Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa
File:                     e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa (raw, json)
Hash identifier:          3n0p+aM88w66x4uENo2ep4P43B416PoJgcF6MFA8ekM=
Subject key identifier:   31:14:8F:34:6B:99:E4:DE:30:E1:1D:43:FD:E3:9A:6C:20:7D:45:6C
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F43285849C904DDB991BFB40738E9F940
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     19210
IP address blocks:        74.116.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:dd:b9:91:bf:b4:07:38:e9:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=0703093f-1f8a-4d0e-ba02-048adb67bdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:39:32:f1:1e:0a:9f:f0:e2:35:45:a1:ec:
                    f9:65:95:a4:77:7c:53:79:b4:76:b9:e9:25:a2:6d:
                    ab:96:15:11:cb:bc:c2:c3:77:d4:d1:dd:99:c5:d5:
                    67:53:01:bb:e8:95:81:06:3d:98:4d:e4:c6:7c:fe:
                    cb:af:91:57:01:ef:03:bc:1b:4a:af:ba:13:6c:f1:
                    7a:8b:52:a4:72:ca:bb:83:79:ea:14:78:44:ad:24:
                    e9:b9:f0:8e:2e:c3:85:4d:af:83:06:06:7c:f3:d5:
                    b6:8a:43:17:83:19:5a:1a:4b:5d:ac:04:2c:29:56:
                    10:ce:f3:3c:90:c6:3d:54:3c:77:36:9c:28:93:e1:
                    52:53:cb:35:3c:ef:5e:12:2b:70:f2:20:ba:34:c5:
                    5a:23:d4:52:76:5c:01:a2:d8:4e:76:65:98:98:09:
                    3f:ce:9a:59:62:06:0a:3d:bc:fa:5a:bb:9a:3a:43:
                    ba:5c:88:dc:09:b3:95:7e:6c:94:bd:4e:bb:0e:5b:
                    9e:48:5b:e1:9d:cf:e7:4c:02:12:70:99:86:3d:f9:
                    3e:52:c3:d4:0b:9c:5b:0f:c1:ed:cd:5d:a5:37:bf:
                    e6:91:02:57:f6:e9:e9:7f:e8:e0:20:67:7a:1d:4a:
                    28:72:78:c5:47:89:cc:b5:a3:13:5b:f9:6f:32:a8:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:14:8F:34:6B:99:E4:DE:30:E1:1D:43:FD:E3:9A:6C:20:7D:45:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:c6:11:7c:30:8c:61:3b:77:3d:69:12:6c:b2:8b:14:25:
         28:d0:b1:33:68:b1:99:d8:cc:40:db:1e:13:82:b9:67:ea:ef:
         51:cc:d5:d9:14:8b:d3:57:18:cd:f0:f5:b4:ab:f6:8c:dc:64:
         d8:20:f1:9e:86:eb:1b:ef:f6:51:ca:59:99:cd:90:9d:5a:7e:
         91:28:c8:fd:1e:0f:6b:bb:4a:13:f5:de:c8:8e:4a:fd:71:4f:
         a5:0f:c1:5e:2c:a2:a4:6c:e1:76:a4:fe:e6:1c:ed:ad:6a:12:
         37:ca:3d:ad:79:66:dc:99:28:f5:32:98:c9:be:5d:fe:c5:71:
         99:5c:72:92:ea:2f:13:e9:f1:9c:c9:31:de:74:05:44:e8:01:
         18:95:e5:78:1d:a5:f9:ed:fc:7c:a8:0c:d2:36:42:db:8c:86:
         2e:fc:eb:88:59:59:1a:a8:a8:14:2a:63:d7:a6:e9:a0:92:b6:
         7a:95:6b:29:be:22:b9:16:17:68:74:f9:02:33:b2:a2:e3:a8:
         77:8d:d9:13:34:ac:84:87:54:9b:29:2d:10:c6:e5:f6:0c:47:
         17:36:84:fb:9f:a7:66:d6:40:52:6e:fd:17:f3:a2:70:76:f6:
         bf:1a:aa:61:9a:bc:2a:91:5d:8a:f8:af:55:8b:80:28:2c:96:
         b5:11:16:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN25kb+0Bzjp+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi
NDJkMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
MDcwMzA5M2YtMWY4YS00ZDBlLWJhMDItMDQ4YWRiNjdiZGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzo5MvEeCp/w4jVFoez5ZZWkd3xTebR2uekl
om2rlhURy7zCw3fU0d2ZxdVnUwG76JWBBj2YTeTGfP7Lr5FXAe8DvBtKr7oTbPF6
i1Kkcsq7g3nqFHhErSTpufCOLsOFTa+DBgZ889W2ikMXgxlaGktdrAQsKVYQzvM8
kMY9VDx3Npwok+FSU8s1PO9eEitw8iC6NMVaI9RSdlwBothOdmWYmAk/zppZYgYK
Pbz6WruaOkO6XIjcCbOVfmyUvU67DlueSFvhnc/nTAIScJmGPfk+UsPUC5xbD8Ht
zV2lN7/mkQJX9unpf+jgIGd6HUoocnjFR4nMtaMTW/lvMqg9VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDEUjzRrmeTeMOEdQ/3jmmwgfUVsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh
MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvZTFhN2JlNGEtNWM3NS0z
Y2ZlLWE0ZjMtYWUwMWU5MTEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5
MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx
YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4
MWE1MWI0MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnRpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJd6xhF8MIxhO3c9aRJssosUJSjQsTNosZnYzEDbHhOCuWfq71HM1dkU
i9NXGM3w9bSr9ozcZNgg8Z6G6xvv9lHKWZnNkJ1afpEoyP0eD2u7ShP13siOSv1x
T6UPwV4soqRs4Xak/uYc7a1qEjfKPa15ZtyZKPUymMm+Xf7FcZlccpLqLxPp8ZzJ
Md50BUToARiV5Xgdpfnt/HyoDNI2QtuMhi7864hZWRqoqBQqY9em6aCStnqVaym+
IrkWF2h0+QIzsqLjqHeN2RM0rISHVJspLRDG5fYMRxc2hPufp2bWQFJu/RfzonB2
9r8aqmGavCqRXYr4r1WLgCgslrURFqo=
-----END CERTIFICATE-----
Generated at Sun May 11 08:34:28 2025 by rpki-client