Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
File:                     7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa (raw, json)
Hash identifier:          1cEN0vFgRaJblkDPmhMkZd8Azvu1E38gJ37SFmd3Nl8=
Subject key identifier:   EB:B5:D1:8E:6C:56:B4:9D:B4:81:38:2A:73:16:A5:26:69:04:06:32
Certificate issuer:       /CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
Certificate serial:       010D0C9F43285848828099051690B22E93E38770
Authority key identifier: FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     40864
IP address blocks:        74.116.156.0/22 maxlen: 22
                          209.142.84.0/22 maxlen: 22
                          209.209.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:99:05:16:90:b2:2e:93:e3:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=787f15f3-d2a2-4517-a6b6-ae3f47ccb5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:39:d8:bf:31:98:8d:af:2b:04:27:27:e7:15:
                    e9:6a:bc:ee:a3:a7:59:b4:b5:dd:3b:2f:cb:98:c6:
                    e5:b1:ca:b3:9c:64:55:b4:00:0e:79:76:f2:13:68:
                    a4:d2:e4:d8:7b:d3:fe:00:33:99:13:6b:7b:cb:13:
                    9e:e5:6d:f4:be:25:0b:d5:87:ea:c9:0b:14:65:13:
                    9e:0c:76:80:ad:83:73:41:7b:f4:fb:8c:df:90:53:
                    89:f3:2b:2d:02:cb:21:0f:98:ee:a8:b7:63:d3:8a:
                    65:3a:14:2a:b6:66:ba:e9:9e:04:b7:de:8c:0a:26:
                    52:36:46:47:06:72:57:b9:fc:4c:18:c5:c2:00:8d:
                    2f:c5:a6:bf:5a:dc:9d:fb:e4:f1:1c:1f:b7:7d:e5:
                    4e:27:3b:04:1b:b1:51:a2:c8:32:75:12:77:67:1a:
                    5e:19:73:47:03:28:78:d3:73:df:0a:ae:47:f0:29:
                    1e:7f:d0:9b:7d:d5:5b:04:11:eb:21:13:15:cd:fd:
                    1d:9b:58:be:7e:55:63:03:b0:33:ba:3d:ab:35:eb:
                    8e:59:86:3f:60:ec:19:59:3d:1b:02:ca:5a:2d:5c:
                    79:f5:6b:94:89:ac:e5:b0:c1:b9:a7:b2:ee:98:7c:
                    68:72:7b:37:06:e4:36:d4:c1:ef:7d:89:07:16:f7:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B5:D1:8E:6C:56:B4:9D:B4:81:38:2A:73:16:A5:26:69:04:06:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl

            X509v3 Authority Key Identifier:
                keyid:FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.156.0/22
                  209.142.84.0/22
                  209.209.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:01:92:95:49:5d:1e:78:66:3b:fc:c5:8d:5d:10:59:75:
         3c:d3:f5:68:b6:ef:6a:a3:11:c6:d0:88:de:44:a8:6c:37:3b:
         ad:d8:fc:13:98:ad:4e:f6:5e:f1:1a:99:5f:c8:55:08:35:c7:
         f6:a3:4a:65:f3:42:63:9d:4c:69:48:4b:56:a0:80:04:3a:6e:
         11:e1:5d:ea:df:6c:13:0c:56:6c:10:bd:33:92:4d:91:c9:5c:
         12:59:fd:7f:2e:b4:94:38:f2:bc:9a:3e:1e:43:2f:9f:93:e0:
         86:22:bb:c0:a0:dd:18:1f:3e:ea:13:ab:a8:62:0e:59:93:c6:
         f4:95:5b:6a:9c:a7:97:5c:8a:f3:8c:0c:40:d8:35:f5:ee:ed:
         2b:30:cd:ec:2b:f7:41:40:62:34:0f:19:9c:fa:59:92:90:1e:
         bf:39:58:2b:d6:90:61:02:73:0e:7b:e6:f1:ef:5e:58:ac:ff:
         fd:13:8e:f9:2c:cb:7f:2c:66:0b:38:96:2d:2e:a6:09:a8:32:
         49:c7:76:a5:9c:bc:b1:74:e7:cb:62:33:3a:92:3c:39:d6:b9:
         cd:96:7b:0f:48:ce:2f:4e:49:35:d6:74:c9:db:bc:9f:ef:33:
         b6:12:d7:e9:77:81:dd:e6:a3:7e:c1:72:8a:a2:81:49:d2:30:
         28:a6:de:00
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEiCgJkFFpCyLpPjh3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJjNzE1MzEtZDJjMC00NzNjLWFkM2EtNjNmMWFmNWU2
OTgxMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Nzg3ZjE1ZjMtZDJhMi00NTE3LWE2YjYtYWUzZjQ3Y2NiNWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DnYvzGYja8rBCcn5xXparzuo6dZtLXdOy/L
mMblscqznGRVtAAOeXbyE2ik0uTYe9P+ADOZE2t7yxOe5W30viUL1YfqyQsUZROe
DHaArYNzQXv0+4zfkFOJ8ystAsshD5juqLdj04plOhQqtma66Z4Et96MCiZSNkZH
BnJXufxMGMXCAI0vxaa/Wtyd++TxHB+3feVOJzsEG7FRosgydRJ3ZxpeGXNHAyh4
03PfCq5H8Ckef9CbfdVbBBHrIRMVzf0dm1i+flVjA7Azuj2rNeuOWYY/YOwZWT0b
AspaLVx59WuUiazlsMG5p7LumHxocns3BuQ21MHvfYkHFvegpQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFOu10Y5sVrSdtIE4KnMWpSZpBAYyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmM3
MTUzMS1kMmMwLTQ3M2MtYWQzYS02M2YxYWY1ZTY5ODEvN2FhYjI2ODItMjdmNC0z
MWYwLTkyY2ItZTBlYzYxMzdlYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJjNzE1MzEtZDJjMC00NzNjLWFk
M2EtNjNmMWFmNWU2OTgxLzFiYzcxNTMxLWQyYzAtNDczYy1hZDNhLTYzZjFhZjVl
Njk4MS5jcmwwHwYDVR0jBBgwFoAU/WPAgEmW+XW3nSu8WnaU9wAE6GwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmM3MTUzMS1kMmMwLTQ3M2MtYWQzYS02M2Yx
YWY1ZTY5ODEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCSnScAwQC
0Y5UAwQC0dF0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAKD2AZKVSV0eeGY7/MWNXRBZdTzT9Wi272qjEcbQ
iN5EqGw3O63Y/BOYrU72XvEamV/IVQg1x/ajSmXzQmOdTGlIS1aggAQ6bhHhXerf
bBMMVmwQvTOSTZHJXBJZ/X8utJQ48ryaPh5DL5+T4IYiu8Cg3RgfPuoTq6hiDlmT
xvSVW2qcp5dcivOMDEDYNfXu7Sswzewr90FAYjQPGZz6WZKQHr85WCvWkGECcw57
5vHvXlis//0Tjvksy38sZgs4li0upgmoMknHdqWcvLF058tiMzqSPDnWuc2Wew9I
zi9OSTXWdMnbvJ/vM7YS1+l3gd3mo37BcoqigUnSMCim3gA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:22 2025 by rpki-client