Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa
File:                     47d3484f-4726-3190-8c44-831e3dafc9f7.roa (raw, json)
Hash identifier:          TC/lW+vzSkBVLqIUMesilyRYi5keilIBckVWKkk5Q5w=
Subject key identifier:   1D:40:C4:CF:87:91:C2:BD:CF:B7:FE:D1:97:1A:B6:B1:84:CA:91:23
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F432858495EEEDE66752FEAE8C1EBAE40
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     6233
IP address blocks:        74.211.120.0/22 maxlen: 22
                          74.211.124.0/22 maxlen: 22
                          98.142.132.0/22 maxlen: 22
                          150.242.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:de:66:75:2f:ea:e8:c1:eb:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=da88b8df-b2c9-4a4c-93f0-58241d53dab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:11:1a:c3:83:bf:7e:f2:70:40:73:12:53:
                    d2:da:85:2f:6a:82:d1:25:93:0e:21:87:8f:6b:a9:
                    ef:34:eb:dc:a9:32:b1:2f:00:87:f8:0e:85:f3:70:
                    a0:58:2b:86:57:44:c7:d5:95:1b:3c:c4:46:cf:b9:
                    ec:e2:53:81:f3:f5:83:60:58:f5:b2:d6:f9:de:06:
                    64:77:20:ab:cd:24:cc:4a:5e:ad:7d:43:94:ec:a7:
                    74:53:ae:68:e4:8e:d9:31:6f:d9:f8:e9:33:af:53:
                    9f:1c:92:5e:da:32:de:e0:50:4f:63:fd:41:8d:e7:
                    40:76:f6:25:b8:f5:67:a2:d7:ca:99:04:dc:45:3b:
                    38:b5:e7:5e:01:49:ee:83:2d:f0:9a:bf:be:55:9b:
                    6a:b0:f4:d9:ac:69:cd:01:49:7b:0b:0d:79:40:b8:
                    a0:98:c5:ad:e8:ad:88:a2:10:14:20:84:46:e0:da:
                    28:a8:2c:bf:e8:f0:bc:2e:5c:54:0f:79:82:21:4a:
                    6e:7a:ad:60:79:d2:64:1f:4b:e8:e5:73:49:91:66:
                    37:c1:45:1d:99:94:ba:99:a5:33:9e:09:a0:d5:d4:
                    7e:03:c4:ad:db:ef:36:57:63:72:6f:23:e2:98:dc:
                    40:c7:86:5f:9e:d9:c2:c2:b1:20:bd:7e:9b:24:b3:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:C4:CF:87:91:C2:BD:CF:B7:FE:D1:97:1A:B6:B1:84:CA:91:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.211.120.0/21
                  98.142.132.0/22
                  150.242.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:63:32:23:12:55:7d:c5:bf:d9:10:a9:41:dd:9f:79:fa:53:
         0b:0f:f3:ad:b6:29:8b:1a:1b:a1:5f:9e:7c:1e:94:c9:3d:51:
         f8:31:b2:d7:04:1f:07:74:77:da:af:3f:ff:25:35:f5:c2:7d:
         11:d0:80:10:0e:36:aa:5e:24:ce:89:bd:e8:64:de:b1:0b:18:
         88:32:c6:51:a4:56:d1:ce:80:22:f9:a0:f0:14:e0:1e:97:ba:
         61:89:10:48:e8:53:0f:18:9c:e1:a5:23:87:d0:47:73:43:9b:
         cb:ae:e4:c0:07:ff:2a:e7:89:b1:08:9a:57:53:ab:12:35:b3:
         7c:46:f4:f8:c1:23:19:79:b9:40:3e:99:4f:e3:54:27:25:e8:
         16:62:6e:71:7a:66:58:fa:87:58:f1:27:c7:78:ff:3a:93:fb:
         c8:95:b5:ae:f3:ce:6f:43:96:31:e7:16:b1:13:68:f3:2f:f9:
         33:47:d4:e8:85:62:c6:88:34:3e:57:aa:43:0f:8a:23:a7:ab:
         33:90:0b:d6:53:b6:03:41:81:43:da:7b:b8:e0:73:e3:f9:86:
         9d:7b:d6:dc:0a:99:b5:eb:3e:35:ab:29:fc:99:47:00:42:b1:
         68:d2:be:7b:f8:90:a3:a6:9f:25:c4:3d:cf:e1:75:eb:b2:46:
         59:35:58:92
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEle7t5mdS/q6MHrrkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IwMWIyOGEtNDM2ZC00MmRkLTg3NTAtNTM2MWYyMzA5
Mjk3MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
ZGE4OGI4ZGYtYjJjOS00YTRjLTkzZjAtNTgyNDFkNTNkYWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp0RGsODv37ycEBzElPS2oUvaoLRJZMOIYeP
a6nvNOvcqTKxLwCH+A6F83CgWCuGV0TH1ZUbPMRGz7ns4lOB8/WDYFj1stb53gZk
dyCrzSTMSl6tfUOU7Kd0U65o5I7ZMW/Z+Okzr1OfHJJe2jLe4FBPY/1BjedAdvYl
uPVnotfKmQTcRTs4tedeAUnugy3wmr++VZtqsPTZrGnNAUl7Cw15QLigmMWt6K2I
ohAUIIRG4NooqCy/6PC8LlxUD3mCIUpueq1gedJkH0vo5XNJkWY3wUUdmZS6maUz
ngmg1dR+A8St2+82V2NybyPimNxAx4ZfntnCwrEgvX6bJLNOuQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFB1AxM+HkcK9z7f+0ZcatrGEypEjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAx
YjI4YS00MzZkLTQyZGQtODc1MC01MzYxZjIzMDkyOTcvNDdkMzQ4NGYtNDcyNi0z
MTkwLThjNDQtODMxZTNkYWZjOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2IwMWIyOGEtNDM2ZC00MmRkLTg3
NTAtNTM2MWYyMzA5Mjk3L2NiMDFiMjhhLTQzNmQtNDJkZC04NzUwLTUzNjFmMjMw
OTI5Ny5jcmwwHwYDVR0jBBgwFoAUoD/XgfdrhiAFQLOw8V5XSYqIHsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAxYjI4YS00MzZkLTQyZGQtODc1MC01MzYx
ZjIzMDkyOTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDStN4AwQC
Yo6EAwQAlvJaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADBjMiMSVX3Fv9kQqUHdn3n6UwsP8622KYsaG6Ff
nnwelMk9UfgxstcEHwd0d9qvP/8lNfXCfRHQgBAONqpeJM6Jvehk3rELGIgyxlGk
VtHOgCL5oPAU4B6XumGJEEjoUw8YnOGlI4fQR3NDm8uu5MAH/yrnibEImldTqxI1
s3xG9PjBIxl5uUA+mU/jVCcl6BZibnF6Zlj6h1jxJ8d4/zqT+8iVta7zzm9DljHn
FrETaPMv+TNH1OiFYsaIND5XqkMPiiOnqzOQC9ZTtgNBgUPae7jgc+P5hp171twK
mbXrPjWrKfyZRwBCsWjSvnv4kKOmnyXEPc/hdeuyRlk1WJI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:04 2025 by rpki-client