Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9d2a57f2-fb34-3d50-a90b-a50b66883c00.roa
File:                     9d2a57f2-fb34-3d50-a90b-a50b66883c00.roa (raw, json)
Hash identifier:          3mrY5xuGHfvQpJNHzSrVirqZOQYL0TXQhX86a8bPhLk=
Subject key identifier:   90:AB:10:57:4C:11:F2:5B:A8:7B:6E:33:BD:28:D8:52:CC:03:DD:BB
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285844C4EFB3E50CAB72D4690E75C8
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9d2a57f2-fb34-3d50-a90b-a50b66883c00.roa
Signing time:             Sat 03 Feb 2024 14:00:30 +0000
ROA not before:           Sat 03 Feb 2024 14:00:30 +0000
ROA not after:            Fri 03 May 2024 13:00:30 +0000
asID:                     64200
IP address blocks:        74.80.174.0/24 maxlen: 24
                          74.80.175.0/24 maxlen: 24
                          74.80.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c4:ef:b3:e5:0c:ab:72:d4:69:0e:75:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Feb  3 14:00:30 2024 GMT
            Not After : May  3 13:00:30 2024 GMT
        Subject: CN=0770fc86-bf07-4df8-b658-3f756a17fe44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:7c:f1:76:43:05:22:eb:19:55:f1:e0:1b:
                    bf:27:97:cf:40:8e:20:86:f1:ee:ef:03:10:ed:ad:
                    e0:68:0d:a2:9e:88:32:cc:35:1c:17:37:b3:f4:48:
                    8c:66:de:06:a2:75:eb:74:d2:33:7e:81:40:7a:77:
                    60:88:a1:16:dc:17:9f:b3:e1:cd:12:ef:3c:38:65:
                    1e:4b:02:4f:4a:d8:73:9f:fc:67:7e:fe:8a:12:0d:
                    a4:a0:48:94:4f:4b:94:45:57:0e:3f:ad:77:77:b7:
                    61:a4:fb:fe:f7:b5:07:cb:ec:51:98:e3:db:4d:24:
                    11:fc:be:22:b4:54:01:09:51:7b:6e:c6:e1:07:8a:
                    22:99:12:45:69:68:f7:8a:7d:0e:0d:18:c5:4f:00:
                    b2:6a:93:a7:ce:1a:6e:50:ce:70:8b:bf:82:81:b4:
                    1f:41:8a:a9:90:44:a5:3f:f9:5c:29:e4:e6:bd:44:
                    28:05:b6:05:e0:75:54:c6:0a:ad:67:cc:ce:61:83:
                    0d:6e:d9:b5:d0:08:c9:28:0f:d2:d8:ef:d8:f6:c6:
                    39:21:0c:d1:1f:4b:0d:9e:53:74:bc:ab:09:de:18:
                    8a:9a:02:f9:e3:8f:a7:39:dc:0a:2b:bb:da:0a:9e:
                    a3:44:5d:0c:9a:02:6c:46:70:d3:1b:b7:1f:2b:1d:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AB:10:57:4C:11:F2:5B:A8:7B:6E:33:BD:28:D8:52:CC:03:DD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9d2a57f2-fb34-3d50-a90b-a50b66883c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.174.0/23
                  74.80.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:45:21:2c:05:44:4c:55:d0:e3:ed:d5:e1:25:2f:1a:dc:
         ea:6c:c5:ff:47:91:90:0e:7c:82:9e:83:2a:18:49:82:35:f5:
         f8:3d:82:cc:33:7d:39:b2:8e:9a:52:64:65:12:9e:df:ca:3e:
         ba:7f:dc:83:fe:05:39:ce:df:78:eb:a0:c5:d5:74:1d:cd:6d:
         4a:3e:21:5c:c5:a8:b3:bf:ae:6d:7a:10:7e:52:2e:37:ee:b1:
         90:e3:51:38:eb:3e:af:01:39:89:ce:05:d2:97:ed:73:02:f0:
         27:d9:af:ca:03:1c:26:18:0e:73:d4:a8:71:27:df:08:31:d2:
         c1:38:4c:a7:e0:d2:cc:df:53:f1:05:ec:7c:33:92:8c:2a:9a:
         30:b5:eb:8a:85:84:08:ad:fd:ec:7d:fe:cb:f4:e5:44:2c:33:
         0f:cc:fe:a1:01:aa:5a:a7:5d:b7:4d:d9:80:75:2a:66:8c:7f:
         37:5f:d8:b6:85:9f:ff:4c:95:35:d8:c0:c5:52:34:7c:41:a4:
         41:1f:9d:86:dd:5b:82:f8:68:54:0a:85:92:83:7d:f1:c4:f8:
         27:1f:95:9d:55:a6:7f:9a:39:1a:25:a0:b7:42:e2:18:99:24:
         5d:50:bd:17:aa:92:1d:55:20:93:cb:c5:b4:16:f3:e1:03:94:
         6b:85:93:73
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWETE77PlDKty1GkOdcgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI0MDIwMzE0MDAzMFoXDTI0MDUwMzEzMDAzMFowLzEtMCsGA1UEAxMk
MDc3MGZjODYtYmYwNy00ZGY4LWI2NTgtM2Y3NTZhMTdmZTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb588XZDBSLrGVXx4Bu/J5fPQI4ghvHu7wMQ
7a3gaA2inogyzDUcFzez9EiMZt4GonXrdNIzfoFAendgiKEW3Befs+HNEu88OGUe
SwJPSthzn/xnfv6KEg2koEiUT0uURVcOP613d7dhpPv+97UHy+xRmOPbTSQR/L4i
tFQBCVF7bsbhB4oimRJFaWj3in0ODRjFTwCyapOnzhpuUM5wi7+CgbQfQYqpkESl
P/lcKeTmvUQoBbYF4HVUxgqtZ8zOYYMNbtm10AjJKA/S2O/Y9sY5IQzRH0sNnlN0
vKsJ3hiKmgL544+nOdwKK7vaCp6jRF0MmgJsRnDTG7cfKx0DzwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJCrEFdMEfJbqHtuM70o2FLMA927MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvOWQyYTU3ZjItZmIzNC0z
ZDUwLWE5MGItYTUwYjY2ODgzYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBSlCuAwQA
SlC5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJD2RSEsBURMVdDj7dXhJS8a3Opsxf9HkZAOfIKegyoYSYI1
9fg9gswzfTmyjppSZGUSnt/KPrp/3IP+BTnO33jroMXVdB3NbUo+IVzFqLO/rm16
EH5SLjfusZDjUTjrPq8BOYnOBdKX7XMC8CfZr8oDHCYYDnPUqHEn3wgx0sE4TKfg
0szfU/EF7HwzkowqmjC164qFhAit/ex9/sv05UQsMw/M/qEBqlqnXbdN2YB1KmaM
fzdf2LaFn/9MlTXYwMVSNHxBpEEfnYbdW4L4aFQKhZKDffHE+CcflZ1Vpn+aORol
oLdC4hiZJF1QvReqkh1VIJPLxbQW8+EDlGuFk3M=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:54:46 2024 by rpki-client on console-fra.rpki-client.org