Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9b59f84-177b-3476-bc84-1aa55015232c.roa
File:                     b9b59f84-177b-3476-bc84-1aa55015232c.roa (raw, json)
Hash identifier:          aTN6e4dI7YqwBltg0KPhdIvlPHicaPmP1+Vpb4kqe4M=
Subject key identifier:   28:D0:B3:8C:BF:44:CB:1B:46:14:41:97:74:B2:12:96:81:8B:6C:AA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285845CE090479331D36EA904B5080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9b59f84-177b-3476-bc84-1aa55015232c.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     397230
IP address blocks:        204.74.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:04:79:33:1d:36:ea:90:4b:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=bb21ab42-3559-46c6-872b-238ea4cb423b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ec:57:be:51:4d:cc:fd:ec:99:af:13:bb:ce:
                    b7:f2:3b:a0:e6:6f:5f:40:d0:ea:eb:3f:c2:fc:87:
                    a4:c1:3e:0f:ba:00:54:d3:69:29:05:8f:ab:a2:66:
                    78:64:5b:9f:a3:ba:b0:59:98:d7:a0:d2:6d:72:4b:
                    b3:3a:24:3e:86:ea:35:0e:b1:71:76:bd:28:5a:35:
                    35:c2:d5:6e:27:71:8a:7d:46:a2:03:7a:bd:73:7e:
                    82:e9:94:ba:24:eb:0a:3d:22:ac:3c:11:a0:43:a8:
                    3a:6d:30:09:10:63:d3:03:dd:27:9d:60:db:ad:51:
                    03:df:db:55:78:76:5a:97:91:4f:9e:a0:6c:ad:52:
                    05:dd:58:7b:c9:07:be:2c:41:ae:db:7e:41:a6:32:
                    b6:0e:49:e6:cb:00:77:b2:a2:f5:5b:b6:46:be:f8:
                    99:d6:21:ac:f1:ff:73:2d:62:c2:a2:57:5d:b6:df:
                    41:8c:6d:23:07:65:8f:6a:d9:19:75:53:f2:8c:cb:
                    41:ba:e1:c9:e2:db:2e:5d:5a:2a:db:03:5a:b1:83:
                    e8:c6:bc:2d:eb:ab:0f:84:35:af:4e:fd:9d:90:9a:
                    c8:4d:c3:dd:fa:79:ef:77:37:82:36:38:2c:1e:88:
                    c1:d8:99:99:c0:fb:42:d9:33:08:58:05:b9:fb:d7:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:B3:8C:BF:44:CB:1B:46:14:41:97:74:B2:12:96:81:8B:6C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9b59f84-177b-3476-bc84-1aa55015232c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:38:41:09:4e:4b:1d:98:f7:19:82:cf:39:c9:cb:d6:5b:2f:
         d7:df:07:70:c9:f3:3d:fc:a6:f2:9c:28:12:f1:b9:fe:3a:63:
         46:9c:6f:a2:b5:1e:3b:db:d5:37:9f:55:d3:83:33:4d:b5:1b:
         a6:3b:b6:89:b6:52:e6:e4:8b:62:ee:1c:fb:77:56:f1:5c:6a:
         16:6f:4c:6e:9f:21:bf:86:cf:e4:9f:3f:77:26:7c:81:2b:27:
         17:74:3a:a6:3a:cb:b1:09:b7:1a:b5:f0:7f:c8:08:f0:64:c3:
         2c:48:56:b0:48:90:f8:dd:ec:4b:71:c6:26:ba:23:9a:a3:e8:
         bd:93:be:e3:ab:ba:8b:c3:d5:38:ec:92:62:1a:df:c6:08:01:
         5b:f9:3b:58:5c:6d:5e:b9:80:fa:9f:bc:0e:22:29:ef:ea:80:
         16:6e:96:08:34:1f:f0:32:68:e4:d0:0d:39:dc:cf:08:74:be:
         2d:b6:b9:b4:de:b3:d6:23:63:15:e5:37:11:e6:ed:e5:65:d3:
         56:a5:06:f1:41:4f:91:55:18:22:5b:d0:64:b8:15:a2:e1:00:
         d5:a5:29:50:b7:8f:ec:9b:d2:a2:28:ff:4c:47:03:ba:42:ae:
         e2:bd:2e:ec:e3:a5:81:93:14:b1:27:dc:fd:34:88:7e:33:16:
         1c:96:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:08 2024 by rpki-client on console-fra.rpki-client.org