Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d/7ef752f2-8ec7-378f-9f29-fd532a8aa89d.roa
File:                     7ef752f2-8ec7-378f-9f29-fd532a8aa89d.roa (raw, json)
Hash identifier:          v2u4eYA0hVYrbvWlnzikPEoAjvx06sl0V0/f5Cxb1P8=
Subject key identifier:   57:83:A8:43:2E:84:0D:1F:CF:D7:34:92:44:EB:4E:F2:F0:61:F2:7E
Certificate issuer:       /CN=fdbaae35-7067-423e-8d7a-ae7ea638777d
Certificate serial:       010D0C9F43285847DC64A63A64665153353C3800
Authority key identifier: 9F:D4:9D:CF:3F:26:37:E9:CA:22:1A:51:05:AE:18:F6:C9:C6:C2:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d/7ef752f2-8ec7-378f-9f29-fd532a8aa89d.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     55281
IP address blocks:        74.80.238.0/24 maxlen: 24
                          74.80.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d/fdbaae35-7067-423e-8d7a-ae7ea638777d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d/fdbaae35-7067-423e-8d7a-ae7ea638777d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a6:3a:64:66:51:53:35:3c:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbaae35-7067-423e-8d7a-ae7ea638777d
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=e8e6ea88-82fc-46ca-92a8-2556adcbb627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:cf:e8:1b:e6:49:46:4d:ab:fd:03:eb:30:
                    2d:16:49:24:98:48:f3:2d:71:fe:6c:a1:0a:78:e3:
                    27:89:a8:b8:ba:dd:64:be:60:63:46:54:db:76:e0:
                    d3:74:bc:dd:f0:7b:40:2e:8c:00:1a:9f:7d:c5:ab:
                    ce:d5:9c:39:65:16:01:83:39:bf:e2:ee:19:01:85:
                    1d:54:c3:1e:58:a3:ed:a8:57:0f:3d:2e:98:92:36:
                    81:b3:4b:5a:b6:f6:43:3c:fb:e5:ab:61:e2:38:ae:
                    9c:bc:a1:30:35:fe:00:97:f2:35:85:6b:d7:31:2a:
                    87:56:1d:5a:3c:94:6a:14:b0:e4:2f:cc:c1:2a:b7:
                    62:e9:a3:30:31:ec:e7:76:f2:c9:a5:f9:f2:42:0b:
                    46:33:4f:45:84:30:7b:53:35:7a:5b:e9:7a:00:6b:
                    97:9c:f9:f1:7e:01:90:60:23:8e:45:db:d3:3b:3a:
                    86:58:66:78:24:1b:fa:75:49:3c:1e:93:a1:69:db:
                    66:67:7f:88:a3:92:d0:15:61:5c:18:67:15:7a:67:
                    e0:a6:6c:1e:b2:7a:87:c4:21:ef:fa:c6:ea:3c:b6:
                    83:d4:fc:1a:58:d4:15:62:4d:4c:c7:1b:ba:ab:05:
                    78:e1:bb:2d:b3:4f:81:3e:8c:a5:c6:8e:0e:7e:79:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:A8:43:2E:84:0D:1F:CF:D7:34:92:44:EB:4E:F2:F0:61:F2:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d/7ef752f2-8ec7-378f-9f29-fd532a8aa89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d/fdbaae35-7067-423e-8d7a-ae7ea638777d.crl

            X509v3 Authority Key Identifier:
                keyid:9F:D4:9D:CF:3F:26:37:E9:CA:22:1A:51:05:AE:18:F6:C9:C6:C2:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdbaae35-7067-423e-8d7a-ae7ea638777d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.238.0/24
