Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/f6a420de-a079-3b79-bc8f-823946b97fc6.roa
File:                     f6a420de-a079-3b79-bc8f-823946b97fc6.roa (raw, json)
Hash identifier:          L793TyW+WyKq7agDEeQVVYy7uPXflZfH3da3lmEcmlQ=
Subject key identifier:   1D:1E:C0:39:D4:EA:30:5D:32:B3:3F:AE:B9:5B:4B:9D:72:29:7F:A9
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F432858477660F8B5816BEADD4CEF3700
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/f6a420de-a079-3b79-bc8f-823946b97fc6.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     46450
IP address blocks:        74.80.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:f8:b5:81:6b:ea:dd:4c:ef:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=abe49e81-f511-40b3-a5d1-6678a30a196e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:fe:51:3d:d6:dd:43:69:30:f0:df:6d:72:
                    ec:3a:57:3c:b5:52:f9:b8:1e:62:bb:ac:91:87:80:
                    ae:30:00:c1:cb:9e:51:e6:2b:b8:c2:16:00:02:2e:
                    94:cf:af:33:71:b6:e6:ab:12:0e:64:ab:8e:46:58:
                    49:ef:f1:49:92:46:f7:1d:f4:bd:db:09:3a:03:31:
                    46:c9:ce:82:42:4c:40:80:5e:62:37:45:3d:82:bf:
                    72:db:70:5a:0e:0b:54:c2:45:c6:3b:84:56:6d:d9:
                    de:56:56:a1:8e:bb:21:25:07:31:b8:a4:b2:33:8d:
                    ca:0f:3c:a2:ca:9b:0c:8b:83:b1:95:95:31:f9:fa:
                    3a:44:00:ad:24:1d:be:c9:74:a2:73:38:16:df:42:
                    36:c8:b6:0a:59:f6:77:e7:63:4d:6f:d2:05:1c:ee:
                    b0:05:27:76:e3:1a:71:f5:3c:2d:91:d1:20:43:22:
                    f6:4f:ef:bb:65:0e:cb:4b:ec:b8:15:3a:82:e2:20:
                    06:00:3f:78:7b:4e:3c:04:22:c1:26:ce:8c:01:1e:
                    10:9d:cc:aa:b0:3e:7b:9b:58:0d:22:bf:71:f3:26:
                    7b:f6:f8:b6:ec:45:bc:2f:5a:00:1b:85:d9:f4:7f:
                    b6:01:08:09:c3:6f:a8:98:ab:49:ea:87:35:47:60:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1E:C0:39:D4:EA:30:5D:32:B3:3F:AE:B9:5B:4B:9D:72:29:7F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/f6a420de-a079-3b79-bc8f-823946b97fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:c7:06:c0:a4:fa:c1:2d:69:e6:53:8d:d6:b4:0b:74:62:
         2d:7e:e1:70:da:d1:9b:f6:d3:a8:53:34:86:2d:0e:b1:37:42:
         7e:5b:b4:e9:be:db:12:f2:b0:8f:8d:da:c5:91:39:40:70:52:
         1c:cf:2d:e7:e2:e4:c6:29:0b:96:57:30:4c:92:f9:a3:5c:03:
         99:66:98:6f:db:b8:ce:60:48:61:98:73:80:72:3b:e4:dc:15:
         75:6d:b9:73:b8:52:6d:0f:55:fa:48:75:cd:2f:bb:cb:1e:9f:
         19:05:d9:32:72:62:92:70:94:60:f3:26:2d:c4:cd:db:96:a3:
         c8:6b:e2:37:81:88:97:9b:f0:69:9f:7f:6a:9b:05:bc:18:3e:
         fa:1a:3d:24:30:80:03:af:ec:7e:e0:5d:a8:d1:44:9a:f8:3e:
         99:f8:a0:3a:c5:01:1e:fd:35:98:3d:f7:d6:9f:56:f4:bc:28:
         7e:31:83:09:40:88:0b:c8:c4:0a:fe:de:09:e5:fe:d6:59:a1:
         62:51:b6:23:5d:84:f1:34:0a:17:b9:4a:b8:d2:88:5d:fe:9d:
         7e:f8:89:81:2a:fa:02:bd:61:78:63:98:e9:01:0b:22:5c:51:
         84:b1:a8:9b:bc:d1:bf:91:7b:c6:6b:9f:de:09:74:e4:1b:7e:
         e3:09:be:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YPi1gWvq3UzvNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5
ZGMyMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
YWJlNDllODEtZjUxMS00MGIzLWE1ZDEtNjY3OGEzMGExOTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/+UT3W3UNpMPDfbXLsOlc8tVL5uB5iu6yR
h4CuMADBy55R5iu4whYAAi6Uz68zcbbmqxIOZKuORlhJ7/FJkkb3HfS92wk6AzFG
yc6CQkxAgF5iN0U9gr9y23BaDgtUwkXGO4RWbdneVlahjrshJQcxuKSyM43KDzyi
ypsMi4OxlZUx+fo6RACtJB2+yXSiczgW30I2yLYKWfZ352NNb9IFHO6wBSd24xpx
9TwtkdEgQyL2T++7ZQ7LS+y4FTqC4iAGAD94e048BCLBJs6MAR4QncyqsD57m1gN
Ir9x8yZ79vi27EW8L1oAG4XZ9H+2AQgJw2+omKtJ6oc1R2CqiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0ewDnU6jBdMrM/rrlbS51yKX+pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw
MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvZjZhNDIwZGUtYTA3OS0z
Yjc5LWJjOGYtODIzOTQ2Yjk3ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3
YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0
OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh
ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlDoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsZxwbApPrBLWnmU43WtAt0Yi1+4XDa0Zv206hTNIYtDrE3Qn5btOm+
2xLysI+N2sWROUBwUhzPLefi5MYpC5ZXMEyS+aNcA5lmmG/buM5gSGGYc4ByO+Tc
FXVtuXO4Um0PVfpIdc0vu8senxkF2TJyYpJwlGDzJi3EzduWo8hr4jeBiJeb8Gmf
f2qbBbwYPvoaPSQwgAOv7H7gXajRRJr4Ppn4oDrFAR79NZg999afVvS8KH4xgwlA
iAvIxAr+3gnl/tZZoWJRtiNdhPE0Che5SrjSiF3+nX74iYEq+gK9YXhjmOkBCyJc
UYSxqJu80b+Re8Zrn94JdOQbfuMJvjo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:42 2024 by rpki-client on console-fra.rpki-client.org