Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a1310a2-4ded-3f96-afed-94a6f2a6d40f.roa
File:                     3a1310a2-4ded-3f96-afed-94a6f2a6d40f.roa (raw, json)
Hash identifier:          C1WRWXRw8WIRsveelKtxNHGhdP3Oi/Rw0Ef1j1S+Or8=
Subject key identifier:   E7:25:6F:1A:7E:A4:5B:8E:A5:54:20:AA:C2:BF:A2:65:83:07:C7:57
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA1F342F01189C6C806C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a1310a2-4ded-3f96-afed-94a6f2a6d40f.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397214
IP address blocks:        204.74.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:1f:34:2f:01:18:9c:6c:80:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=47568099-fb56-47f1-a431-5d3422fc6250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:65:ba:0a:1e:78:18:7d:2e:62:55:38:8f:
                    81:d7:37:7d:e5:97:9d:f4:31:fb:bf:c9:dc:cd:81:
                    ae:e9:8a:e3:65:29:76:11:24:0c:7a:4a:31:37:7e:
                    d4:d6:ee:1a:0f:7c:b6:12:eb:b5:d9:25:62:5e:9e:
                    9b:d8:48:4a:0b:0e:a5:87:3a:c1:de:7a:42:c2:4f:
                    07:e5:44:8d:14:61:03:6e:bf:8a:ec:99:e3:6b:f0:
                    0e:2b:70:34:7b:df:35:e4:64:c5:17:d7:ec:30:51:
                    ce:2b:92:e8:86:38:19:47:a8:5b:f2:83:e1:04:8c:
                    9f:1b:da:5b:67:32:6b:40:f4:79:ff:03:53:ab:ad:
                    18:35:58:5b:da:a4:3c:83:49:d8:fd:b5:bd:6d:08:
                    d5:02:1f:12:87:59:1e:55:90:99:19:28:af:ed:84:
                    07:f9:cc:18:35:97:f9:cc:37:49:9c:8a:e9:f9:35:
                    dc:52:d2:b0:3a:06:89:29:44:2e:33:3e:23:bb:d2:
                    83:fd:27:91:0e:09:f6:85:61:18:9f:fe:b4:ee:9e:
                    cc:25:de:e0:ef:54:b5:9e:3f:34:72:91:2b:e3:50:
                    de:bd:74:33:f4:54:64:6a:e6:66:cc:fd:44:cd:24:
                    7f:d1:44:f4:1d:38:cb:24:f3:8e:be:08:0c:e6:a7:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:25:6F:1A:7E:A4:5B:8E:A5:54:20:AA:C2:BF:A2:65:83:07:C7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a1310a2-4ded-3f96-afed-94a6f2a6d40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:ea:60:f7:8b:5b:b5:b7:8b:9b:77:76:b4:52:b7:30:f7:
         68:5e:ec:14:2b:52:98:37:fd:00:c9:47:2c:4a:f7:d6:90:12:
         f7:87:af:e8:eb:da:85:7d:7f:a1:cb:1c:3e:86:dc:3d:94:74:
         dc:1b:3b:8b:34:55:ea:ed:8c:76:a2:0d:cf:1b:bd:f8:45:d4:
         5f:c1:3b:c6:3f:29:59:d1:77:c4:28:6e:50:8d:9e:28:79:fd:
         53:18:5a:bd:b6:a1:07:dd:cf:94:e2:35:4d:e9:de:4f:e7:04:
         23:03:a9:b5:e8:a3:65:f7:8e:af:37:6d:90:bc:6d:ff:03:05:
         6c:78:f1:b7:b7:24:fa:ad:64:f3:0f:32:77:82:7c:7d:89:74:
         3a:f6:31:a1:75:7d:39:39:83:d8:55:51:48:d4:0f:25:4c:25:
         1f:27:87:21:64:bc:86:09:5b:11:e3:8b:64:ea:2d:39:55:66:
         9b:30:e9:ae:76:af:66:ac:7b:74:1b:91:34:a4:82:45:97:78:
         2f:6e:51:3c:c6:d9:75:06:71:7e:dc:82:35:45:e6:14:90:5f:
         1c:83:17:af:e7:d8:6d:a4:3e:96:d3:9b:0b:6d:e0:93:a8:a1:
         97:7a:f2:e2:45:65:63:fa:09:6e:82:e9:14:b3:40:df:f5:67:
         29:88:ba:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyh80LwEYnGyAbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk
NDc1NjgwOTktZmI1Ni00N2YxLWE0MzEtNWQzNDIyZmM2MjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0dlugoeeBh9LmJVOI+B1zd95Zed9DH7v8nc
zYGu6YrjZSl2ESQMekoxN37U1u4aD3y2Euu12SViXp6b2EhKCw6lhzrB3npCwk8H
5USNFGEDbr+K7Jnja/AOK3A0e9815GTFF9fsMFHOK5LohjgZR6hb8oPhBIyfG9pb
ZzJrQPR5/wNTq60YNVhb2qQ8g0nY/bW9bQjVAh8Sh1keVZCZGSiv7YQH+cwYNZf5
zDdJnIrp+TXcUtKwOgaJKUQuMz4ju9KD/SeRDgn2hWEYn/607p7MJd7g71S1nj80
cpEr41DevXQz9FRkauZmzP1EzSR/0UT0HTjLJPOOvggM5qdqaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOclbxp+pFuOpVQgqsK/omWDB8dXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2ExMzEwYTItNGRlZC0z
Zjk2LWFmZWQtOTRhNmYyYTZkNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdP6mD3i1u1t4ubd3a0Urcw92he7BQrUpg3/QDJRyxK99aQEveHr+jr
2oV9f6HLHD6G3D2UdNwbO4s0VertjHaiDc8bvfhF1F/BO8Y/KVnRd8QoblCNnih5
/VMYWr22oQfdz5TiNU3p3k/nBCMDqbXoo2X3jq83bZC8bf8DBWx48be3JPqtZPMP
MneCfH2JdDr2MaF1fTk5g9hVUUjUDyVMJR8nhyFkvIYJWxHji2TqLTlVZpsw6a52
r2ase3QbkTSkgkWXeC9uUTzG2XUGcX7cgjVF5hSQXxyDF6/n2G2kPpbTmwtt4JOo
oZd68uJFZWP6CW6C6RSzQN/1ZymIugI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:37 2024 by rpki-client on console-ams.rpki-client.org