                  74.80.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:57:a3:0d:45:c5:f1:4e:42:6d:6d:18:e4:c5:9c:00:fc:22:
         2e:17:af:b6:c4:c8:bc:b6:22:29:da:27:52:1e:9e:18:3c:f0:
         4f:e6:fe:94:d7:ba:f0:3c:02:88:b5:0a:71:15:40:3e:b6:cb:
         a8:ea:58:4e:a7:3d:d0:30:aa:6c:38:86:4c:4c:80:9c:fd:fd:
         e6:bf:bf:92:4a:34:8c:f8:12:7a:ee:2c:bc:62:ee:33:b1:58:
         a5:e5:d3:a1:7d:2c:38:ce:b2:52:52:9d:4c:4d:62:c7:79:2c:
         94:aa:b9:3b:f0:18:5b:bf:1b:47:ca:2b:30:1c:df:7a:03:07:
         e2:da:00:d6:e4:1e:96:fb:3d:69:62:b0:39:91:2d:57:ef:d9:
         e9:b9:60:77:28:2d:99:34:b4:01:ea:fa:02:6b:9a:19:14:2b:
         d6:c6:5f:5b:0e:e3:cb:1e:ff:ec:04:28:64:3a:15:58:ac:f8:
         a2:b2:e5:56:44:2b:a1:d4:47:00:f9:7b:8f:8d:99:3b:ea:dc:
         e7:39:db:20:cd:97:f5:42:ed:15:44:e9:2d:f0:81:78:14:9d:
         d8:a8:a5:d7:6f:09:c1:fc:a1:19:e0:2e:54:44:7b:4c:e4:d5:
         7b:69:00:59:6f:db:f4:47:2a:31:47:a6:60:57:f3:b1:88:23:
         0f:eb:94:d7
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfcZKY6ZGZRUzU8OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRiYWFlMzUtNzA2Ny00MjNlLThkN2EtYWU3ZWE2Mzg3
NzdkMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
ZThlNmVhODgtODJmYy00NmNhLTkyYTgtMjU1NmFkY2JiNjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsnP6BvmSUZNq/0D6zAtFkkkmEjzLXH+bKEK
eOMniai4ut1kvmBjRlTbduDTdLzd8HtALowAGp99xavO1Zw5ZRYBgzm/4u4ZAYUd
VMMeWKPtqFcPPS6YkjaBs0tatvZDPPvlq2HiOK6cvKEwNf4Al/I1hWvXMSqHVh1a
PJRqFLDkL8zBKrdi6aMwMezndvLJpfnyQgtGM09FhDB7UzV6W+l6AGuXnPnxfgGQ
YCOORdvTOzqGWGZ4JBv6dUk8HpOhadtmZ3+Io5LQFWFcGGcVemfgpmwesnqHxCHv
+sbqPLaD1PwaWNQVYk1Mxxu6qwV44bsts0+BPoylxo4OfnkcBQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFeDqEMuhA0fz9c0kkTrTvLwYfJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZGJh
YWUzNS03MDY3LTQyM2UtOGQ3YS1hZTdlYTYzODc3N2QvN2VmNzUyZjItOGVjNy0z
NzhmLTlmMjktZmQ1MzJhOGFhODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmRiYWFlMzUtNzA2Ny00MjNlLThk
N2EtYWU3ZWE2Mzg3NzdkL2ZkYmFhZTM1LTcwNjctNDIzZS04ZDdhLWFlN2VhNjM4
Nzc3ZC5jcmwwHwYDVR0jBBgwFoAUn9Sdzz8mN+nKIhpRBa4Y9snGwv8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZGJhYWUzNS03MDY3LTQyM2UtOGQ3YS1hZTdl
YTYzODc3N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASlDuAwQA
SlDwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIJXow1FxfFOQm1tGOTFnAD8Ii4Xr7bEyLy2IinaJ1Ienhg8
8E/m/pTXuvA8Aoi1CnEVQD62y6jqWE6nPdAwqmw4hkxMgJz9/ea/v5JKNIz4Enru
LLxi7jOxWKXl06F9LDjOslJSnUxNYsd5LJSquTvwGFu/G0fKKzAc33oDB+LaANbk
Hpb7PWlisDmRLVfv2em5YHcoLZk0tAHq+gJrmhkUK9bGX1sO48se/+wEKGQ6FVis
+KKy5VZEK6HURwD5e4+NmTvq3Oc52yDNl/VC7RVE6S3wgXgUndiopddvCcH8oRng
LlREe0zk1XtpAFlv2/RHKjFHpmBX87GIIw/rlNc=
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:19 2024 by rpki-client on console-fra.rpki-client.org