Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa
File:                     14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa (raw, json)
Hash identifier:          kmyG0usJDVxa8LT4bWw8sw6HmMUjEeAH6jU7TLY0j74=
Subject key identifier:   91:D4:C6:71:0F:6B:7C:8F:B9:1B:29:40:58:0F:72:07:1B:F4:40:54
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F43285845C8739A9CD5EA6865BE8C9B00
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     6142
IP address blocks:        74.85.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:9a:9c:d5:ea:68:65:be:8c:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=c19fd7cd-70f6-4f39-a6e3-c76178879228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:61:36:6f:d1:83:86:8e:50:c9:3c:0f:20:
                    55:5f:74:65:fa:a2:e0:73:e8:ac:1f:17:cd:6c:8e:
                    5e:66:db:ee:72:ea:be:96:39:64:04:39:2e:8c:48:
                    0d:53:ae:11:0a:74:26:f1:c2:91:1a:b7:3b:f2:17:
                    2e:a7:32:44:7f:4a:26:5c:73:3e:06:8c:9d:7d:d2:
                    cc:d6:41:b8:9e:4e:6c:8c:cd:fc:80:cb:e8:80:7d:
                    07:67:cd:3f:68:da:64:dd:3d:95:58:0a:7b:5e:86:
                    a0:e0:63:e4:4d:e7:71:1f:7b:a7:6d:a7:a5:d8:b2:
                    e2:ea:70:ad:6d:0b:36:30:78:5b:6a:72:ad:40:c1:
                    eb:bb:db:e1:f1:9b:31:58:cb:98:eb:54:85:66:7e:
                    3c:c4:72:aa:ad:4f:39:3d:bc:db:c3:50:17:98:4e:
                    56:9d:66:f6:93:11:84:f1:c9:88:5b:f0:cf:d7:37:
                    c6:11:d9:6e:0f:ea:9c:63:0c:0e:ab:0c:0f:c2:5d:
                    89:4e:06:80:2b:95:72:7c:b8:b1:bd:e7:5b:91:9b:
                    73:de:3e:97:15:fc:ef:60:40:28:45:f6:c3:ff:43:
                    47:6b:d1:dd:96:f7:67:e0:b9:55:79:ac:6e:4d:08:
                    ae:0b:7f:0c:b1:eb:ef:4c:70:c0:b0:59:ce:ed:2c:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D4:C6:71:0F:6B:7C:8F:B9:1B:29:40:58:0F:72:07:1B:F4:40:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:45:25:d0:62:e0:33:8e:70:ba:6f:97:2e:63:25:71:02:51:
         fc:c8:38:5d:e1:cb:d6:a6:03:6f:50:40:5c:35:0f:cd:a3:63:
         8a:eb:8f:ca:82:cc:96:35:1b:37:43:fd:f0:37:48:dc:77:a0:
         af:e4:fe:80:f0:87:4d:1a:93:73:00:de:c0:fb:91:8e:a5:4d:
         ff:16:5e:5d:75:48:10:cd:1c:aa:6f:e5:4e:78:92:2d:4b:57:
         4c:c6:84:fb:86:21:bc:6c:49:23:ec:ac:46:b6:2a:d3:8c:24:
         9e:3a:04:f7:0f:4d:8d:1c:16:b2:5e:7e:a2:3e:2b:f0:28:81:
         24:04:64:68:cf:31:e5:fa:3e:af:a8:46:51:aa:d4:7f:07:b7:
         cd:bc:31:78:b1:82:7d:14:ac:ac:75:11:2c:12:72:33:47:13:
         14:84:82:f0:19:51:16:f8:00:e3:71:ee:7d:7a:8c:3e:36:0f:
         21:6b:fc:93:c0:9e:e2:e8:d4:dc:bb:4d:9f:81:11:0d:ca:24:
         d7:de:86:4a:07:ee:d7:84:53:2b:cf:cb:70:9e:0a:d0:13:5c:
         11:28:5d:66:e1:21:9b:32:67:b0:80:d0:3c:4d:52:19:ee:de:
         25:b0:5c:34:c2:06:b6:4e:51:1e:4c:30:ff:d4:03:fc:9f:70:
         f3:12:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:15 2024 by rpki-client on console-fra.rpki-client.org