Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa
File:                     7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa (raw, json)
Hash identifier:          SXyXlbwTRie/0CdRpPgVXuiDtRY6uz0NWRWOn/wfCWY=
Subject key identifier:   7E:9C:4C:D5:3C:4B:6A:BD:9F:81:FC:7C:97:75:3C:2F:32:B0:81:5E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA1B04FEBC81EDB2558D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397213
IP address blocks:        204.74.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:1b:04:fe:bc:81:ed:b2:55:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=e2e1ae4f-0c41-4e22-aa26-615a9980d30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:13:1c:dd:e9:54:b1:59:18:4e:8a:ad:e2:
                    dc:56:e3:e9:d1:c1:56:28:80:b9:25:46:be:9b:4f:
                    f0:e9:d8:62:85:c0:97:08:3c:be:aa:de:c1:63:e4:
                    ae:4b:83:cc:6c:6a:d2:f2:8b:df:9a:ce:2d:90:56:
                    3a:5b:4f:10:92:86:a3:00:aa:f3:96:eb:4c:22:65:
                    fb:73:ae:48:9b:37:b4:c0:29:21:6f:6d:a0:1f:36:
                    15:fc:17:bb:ca:32:cc:4f:cf:15:f6:b8:05:3b:c8:
                    f1:b8:a6:cb:ce:a1:c5:d4:1c:cd:52:74:d2:4e:54:
                    98:9f:9a:18:1f:69:db:46:dc:f8:23:4d:ff:a9:0f:
                    2f:d4:6e:0e:38:48:46:dc:ca:ae:70:57:f1:93:d8:
                    af:fa:ef:d2:17:b3:a4:a2:21:99:5a:61:a0:15:49:
                    6a:d1:65:6b:43:49:37:c7:0e:a8:9a:36:e4:25:25:
                    3f:38:9f:92:71:75:6d:72:ae:0f:8d:64:74:07:8f:
                    00:f0:bc:8a:2e:12:d2:53:6e:48:52:16:ef:b5:19:
                    c2:b7:4a:aa:60:84:1f:04:70:a9:4b:fd:1f:8a:79:
                    6e:11:56:47:79:ad:16:de:50:53:29:3a:ba:dc:d7:
                    e5:d0:06:a8:60:a1:b0:a1:a5:9e:42:46:26:1e:69:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:4C:D5:3C:4B:6A:BD:9F:81:FC:7C:97:75:3C:2F:32:B0:81:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5e:01:c2:07:80:d2:5f:74:0c:3e:1d:87:7d:9c:52:ed:88:
         3b:58:0a:c7:35:f8:bf:00:5e:d9:6c:7a:9f:e2:d6:1c:ff:21:
         3f:db:62:34:07:19:f3:80:01:cc:0b:ff:2e:ea:08:10:d2:20:
         bd:1a:0e:7f:87:78:77:6f:45:2b:bd:c2:05:20:d6:49:a2:0a:
         58:0d:31:bf:ab:50:3d:dd:30:90:3e:b2:44:85:17:07:50:05:
         74:09:27:dc:87:80:68:64:4d:c5:d0:d8:ec:ab:12:04:58:ae:
         ba:19:bf:12:28:31:db:a4:51:4c:b0:a6:16:6c:54:12:7b:e5:
         2a:1d:e0:6f:b4:b4:2d:7e:69:2e:b2:5b:71:2f:3e:b8:64:21:
         b8:04:81:cd:78:71:f1:00:cd:64:7a:e7:55:79:3d:e5:e8:c5:
         14:3f:03:aa:64:a0:d1:8c:51:42:fd:b4:1a:5a:01:a1:93:4a:
         3b:e4:aa:cc:0a:29:02:56:f2:82:a6:4f:4a:b3:23:be:6b:68:
         1e:e7:0a:86:3d:8d:70:e5:31:b7:65:5c:22:ad:01:25:11:a5:
         29:8b:72:9e:24:2a:2a:e6:92:6d:93:f1:fc:6d:dc:72:3d:33:
         8d:18:e6:40:6c:71:b0:0d:1c:ce:fc:bc:de:52:c1:50:17:ae:
         0c:35:11:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyhsE/ryB7bJVjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk
ZTJlMWFlNGYtMGM0MS00ZTIyLWFhMjYtNjE1YTk5ODBkMzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj0THN3pVLFZGE6KreLcVuPp0cFWKIC5JUa+
m0/w6dhihcCXCDy+qt7BY+SuS4PMbGrS8ovfms4tkFY6W08QkoajAKrzlutMImX7
c65Imze0wCkhb22gHzYV/Be7yjLMT88V9rgFO8jxuKbLzqHF1BzNUnTSTlSYn5oY
H2nbRtz4I03/qQ8v1G4OOEhG3MqucFfxk9iv+u/SF7OkoiGZWmGgFUlq0WVrQ0k3
xw6omjbkJSU/OJ+ScXVtcq4PjWR0B48A8LyKLhLSU25IUhbvtRnCt0qqYIQfBHCp
S/0finluEVZHea0W3lBTKTq63Nfl0AaoYKGwoaWeQkYmHmlIFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6cTNU8S2q9n4H8fJd1PC8ysIFeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2ZhMTE3MzQtNDllYS0z
Y2M2LTk1ZWQtZGRlNjlmN2UxMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdeAcIHgNJfdAw+HYd9nFLtiDtYCsc1+L8AXtlsep/i1hz/IT/bYjQH
GfOAAcwL/y7qCBDSIL0aDn+HeHdvRSu9wgUg1kmiClgNMb+rUD3dMJA+skSFFwdQ
BXQJJ9yHgGhkTcXQ2OyrEgRYrroZvxIoMdukUUywphZsVBJ75Sod4G+0tC1+aS6y
W3EvPrhkIbgEgc14cfEAzWR651V5PeXoxRQ/A6pkoNGMUUL9tBpaAaGTSjvkqswK
KQJW8oKmT0qzI75raB7nCoY9jXDlMbdlXCKtASURpSmLcp4kKirmkm2T8fxt3HI9
M40Y5kBscbANHM78vN5SwVAXrgw1EW0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:08 2024 by rpki-client on console-fra.rpki-client.org