Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa
File:                     6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa (raw, json)
Hash identifier:          EsZKTKIcO5FqeXwOH8C9IgQPRKYsv2M7H3ie/1ajLTU=
Subject key identifier:   D9:C9:0E:7B:48:1D:51:E6:E3:DF:20:47:E9:E9:E7:B7:3D:1A:40:C2
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F43285847C1DF5880867B9CC90D488000
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     63240
IP address blocks:        74.119.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:58:80:86:7b:9c:c9:0d:48:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=94e49218-daf8-46d9-a75b-07f9596e4015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:a6:e9:74:a7:04:93:56:bb:87:76:28:29:
                    c6:bd:a5:fa:c6:1f:7a:77:45:da:25:bd:15:fc:f3:
                    d5:e1:57:21:8a:eb:8b:05:e1:ee:cf:ae:a2:d8:db:
                    ca:d7:73:69:72:01:e9:89:ea:8f:a1:29:a6:66:f6:
                    83:23:74:1e:36:0e:0c:ba:03:c6:d2:6e:35:d3:93:
                    e8:df:41:84:b3:b4:26:a1:b8:9f:53:28:f3:17:b1:
                    84:eb:9e:45:d8:85:1d:f9:ba:67:8f:fb:51:b9:78:
                    ad:4f:06:25:dd:a5:e3:e2:98:1a:a1:bf:bd:2a:0d:
                    e5:7f:58:4f:06:aa:24:be:56:24:d4:cd:de:1a:26:
                    64:e3:95:c9:42:34:67:4b:17:52:78:6a:aa:2e:69:
                    79:95:ff:0c:47:fc:c8:87:fb:9d:fd:bd:19:75:94:
                    6c:28:46:56:b5:dd:8e:78:01:f0:74:20:ff:a9:94:
                    02:e2:e3:5a:e5:6a:29:4b:e2:63:87:86:2e:4d:d9:
                    a0:1b:08:30:da:85:80:80:e5:44:63:36:ce:21:55:
                    8a:a5:da:70:55:60:1f:9b:e2:d6:13:a6:80:8c:f6:
                    1a:48:82:86:1b:0d:9e:bb:f2:bd:1b:6e:b1:85:7d:
                    25:b2:ce:0d:fb:b1:58:89:5c:8a:d8:a8:35:27:81:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C9:0E:7B:48:1D:51:E6:E3:DF:20:47:E9:E9:E7:B7:3D:1A:40:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:33:d1:0b:9d:d6:f3:41:17:f5:a3:94:3e:53:e1:b5:b1:0d:
         35:04:76:ef:ca:ad:6c:7d:92:99:9f:26:be:a6:31:db:7e:d1:
         ea:75:4c:78:9a:71:7d:e9:6c:57:21:46:41:db:11:7d:8c:a0:
         f5:f9:c9:7e:3e:df:97:91:13:5b:4b:28:22:4c:84:39:e2:bf:
         27:2a:09:8a:ab:dd:29:cf:cb:fb:b7:79:6a:0f:47:e3:98:f8:
         cc:ba:5c:f0:97:d6:c1:94:70:a4:52:5a:b0:31:37:9c:53:37:
         a4:fb:35:bb:49:4f:e7:95:ac:79:33:31:fd:a7:3c:f4:5d:41:
         99:82:68:20:8b:91:db:c4:e1:70:8c:09:7b:de:09:1b:98:9f:
         89:e0:79:b6:bf:d5:a5:d2:80:bb:ab:60:09:fd:4a:2d:16:86:
         7b:0f:f3:3e:1b:17:7f:22:f2:51:b2:d4:5b:4b:16:48:e7:4c:
         e6:df:72:b5:24:25:35:26:cb:fc:0b:95:fe:4f:84:c1:9e:08:
         b3:6a:52:4f:2c:a0:22:37:d5:e8:82:7b:66:83:d5:3c:d3:00:
         98:3c:a5:48:96:18:d9:79:ed:45:68:b7:93:fb:48:05:68:aa:
         f8:95:08:d2:0c:17:df:af:cf:a7:69:f4:23:15:c4:39:e9:54:
         a0:09:8c:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31iAhnucyQ1IgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5
ZDVhMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
OTRlNDkyMTgtZGFmOC00NmQ5LWE3NWItMDdmOTU5NmU0MDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiECm6XSnBJNWu4d2KCnGvaX6xh96d0XaJb0V
/PPV4VchiuuLBeHuz66i2NvK13NpcgHpieqPoSmmZvaDI3QeNg4MugPG0m4105Po
30GEs7QmobifUyjzF7GE655F2IUd+bpnj/tRuXitTwYl3aXj4pgaob+9Kg3lf1hP
BqokvlYk1M3eGiZk45XJQjRnSxdSeGqqLml5lf8MR/zIh/ud/b0ZdZRsKEZWtd2O
eAHwdCD/qZQC4uNa5WopS+Jjh4YuTdmgGwgw2oWAgOVEYzbOIVWKpdpwVWAfm+LW
E6aAjPYaSIKGGw2eu/K9G26xhX0lss4N+7FYiVyK2Kg1J4HMfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnJDntIHVHm498gR+np57c9GkDCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj
YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNmI2YTIwZjAtMzgzNi0z
ZDM2LThhZjQtODQwYTk3YzRmYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj
MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy
OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk
ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASncYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMz0Qud1vNBF/WjlD5T4bWxDTUEdu/KrWx9kpmfJr6mMdt+0ep1THia
cX3pbFchRkHbEX2MoPX5yX4+35eRE1tLKCJMhDnivycqCYqr3SnPy/u3eWoPR+OY
+My6XPCX1sGUcKRSWrAxN5xTN6T7NbtJT+eVrHkzMf2nPPRdQZmCaCCLkdvE4XCM
CXveCRuYn4ngeba/1aXSgLurYAn9Si0WhnsP8z4bF38i8lGy1FtLFkjnTObfcrUk
JTUmy/wLlf5PhMGeCLNqUk8soCI31eiCe2aD1TzTAJg8pUiWGNl57UVot5P7SAVo
qviVCNIMF9+vz6dp9CMVxDnpVKAJjEc=
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:55 2024 by rpki-client on console-ams.rpki-client.org