Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/781d2adc-ebee-371e-8249-56ae1b6e8e99.roa
File:                     781d2adc-ebee-371e-8249-56ae1b6e8e99.roa (raw, json)
Hash identifier:          +hFlgXWyK9+RNMSi/13xhqLjuYfdTyR+sCY67zJS51U=
Subject key identifier:   DD:F2:0C:2C:B3:94:C7:32:56:27:DE:5E:DE:9D:7D:5D:18:36:73:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AC9C253B6750629BA4A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/781d2adc-ebee-371e-8249-56ae1b6e8e99.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        74.87.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:c9:c2:53:b6:75:06:29:ba:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=203d3638-72f9-4aa0-890d-6d4ed4be35be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:1e:e3:68:22:66:14:c5:07:92:c8:01:a7:
                    7a:3b:72:00:d3:a6:eb:b9:7b:e3:87:b2:4b:dc:9d:
                    30:cb:5a:82:cf:7f:96:63:1a:80:0c:f7:e0:7e:1a:
                    3f:3e:c1:28:f8:f6:d2:f5:c0:42:6c:34:8f:d7:82:
                    64:ed:9a:18:ac:26:04:2b:d7:cd:0f:50:7a:d3:0f:
                    43:5f:4d:d2:76:5d:26:02:c5:a9:9e:0a:39:a0:da:
                    2f:db:34:07:4a:a9:0a:94:93:09:e7:69:1e:db:61:
                    7b:9a:a6:99:29:22:eb:64:80:4e:ea:9e:7b:e0:f5:
                    cd:12:43:fa:e5:aa:5e:29:16:64:0f:fb:1f:4c:96:
                    77:0a:73:73:22:88:6b:cb:29:bb:1c:6b:fd:33:ad:
                    2e:b9:fe:11:65:f3:12:ac:e0:6e:32:18:69:48:2b:
                    8b:31:43:52:e7:24:d4:70:80:02:c5:e3:20:17:ed:
                    69:ac:16:87:a0:6f:08:89:c0:12:0b:f4:2a:a4:59:
                    e5:c7:30:43:c5:dc:bd:31:80:7c:58:4f:da:f5:41:
                    e5:bb:ae:86:77:96:9a:5c:89:8f:ea:a4:1b:3d:e0:
                    69:7b:a4:92:a1:bb:34:05:98:10:1d:db:da:0c:e2:
                    ec:4f:47:51:da:ec:55:fc:bb:a5:d2:bb:9d:f9:4d:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F2:0C:2C:B3:94:C7:32:56:27:DE:5E:DE:9D:7D:5D:18:36:73:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/781d2adc-ebee-371e-8249-56ae1b6e8e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:d5:12:d3:4c:fa:ce:15:9d:79:ae:32:8a:58:f2:af:6b:
         56:97:58:ab:37:8e:8f:81:03:3f:2f:37:65:4e:18:dd:0e:bc:
         55:73:6f:6c:b9:c0:8d:1b:ed:b2:cd:71:18:e5:96:70:76:65:
         7a:1c:73:b7:71:da:dc:49:df:4d:05:c9:c7:3a:cc:02:20:38:
         8f:73:a2:62:59:11:10:59:39:fe:c7:77:6d:02:66:53:83:e7:
         1f:71:82:2a:c7:2a:db:1b:45:44:33:a5:6c:cb:5d:90:db:b5:
         2e:4c:d0:90:9d:16:cd:d8:bd:3e:59:37:66:25:e9:80:c8:e9:
         92:0d:11:d3:e5:45:41:72:80:ee:fb:1c:84:c5:5d:00:1a:cd:
         3b:67:8e:dd:f6:2e:fb:17:2a:89:58:4d:e1:34:99:85:f9:04:
         c2:9f:2d:e0:75:40:8c:e3:8b:62:ba:dd:72:03:eb:e5:93:72:
         41:95:5e:e9:c5:4c:d3:fe:0a:90:b0:3b:6e:a2:1b:de:4d:c5:
         66:fe:3c:c1:fd:fe:b6:62:d3:fc:60:53:90:2f:41:c6:7a:c7:
         a2:f6:5a:07:6e:a7:4e:ed:07:48:e3:11:08:01:2d:6e:b7:27:
         3d:aa:0d:ce:91:5f:1a:b8:4a:a6:cb:ff:d5:f4:47:59:9b:e3:
         f2:4b:2e:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCsnCU7Z1Bim6SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MjAzZDM2MzgtNzJmOS00YWEwLTg5MGQtNmQ0ZWQ0YmUzNWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bse42giZhTFB5LIAad6O3IA06bruXvjh7JL
3J0wy1qCz3+WYxqADPfgfho/PsEo+PbS9cBCbDSP14Jk7ZoYrCYEK9fND1B60w9D
X03Sdl0mAsWpngo5oNov2zQHSqkKlJMJ52ke22F7mqaZKSLrZIBO6p574PXNEkP6
5apeKRZkD/sfTJZ3CnNzIohryym7HGv9M60uuf4RZfMSrOBuMhhpSCuLMUNS5yTU
cIACxeMgF+1prBaHoG8IicASC/QqpFnlxzBDxdy9MYB8WE/a9UHlu66Gd5aaXImP
6qQbPeBpe6SSobs0BZgQHdvaDOLsT0dR2uxV/Lul0rud+U1ovQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3yDCyzlMcyVifeXt6dfV0YNnMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNzgxZDJhZGMtZWJlZS0z
NzFlLTgyNDktNTZhZTFiNmU4ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlf3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFs31RLTTPrOFZ15rjKKWPKva1aXWKs3jo+BAz8vN2VOGN0OvFVzb2y5
wI0b7bLNcRjllnB2ZXocc7dx2txJ300Fycc6zAIgOI9zomJZERBZOf7Hd20CZlOD
5x9xgirHKtsbRUQzpWzLXZDbtS5M0JCdFs3YvT5ZN2Yl6YDI6ZINEdPlRUFygO77
HITFXQAazTtnjt32LvsXKolYTeE0mYX5BMKfLeB1QIzji2K63XID6+WTckGVXunF
TNP+CpCwO26iG95NxWb+PMH9/rZi0/xgU5AvQcZ6x6L2Wgdup07tB0jjEQgBLW63
Jz2qDc6RXxq4SqbL/9X0R1mb4/JLLpw=
-----END CERTIFICATE-----
Generated at Sun May 11 13:48:07 2025 by rpki-client