Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07f55c2c-8cce-3399-9b2e-6f36d57ebd8e.roa
File:                     07f55c2c-8cce-3399-9b2e-6f36d57ebd8e.roa (raw, json)
Hash identifier:          an2IjcwXRgpC/8bPLwJieabKzt1z+fCwyRT+glnPt4c=
Subject key identifier:   25:87:73:E1:AB:3C:37:F8:98:2B:2A:24:78:07:14:F1:BA:C8:9D:FB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584780264A53FCC1D96272CCB980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07f55c2c-8cce-3399-9b2e-6f36d57ebd8e.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     399168
IP address blocks:        204.74.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:4a:53:fc:c1:d9:62:72:cc:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=5b1fde12-b96f-4af3-a0d4-1eb4ee491a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:6f:81:59:7d:8b:66:46:2e:e6:fc:b2:4b:
                    48:2a:27:20:c7:62:4f:fc:e5:3e:93:4e:74:3e:81:
                    53:1a:9f:e1:c7:21:36:e3:c9:ab:34:48:51:59:1b:
                    41:ec:5a:ac:c9:cc:07:13:00:ea:97:d1:f2:73:47:
                    e3:57:bf:68:92:6a:e6:e6:9f:ea:ea:1a:c2:d7:49:
                    83:3b:a9:6e:63:5b:87:58:b2:dc:d0:7f:f0:a8:c3:
                    e2:5c:be:20:3d:17:cf:69:8e:15:ad:1e:9c:8a:b3:
                    50:e8:a3:76:93:86:c4:00:a2:0c:2d:96:c1:05:76:
                    82:e2:4d:5e:02:e6:e8:38:26:02:2d:91:98:c4:ab:
                    0e:63:b0:8a:4e:7a:e9:56:c7:b7:ef:8a:c7:d2:02:
                    e0:c7:fc:25:4a:9c:20:a1:38:47:28:f5:5c:ea:99:
                    01:86:84:29:64:a9:bb:7a:06:27:24:d9:50:cd:84:
                    06:0c:31:56:2d:d8:d0:3d:a2:1e:03:ec:e4:42:0b:
                    4d:63:03:aa:bc:85:6f:28:c8:10:fb:15:7e:14:25:
                    e6:5f:02:de:3d:34:45:ca:c4:67:1f:f9:3c:53:c6:
                    12:ca:9e:a9:b7:4f:f6:59:40:dd:5a:ae:6a:f9:31:
                    4d:77:98:3e:d0:23:5a:f7:5a:f2:16:24:f9:a1:42:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:73:E1:AB:3C:37:F8:98:2B:2A:24:78:07:14:F1:BA:C8:9D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07f55c2c-8cce-3399-9b2e-6f36d57ebd8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:98:0f:78:d2:84:da:64:35:c4:2e:e1:e5:b8:d4:8d:c8:
         41:ed:58:78:17:36:6c:8c:cf:12:ea:8a:60:43:55:ff:a4:25:
         2a:bb:46:3e:36:fe:fe:4c:1a:0e:1e:c9:2d:c6:45:26:55:05:
         b4:e4:21:7f:f3:6f:9e:23:12:c7:0a:98:40:79:57:9c:63:e5:
         46:de:af:54:52:e0:52:a3:67:3e:a6:ef:c0:74:d5:af:82:d0:
         95:1d:aa:6a:03:d6:f9:e8:f2:14:96:76:d2:27:7c:da:c7:e0:
         f3:9a:9d:8d:78:31:dc:38:87:47:08:6c:b3:dd:a1:6a:d3:6f:
         a1:fc:d1:d5:2a:46:65:f4:5a:c9:aa:37:eb:84:b7:94:4f:80:
         48:0f:be:0b:9c:c4:62:02:d8:92:fe:52:68:40:91:df:63:4b:
         a0:17:bc:ef:ed:71:a1:ff:75:8d:81:66:fe:ec:8f:02:4d:78:
         c0:0a:3d:df:8e:c8:38:26:b9:d7:f7:63:f0:cb:30:cd:c8:2a:
         f6:37:d1:1c:e8:fb:29:f4:30:18:11:a3:cb:93:3c:6f:23:17:
         7f:f4:95:b5:a3:e6:5d:b8:6f:cf:c3:3e:1f:b8:62:29:dc:f3:
         e4:51:a0:96:87:b6:83:81:2d:c8:c0:05:00:2f:09:d5:d6:a0:
         b4:82:c9:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJkpT/MHZYnLMuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
NWIxZmRlMTItYjk2Zi00YWYzLWEwZDQtMWViNGVlNDkxYThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UFvgVl9i2ZGLub8sktIKicgx2JP/OU+k050
PoFTGp/hxyE248mrNEhRWRtB7FqsycwHEwDql9Hyc0fjV79okmrm5p/q6hrC10mD
O6luY1uHWLLc0H/wqMPiXL4gPRfPaY4VrR6cirNQ6KN2k4bEAKIMLZbBBXaC4k1e
AuboOCYCLZGYxKsOY7CKTnrpVse374rH0gLgx/wlSpwgoThHKPVc6pkBhoQpZKm7
egYnJNlQzYQGDDFWLdjQPaIeA+zkQgtNYwOqvIVvKMgQ+xV+FCXmXwLePTRFysRn
H/k8U8YSyp6pt0/2WUDdWq5q+TFNd5g+0CNa91ryFiT5oUJEVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWHc+GrPDf4mCsqJHgHFPG6yJ37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDdmNTVjMmMtOGNjZS0z
Mzk5LTliMmUtNmYzNmQ1N2ViZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEpqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpBmA940oTaZDXELuHluNSNyEHtWHgXNmyMzxLqimBDVf+kJSq7Rj42
/v5MGg4eyS3GRSZVBbTkIX/zb54jEscKmEB5V5xj5Uber1RS4FKjZz6m78B01a+C
0JUdqmoD1vno8hSWdtInfNrH4POanY14Mdw4h0cIbLPdoWrTb6H80dUqRmX0Wsmq
N+uEt5RPgEgPvgucxGIC2JL+UmhAkd9jS6AXvO/tcaH/dY2BZv7sjwJNeMAKPd+O
yDgmudf3Y/DLMM3IKvY30Rzo+yn0MBgRo8uTPG8jF3/0lbWj5l24b8/DPh+4Yinc
8+RRoJaHtoOBLcjABQAvCdXWoLSCya8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:56 2024 by rpki-client on console-fra.rpki-client.org