Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa
File:                     3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa (raw, json)
Hash identifier:          sLsuk786ICzlQwaa88PvjDKFI404JzZS79jokJCjW2o=
Subject key identifier:   11:6D:A5:7B:AF:DD:D3:0D:B2:7A:F7:AF:71:C9:71:72:FE:90:E7:FC
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285849C904F363D266ADAC59813740
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     5511
IP address blocks:        74.91.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f3:63:d2:66:ad:ac:59:81:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=dec8c879-1279-4651-8e0d-4a69ae3b6c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:79:53:10:45:47:3f:a2:ce:d1:2b:41:86:
                    5b:75:63:a9:94:f9:68:53:c3:99:fe:db:ba:fc:b1:
                    7d:e1:5e:25:8e:e4:61:9c:93:78:a0:a3:1b:ca:d5:
                    ca:bd:07:3d:57:9d:11:82:62:3f:2e:8f:a9:41:74:
                    da:75:91:c6:3b:ae:0f:4f:19:f0:66:a7:9c:6a:ec:
                    87:91:d0:8f:7c:38:86:59:35:01:d2:a3:68:fc:ba:
                    c5:a9:71:14:2d:5f:f1:46:83:8b:e7:38:68:07:b2:
                    6f:c9:9b:15:d8:7a:38:24:b3:5f:51:69:cb:7c:71:
                    92:7d:ff:0c:fe:42:01:28:a5:40:d1:9b:8b:12:8f:
                    b2:7d:6a:0d:0f:82:9b:76:ae:f9:8f:19:da:de:c0:
                    22:37:03:49:be:46:68:c6:a6:e0:99:e2:30:d0:df:
                    b8:6e:24:68:1c:7a:0f:33:41:33:64:19:2a:2d:ca:
                    08:db:3f:63:ec:32:f1:08:c0:09:4d:af:4e:5a:54:
                    0d:2f:0a:ff:74:ac:4f:aa:ec:50:71:e5:09:8c:e1:
                    cc:4e:d5:9b:d6:e1:91:97:d5:0d:a8:dc:7c:56:f8:
                    22:7c:15:ff:0f:fb:71:34:7f:87:e9:2a:bd:a7:b6:
                    6c:82:bb:e1:31:c4:65:ae:9f:d2:b4:86:88:a5:3c:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6D:A5:7B:AF:DD:D3:0D:B2:7A:F7:AF:71:C9:71:72:FE:90:E7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:5f:95:8c:03:8a:73:42:4c:db:56:a0:f0:66:6f:fc:b3:
         f0:72:13:82:94:89:19:e7:0e:f5:6c:bb:54:17:26:5d:37:66:
         01:e7:e2:83:25:c9:7b:ba:c2:21:20:67:8d:18:75:5d:c0:b7:
         5c:b1:a2:24:6b:ce:33:1d:87:b1:b1:59:b0:c9:11:4a:52:c5:
         1c:22:05:16:bb:1c:54:16:1e:57:b9:0e:40:65:8a:af:c6:a3:
         ba:13:2d:b0:c7:c4:6f:59:ef:a5:b5:4c:c1:3f:50:cd:87:6c:
         22:0b:ae:d6:65:4c:a6:35:ea:eb:ab:a7:1b:43:5d:da:32:18:
         eb:ab:22:1c:38:11:e1:ca:b5:3f:5a:0e:1f:5e:a4:17:af:89:
         b5:7e:16:5f:7e:92:e2:ae:67:09:a4:ed:a0:79:bf:8a:ce:c1:
         0e:c9:82:b9:1f:f1:6c:1c:5a:27:3e:e7:24:ef:fc:f1:85:0f:
         6f:23:4f:44:2c:53:45:63:4a:fc:a3:7c:72:15:bb:ba:8c:53:
         3e:89:ab:02:a7:d3:d3:6f:58:36:d5:09:73:56:ed:d3:55:30:
         52:d5:47:7c:4c:82:6b:7a:cf:5f:1a:3c:45:80:70:05:cf:a4:
         16:fb:1c:28:54:a6:c2:b3:65:5d:2d:da:51:76:92:47:cc:e8:
         6f:92:b5:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPNj0matrFmBN0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1
OTFmMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZGVjOGM4NzktMTI3OS00NjUxLThlMGQtNGE2OWFlM2I2YzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQZ5UxBFRz+iztErQYZbdWOplPloU8OZ/tu6
/LF94V4ljuRhnJN4oKMbytXKvQc9V50RgmI/Lo+pQXTadZHGO64PTxnwZqecauyH
kdCPfDiGWTUB0qNo/LrFqXEULV/xRoOL5zhoB7JvyZsV2Ho4JLNfUWnLfHGSff8M
/kIBKKVA0ZuLEo+yfWoND4Kbdq75jxna3sAiNwNJvkZoxqbgmeIw0N+4biRoHHoP
M0EzZBkqLcoI2z9j7DLxCMAJTa9OWlQNLwr/dKxPquxQceUJjOHMTtWb1uGRl9UN
qNx8VvgifBX/D/txNH+H6Sq9p7ZsgrvhMcRlrp/StIaIpTzAjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFtpXuv3dMNsnr3r3HJcXL+kOf8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5
OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvM2YxNWFjYjItNWRlYS0z
YWU5LThlN2ItOWE2OGQ5Y2I2MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi
Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2
NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj
NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlsyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7EX5WMA4pzQkzbVqDwZm/8s/ByE4KUiRnnDvVsu1QXJl03ZgHn4oMl
yXu6wiEgZ40YdV3At1yxoiRrzjMdh7GxWbDJEUpSxRwiBRa7HFQWHle5DkBliq/G
o7oTLbDHxG9Z76W1TME/UM2HbCILrtZlTKY16uurpxtDXdoyGOurIhw4EeHKtT9a
Dh9epBevibV+Fl9+kuKuZwmk7aB5v4rOwQ7Jgrkf8WwcWic+5yTv/PGFD28jT0Qs
U0VjSvyjfHIVu7qMUz6JqwKn09NvWDbVCXNW7dNVMFLVR3xMgmt6z18aPEWAcAXP
pBb7HChUpsKzZV0t2lF2kkfM6G+StfA=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:30:16 2025 by rpki-client