Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa
File:                     6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa (raw, json)
Hash identifier:          nnTIHfWVh1NIdz5FuZzUXqFGp194dDGVIhxtS68kEG8=
Subject key identifier:   01:D3:ED:8A:46:63:09:20:09:18:C5:6B:72:27:92:81:F3:97:21:FE
Certificate issuer:       /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df
Certificate serial:       010D0C9F43285845B3836A55A097334155D78040
Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     19528
IP address blocks:        74.209.188.0/24 maxlen: 24
                          74.209.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6a:55:a0:97:33:41:55:d7:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=88529acc-222b-4662-b106-6ad0fba9844c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:e0:3f:6f:1c:1d:fb:65:64:5c:05:40:3e:
                    1e:f2:06:be:8e:da:4a:e0:c5:4a:e0:ce:4f:84:43:
                    fe:9e:0e:c1:2e:61:d4:44:89:58:f1:33:4c:96:b4:
                    30:be:53:c7:df:53:a2:c4:11:ea:02:b1:7f:69:f8:
                    bd:5f:ee:aa:de:82:d0:5c:f6:8c:86:f6:8f:71:7d:
                    50:ad:14:66:9e:99:5c:c8:c1:aa:fd:91:d0:de:32:
                    df:c5:d9:14:f0:05:6b:23:0d:c7:8b:50:f8:5f:3a:
                    bd:3e:84:c9:85:e7:1b:50:cb:c7:fe:3b:18:ea:ab:
                    b3:bd:71:21:6f:bd:e9:f0:30:f7:c4:f6:3b:0b:09:
                    86:12:1b:72:52:af:ad:ab:81:79:ff:bc:e8:4e:7b:
                    db:e1:de:7a:4e:71:b0:12:1b:77:53:1c:4d:31:a3:
                    7c:aa:ae:22:8b:d6:40:b0:dc:c6:c1:d1:ec:fc:59:
                    33:86:a2:22:f4:e8:6f:13:60:dc:f6:74:ae:65:b3:
                    57:9c:0a:4d:8d:66:91:bf:f9:7d:34:09:01:c9:8e:
                    0e:49:ab:42:01:63:ad:b5:86:4a:d7:29:1e:08:1a:
                    1e:13:3a:87:c4:5c:20:79:1d:92:97:08:d2:00:76:
                    8d:21:7a:fe:27:37:dd:cb:4e:1c:b0:53:ad:f6:d0:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D3:ED:8A:46:63:09:20:09:18:C5:6B:72:27:92:81:F3:97:21:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl

            X509v3 Authority Key Identifier:
                keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.184.0-74.209.188.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:a4:ac:3c:8f:e9:06:e1:4b:40:76:b8:05:dc:82:50:e3:19:
         f6:1e:ba:e0:c7:ad:fa:c8:a3:f9:58:d2:46:e8:77:d3:0e:ed:
         5d:3d:4b:fa:fe:1f:1d:4a:31:76:e4:07:c5:f7:2f:c6:b8:75:
         6e:13:44:dd:7d:f8:7a:97:08:4b:22:f9:4f:1f:b9:21:e3:cf:
         82:f8:a3:be:8d:7d:43:63:55:8e:61:79:54:cc:69:80:68:04:
         16:69:76:48:4c:69:58:09:32:bf:77:aa:7c:6b:9c:d8:f8:f4:
         b0:2c:25:b1:8d:57:5f:83:66:d1:60:d5:28:e1:50:91:87:60:
         a4:5a:b1:48:33:ed:b7:0f:2b:ac:f2:e3:dd:55:14:cc:02:a0:
         6e:05:a3:57:25:0d:21:b4:be:95:dd:87:55:3d:6e:6d:2d:63:
         08:26:d6:37:c5:47:b0:f9:71:8f:a3:aa:63:7d:1a:7f:4d:d5:
         9b:3a:86:d4:1d:f9:cf:da:b2:03:73:f1:04:19:7b:aa:57:f5:
         ef:16:b1:eb:3f:5c:b2:69:67:85:b1:d3:84:0a:ed:dc:0c:a2:
         2f:45:0e:a3:01:d1:b7:e0:8c:0a:e3:f4:69:39:2f:3d:62:9a:
         42:6f:9e:3f:af:a2:8a:85:bb:ea:c4:69:13:2e:5b:c4:45:9a:
         8d:95:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:09:11 2024 by rpki-client on console-ams.rpki-client.org