Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/5948276d-b6df-3abc-ab40-a3788ddd5ac3.roa
File:                     5948276d-b6df-3abc-ab40-a3788ddd5ac3.roa (raw, json)
Hash identifier:          AuJvvogbn6MOPmAd5UxWXekoMPgJV4DouKF67+W7TE8=
Subject key identifier:   A0:69:DD:24:38:02:1C:A4:E0:68:C8:AA:41:38:8B:76:B2:1E:DC:99
Certificate issuer:       /CN=122205c9-95b1-4c68-a830-5ad63089c7d5
Certificate serial:       010D0C9F43285849C904EE95CF40F994CCB60280
Authority key identifier: 37:DA:89:13:D8:D8:B8:74:25:85:15:39:14:2D:AC:35:CD:B7:4C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/5948276d-b6df-3abc-ab40-a3788ddd5ac3.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     18938
IP address blocks:        74.119.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ee:95:cf:40:f9:94:cc:b6:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122205c9-95b1-4c68-a830-5ad63089c7d5
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=7019ed46-e994-4f52-a28d-160888565aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:6d:2f:93:6c:ad:3e:21:16:3b:5f:a3:74:
                    7c:eb:7f:8b:29:be:b0:ab:c8:41:b0:09:90:0f:b3:
                    89:c0:a1:ed:90:32:ac:34:d1:83:0c:07:75:b5:9b:
                    76:9d:9a:06:b6:22:09:3d:31:45:5e:6f:ee:6a:f0:
                    21:9a:c7:af:f2:24:13:81:f7:66:61:9f:47:a7:1b:
                    a8:2f:40:fe:fd:6a:1e:ee:b7:2c:13:73:00:50:e5:
                    fc:35:b2:d7:44:65:70:90:f4:bd:33:1d:32:89:1d:
                    9d:d1:de:37:6c:da:db:f8:ee:13:1e:fa:4d:40:21:
                    ef:eb:dd:76:4b:17:9a:7a:6e:bf:67:6f:af:22:c7:
                    a4:97:21:69:6a:3f:57:dc:f5:b6:9f:64:d1:8f:de:
                    41:66:0b:48:57:a8:b5:56:a4:fe:b7:a9:8c:08:28:
                    a6:1a:88:53:7b:f4:07:35:b3:ab:78:a4:7a:b4:94:
                    5e:1b:8c:cd:df:8d:d0:89:15:6b:3a:8b:28:3f:e1:
                    07:46:3c:55:d9:bb:33:4b:a8:b7:8a:f0:5e:ce:58:
                    7a:b2:dd:15:55:58:73:d3:e4:e0:5e:9f:4e:66:8c:
                    07:71:68:3e:31:65:e5:d9:e6:16:e0:eb:f6:ba:03:
                    44:e0:94:f2:5e:90:61:1f:a8:31:1f:b0:18:26:ab:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:69:DD:24:38:02:1C:A4:E0:68:C8:AA:41:38:8B:76:B2:1E:DC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/5948276d-b6df-3abc-ab40-a3788ddd5ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.crl

            X509v3 Authority Key Identifier:
                keyid:37:DA:89:13:D8:D8:B8:74:25:85:15:39:14:2D:AC:35:CD:B7:4C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:86:cd:e8:68:8b:c9:10:ff:eb:f3:a9:5d:67:c3:85:3c:21:
