Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
File:                     2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa (raw, json)
Hash identifier:          ERBUKiDzOhxi1pbKgAE4erHTQMXDjYQ8q6hjQpda7Gs=
Subject key identifier:   71:E4:3E:C3:19:82:AC:4A:A3:03:F3:10:6B:A8:A2:58:8D:50:43:5F
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285849D42FAEB10C4832CFD1D69100
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     8560
IP address blocks:        74.208.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ae:b1:0c:48:32:cf:d1:d6:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=48a3f99c-c7f6-40bd-a367-7637ab38f27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:f3:3d:7f:1a:32:20:d3:b0:3e:25:a2:97:
                    93:2b:bc:b9:7b:7f:95:50:47:45:75:85:ad:89:45:
                    3a:60:80:81:26:2d:bd:a9:b5:4a:5b:59:89:1f:6d:
                    99:ef:ae:09:3f:a6:2c:a0:c1:57:95:6b:1f:dc:1a:
                    b5:3a:83:80:06:01:3b:15:cd:98:f9:86:80:92:8c:
                    d5:9f:16:58:70:e6:8f:f9:87:49:27:fe:c9:39:e8:
                    8d:9a:66:f6:ff:66:cd:2c:20:f7:de:51:0a:5a:be:
                    28:00:f7:24:43:0d:37:bd:8c:f4:23:67:3b:18:d2:
                    23:58:df:14:bf:12:14:0b:af:77:b1:a3:b3:01:a4:
                    97:a6:61:1f:b3:f3:74:bc:36:c9:93:02:9c:0c:22:
                    b6:fa:7d:85:2b:11:f1:0b:96:f6:e5:de:eb:48:34:
                    62:31:67:9d:d2:e4:a7:dd:64:80:9f:56:0c:1f:40:
                    ba:31:5b:31:43:d4:bb:af:71:ba:cd:17:de:11:3d:
                    7f:0f:5d:ed:b5:75:13:9f:d8:84:92:d8:a6:30:e2:
                    43:76:7d:88:7c:ed:ab:a1:dd:d1:7f:1f:ed:d0:5e:
                    04:4c:bf:20:4c:fb:86:e6:3d:f6:58:0a:ef:c0:74:
                    e4:7f:c2:ac:bb:71:aa:7b:04:c9:ab:67:dd:b4:53:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:3E:C3:19:82:AC:4A:A3:03:F3:10:6B:A8:A2:58:8D:50:43:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:9d:5b:1c:cf:7a:b1:80:0c:de:d6:f6:61:52:78:2c:55:0e:
         e7:fc:5e:bb:fb:3b:6c:0f:37:52:18:01:2c:ab:f8:b8:f4:07:
         b7:26:ee:49:5c:d7:9e:98:35:16:e0:9a:3b:84:fb:4b:38:66:
         04:8d:c6:aa:60:6f:a9:f5:6d:71:4b:1e:30:ef:a0:ef:19:24:
         44:f8:65:ea:c2:cb:6d:8c:5d:c2:7d:c2:23:98:8e:af:84:35:
         8c:73:10:c4:cc:32:57:93:10:0a:45:44:3e:23:6b:11:52:c3:
         81:2d:6d:3a:82:67:14:7a:0b:4a:70:4c:24:35:1b:ce:31:fd:
         f5:1a:2e:e6:2b:2b:c7:95:f2:7d:bb:19:2d:48:dc:b2:70:16:
         a8:d4:5f:8c:80:61:59:f0:47:e5:76:4d:9a:5a:8e:aa:d0:0b:
         68:12:ac:4e:de:11:49:8f:e9:ba:09:bb:5d:6d:6a:80:ad:9a:
         0e:e8:04:06:a7:60:5c:b6:7e:d0:b2:2b:88:96:a2:0a:d6:a8:
         bd:a5:94:6e:ec:fa:bc:90:c1:60:ea:59:f6:eb:92:56:04:f8:
         15:80:f5:52:69:d7:b5:70:b9:db:56:93:cc:53:b0:59:c6:ed:
         49:5c:fa:52:0b:58:d7:ef:b5:cf:d4:11:9d:11:6d:2a:fa:a0:
         35:71:b3:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnUL66xDEgyz9HWkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NDhhM2Y5OWMtYzdmNi00MGJkLWEzNjctNzYzN2FiMzhmMjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXjzPX8aMiDTsD4lopeTK7y5e3+VUEdFdYWt
iUU6YICBJi29qbVKW1mJH22Z764JP6YsoMFXlWsf3Bq1OoOABgE7Fc2Y+YaAkozV
nxZYcOaP+YdJJ/7JOeiNmmb2/2bNLCD33lEKWr4oAPckQw03vYz0I2c7GNIjWN8U
vxIUC693saOzAaSXpmEfs/N0vDbJkwKcDCK2+n2FKxHxC5b25d7rSDRiMWed0uSn
3WSAn1YMH0C6MVsxQ9S7r3G6zRfeET1/D13ttXUTn9iEktimMOJDdn2IfO2rod3R
fx/t0F4ETL8gTPuG5j32WArvwHTkf8Ksu3GqewTJq2fdtFPXGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHHkPsMZgqxKowPzEGuooliNUENfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvMmEwMjUyM2YtNDNmYy0z
ZjRiLTk0ZmItMWU3Y2Y5MWRiNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAStAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA1Z1bHM96sYAM3tb2YVJ4LFUO5/xeu/s7bA83UhgBLKv4uPQHtybuSVzX
npg1FuCaO4T7SzhmBI3GqmBvqfVtcUseMO+g7xkkRPhl6sLLbYxdwn3CI5iOr4Q1
jHMQxMwyV5MQCkVEPiNrEVLDgS1tOoJnFHoLSnBMJDUbzjH99Rou5isrx5XyfbsZ
LUjcsnAWqNRfjIBhWfBH5XZNmlqOqtALaBKsTt4RSY/pugm7XW1qgK2aDugEBqdg
XLZ+0LIriJaiCtaovaWUbuz6vJDBYOpZ9uuSVgT4FYD1UmnXtXC521aTzFOwWcbt
SVz6UgtY1++1z9QRnRFtKvqgNXGzaA==
-----END CERTIFICATE-----
Generated at Wed May 14 12:23:30 2025 by rpki-client