Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8c00d77-d493-3e69-b754-9fe9880db7be.roa
File:                     f8c00d77-d493-3e69-b754-9fe9880db7be.roa (raw, json)
Hash identifier:          DspLs88C4d3Hq55CgvirS8mNERC/u+sF/rv9YR1MaPY=
Subject key identifier:   67:BC:B1:39:DA:CA:28:BE:9F:4A:2F:A9:DF:1A:BB:0D:4E:6B:21:07
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF0311F693D9DD222E44100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8c00d77-d493-3e69-b754-9fe9880db7be.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397232
IP address blocks:        204.74.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:31:1f:69:3d:9d:d2:22:e4:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=c6cafb14-bf39-452b-a11d-bf5529c6cb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:dd:f4:89:49:d4:1e:e7:22:e3:7b:b9:90:
                    25:a6:28:7c:ed:90:7f:0c:a8:46:df:a2:66:ec:dd:
                    9d:bd:f8:34:62:9b:5a:22:17:2f:94:32:49:0e:dc:
                    49:3f:a7:70:e4:23:42:fb:ac:6b:b1:84:5e:5b:d4:
                    7f:1f:5f:9b:b3:7f:8c:8e:a0:ce:82:b9:35:10:9a:
                    07:f4:f0:ad:9e:ea:25:72:ae:28:93:8d:0a:bb:5f:
                    de:00:4a:4c:d5:f9:72:a9:c1:ff:cf:ed:19:d1:12:
                    e6:7c:b4:b5:81:14:9c:62:55:f5:87:4c:99:d2:f1:
                    ef:e9:f2:5a:5e:32:c7:9b:00:f8:97:18:46:fa:b0:
                    53:2c:79:0c:de:28:cc:77:12:cd:b9:a1:84:d4:d4:
                    45:df:51:c1:8b:44:c4:37:cc:5d:66:a4:35:1a:ef:
                    d4:56:c0:51:7f:c4:da:61:3d:5b:a9:f3:a9:71:d0:
                    65:04:46:3f:fe:ca:89:3a:6e:5f:18:e9:d0:5c:2b:
                    fe:44:74:3e:6a:af:6e:c2:d3:69:fb:38:2e:e5:e1:
                    a1:44:da:c0:dd:7e:6b:62:3d:41:32:95:eb:ea:97:
                    00:5b:41:bd:c8:32:8a:b0:de:45:62:0f:07:d6:ee:
                    34:90:cd:5e:31:49:12:93:10:6a:e4:5a:dd:e1:e1:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:B1:39:DA:CA:28:BE:9F:4A:2F:A9:DF:1A:BB:0D:4E:6B:21:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8c00d77-d493-3e69-b754-9fe9880db7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:c1:30:60:95:99:28:af:f6:49:ef:0a:1f:54:fc:c5:f7:
         aa:fa:3f:0d:d0:b5:0d:7d:a9:e1:c9:6c:cf:53:06:58:82:ff:
         bf:34:36:1e:a8:d7:fd:70:9b:47:27:bd:71:11:93:6a:36:cf:
         74:a0:4e:72:24:b3:c5:6a:cc:53:73:94:44:9a:a6:f2:dc:3b:
         0f:a0:27:0c:25:42:7b:30:e5:44:9e:c7:2f:f4:b7:9d:bc:9d:
         63:c4:4c:dd:8f:a1:0e:ae:98:2c:f0:bd:e0:fb:3e:8e:90:33:
         86:ac:b3:e0:f6:08:e5:ca:5a:93:cc:25:62:ee:07:25:51:26:
         7d:cd:bb:5a:86:88:99:a0:d7:15:01:6d:97:eb:45:b3:11:59:
         8b:28:72:78:b9:5d:ca:81:f7:d1:fd:eb:3b:2a:47:91:ff:d2:
         58:75:2d:84:98:36:66:43:b7:78:92:30:d3:06:41:b0:97:8a:
         5a:6d:29:bc:51:d3:5a:ad:80:ea:31:9c:ce:eb:b3:50:2e:05:
         a1:e6:65:f3:5d:37:28:98:3a:40:ad:78:ff:38:36:09:48:82:
         8d:33:26:88:a5:c6:3e:5d:eb:27:84:ae:10:7a:72:13:b1:bb:
         fe:9c:80:94:1b:f6:a0:01:b3:2d:e2:34:9d:88:2d:be:d1:e1:
         71:63:1c:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb88DEfaT2d0iLkQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgyNTAxMDAzMloXDTI0MTEyMzAyMDAzMlowLzEtMCsGA1UEAxMk
YzZjYWZiMTQtYmYzOS00NTJiLWExMWQtYmY1NTI5YzZjYjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhfd9IlJ1B7nIuN7uZAlpih87ZB/DKhG36Jm
7N2dvfg0YptaIhcvlDJJDtxJP6dw5CNC+6xrsYReW9R/H1+bs3+MjqDOgrk1EJoH
9PCtnuolcq4ok40Ku1/eAEpM1flyqcH/z+0Z0RLmfLS1gRScYlX1h0yZ0vHv6fJa
XjLHmwD4lxhG+rBTLHkM3ijMdxLNuaGE1NRF31HBi0TEN8xdZqQ1Gu/UVsBRf8Ta
YT1bqfOpcdBlBEY//sqJOm5fGOnQXCv+RHQ+aq9uwtNp+zgu5eGhRNrA3X5rYj1B
MpXr6pcAW0G9yDKKsN5FYg8H1u40kM1eMUkSkxBq5Frd4eHukQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGe8sTnayii+n0ovqd8auw1OayEHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjhjMDBkNzctZDQ5My0z
ZTY5LWI3NTQtOWZlOTg4MGRiN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQbwTBglZkor/ZJ7wofVPzF96r6Pw3QtQ19qeHJbM9TBliC/780Nh6o
1/1wm0cnvXERk2o2z3SgTnIks8VqzFNzlESapvLcOw+gJwwlQnsw5USexy/0t528
nWPETN2PoQ6umCzwveD7Po6QM4ass+D2COXKWpPMJWLuByVRJn3Nu1qGiJmg1xUB
bZfrRbMRWYsocni5XcqB99H96zsqR5H/0lh1LYSYNmZDt3iSMNMGQbCXilptKbxR
01qtgOoxnM7rs1AuBaHmZfNdNyiYOkCteP84NglIgo0zJoilxj5d6yeErhB6chOx
u/6cgJQb9qABsy3iNJ2ILb7R4XFjHDo=
-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:27 2024 by rpki-client on console-ams.rpki-client.org