         34:36:8a:81:b2:9b:1d:84:3c:52:ab:cb:26:0d:de:de:1c:13:
         de:ca:17:c0:db:86:59:d2:56:92:6a:df:0f:8e:20:4e:1c:31:
         f8:a6:1c:78:b1:8e:63:f1:85:9b:43:7d:d6:d2:64:b5:5a:ce:
         09:7b:91:24:27:da:5a:c9:71:b4:2d:dd:26:13:03:2f:7f:4c:
         d6:27:3a:97:07:7a:4d:ae:d8:e8:b7:e0:f8:38:a6:ea:14:0b:
         f6:e0:af:78:53:8b:99:47:b1:88:d5:e9:a2:7e:c0:97:42:0a:
         91:9c:e0:da:f5:cb:61:a5:55:3b:40:2e:4b:bf:3d:71:09:a5:
         14:4a:b6:03:35:82:0e:bf:67:50:55:e2:23:c8:c2:ed:41:2f:
         0c:72:cb:f5:d5:d7:4c:d4:1d:c2:ee:14:ae:d7:8e:23:ec:b7:
         eb:a9:28:a0:55:ab:c4:30:31:d3:79:e6:a3:f9:10:9d:6f:63:
         85:0b:2c:b1:79:73:6f:52:4b:69:b3:b3:7d:d5:12:ee:22:de:
         71:cc:f1:f4:aa:fe:3d:be:31:63:1a:5a:bb:10:b3:22:c3:ba:
         ea:20:bb:b4:22:90:5e:c6:99:67:a0:7d:84:93:79:43:97:83:
         5f:ee:d1:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBO6Vz0D5lMy2AoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIyMjA1YzktOTViMS00YzY4LWE4MzAtNWFkNjMwODlj
N2Q1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
NzAxOWVkNDYtZTk5NC00ZjUyLWEyOGQtMTYwODg4NTY1YWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5RtL5NsrT4hFjtfo3R863+LKb6wq8hBsAmQ
D7OJwKHtkDKsNNGDDAd1tZt2nZoGtiIJPTFFXm/uavAhmsev8iQTgfdmYZ9Hpxuo
L0D+/Woe7rcsE3MAUOX8NbLXRGVwkPS9Mx0yiR2d0d43bNrb+O4THvpNQCHv6912
Sxeaem6/Z2+vIseklyFpaj9X3PW2n2TRj95BZgtIV6i1VqT+t6mMCCimGohTe/QH
NbOreKR6tJReG4zN343QiRVrOosoP+EHRjxV2bszS6i3ivBezlh6st0VVVhz0+Tg
Xp9OZowHcWg+MWXl2eYW4Ov2ugNE4JTyXpBhH6gxH7AYJqsm8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBp3SQ4Ahyk4GjIqkE4i3ayHtyZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMjIy
MDVjOS05NWIxLTRjNjgtYTgzMC01YWQ2MzA4OWM3ZDUvNTk0ODI3NmQtYjZkZi0z
YWJjLWFiNDAtYTM3ODhkZGQ1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTIyMjA1YzktOTViMS00YzY4LWE4
MzAtNWFkNjMwODljN2Q1LzEyMjIwNWM5LTk1YjEtNGM2OC1hODMwLTVhZDYzMDg5
YzdkNS5jcmwwHwYDVR0jBBgwFoAUN9qJE9jYuHQlhRU5FC2sNc23TLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMjIyMDVjOS05NWIxLTRjNjgtYTgzMC01YWQ2
MzA4OWM3ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeGzehoi8kQ/+vzqV1nw4U8ITQ2ioGymx2EPFKryyYN3t4cE97KF8Db
hlnSVpJq3w+OIE4cMfimHHixjmPxhZtDfdbSZLVazgl7kSQn2lrJcbQt3SYTAy9/
TNYnOpcHek2u2Oi34Pg4puoUC/bgr3hTi5lHsYjV6aJ+wJdCCpGc4Nr1y2GlVTtA
Lku/PXEJpRRKtgM1gg6/Z1BV4iPIwu1BLwxyy/XV10zUHcLuFK7XjiPst+upKKBV
q8QwMdN55qP5EJ1vY4ULLLF5c29SS2mzs33VEu4i3nHM8fSq/j2+MWMaWrsQsyLD
uuogu7QikF7GmWegfYSTeUOXg1/u0RY=
-----END CERTIFICATE-----
Generated at Sat May 10 10:22:52 2025 by rpki-client