjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinRnTysySxmNASCuP0+/8voSL8YY4TXDmrt7
5bPky73M7G5veSJLi2n1/DBFQfgT7l02mCGGGAsUGEPMfyF9kXboxxGBwpkrvgsn
cSurMUUl5JYKqqzxODVVvmZddyEjOv6A5Hs1YV6TRxwjwjDBKsVZFMvuLgBzB9TN
DIn+IPAYHfLOE96/IDmFt/JvHANgG5auQ1b9axNZq1KxgRG5+cwf1AoKcF2J7LFh
hBO1dZqv7EjZM71xs7+0xPou9rZ0xYniwy8TI9vdE8qvrqcWBR8Cc6kQ+c6i5jhA
IUNzh3DnN+EQriMpwR/HKI/GL2dVX5cRdXdT4Vl4i6AJs2n9NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrVJSgoKqmSojxMl2f6lqsqP6x1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh
ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvOTAxNjhiM2UtNzYyNS0z
ZGZiLWFlNWItNWU1YTExNzBlN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk
MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1
NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj
OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnWQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADofPzrjBA5zgsKwlMSIZAeb83738KnZ3tDvRwUr+cGHuJjyo7odI7Fo
YpEzLyjEc8qp6Prp5PduLdLG9mGtfI8mVuzCsy+7blw2mBSbNszykbG8Kil+U3uW
dja8sbSRxz9KoL/vu8mqL3J4DoMQUIBJkPuohT+Y0tBhcGF9iFn8mk0cE+gglQj1
H6Bp6C7cPXqCihNfpLc650/QpRAhcdDoOwH48HS9FtlDmAag0yI+BuYsi+sevnP/
4OKVpW6/ZN85hOY8QVOpvZDOasXfmSSma1PJp6TUO+RP109uBUErQCzZKMZ4AvMi
MLRUm2A9dyBBW0YlS5QeQjxFdvUzqcM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:57:31 2025 by rpki-client