Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa
File:                     ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa (raw, json)
Hash identifier:          mlZts4EQmnfHeX0Mr3ipMHOpUFgPXkx5WXlfF7diAUU=
Subject key identifier:   F9:AD:22:79:11:9C:10:DC:2E:27:D8:DE:0F:C7:47:64:F0:4D:EE:21
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F06E8C8CEC26A73DDDDCC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa
Signing time:             Fri 29 Mar 2024 18:41:47 +0000
ROA not before:           Fri 29 Mar 2024 18:41:47 +0000
ROA not after:            Thu 27 Jun 2024 18:41:47 +0000
asID:                     396982
IP address blocks:        74.125.66.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:e8:c8:ce:c2:6a:73:dd:dd:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:41:47 2024 GMT
            Not After : Jun 27 18:41:47 2024 GMT
        Subject: CN=833dfe97-ce86-4cc0-af4c-978dee31d0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:73:89:7f:8e:c7:e9:2f:78:3e:61:4c:37:
                    06:e5:f4:71:2a:be:00:c6:e4:5a:35:f7:b8:c9:d8:
                    bb:b4:33:4a:8a:37:56:ec:cf:de:76:02:90:36:90:
                    9f:63:5f:03:9e:f3:96:95:b9:77:2b:05:1a:ab:73:
                    f1:00:63:96:e7:d9:23:77:2a:9c:81:ba:bb:02:db:
                    09:99:4d:8b:8f:6b:68:d6:a7:e6:11:a0:da:9b:7a:
                    e8:ed:aa:ef:15:2c:73:d6:91:1f:42:74:89:44:2b:
                    b3:a1:dc:e5:76:e6:8e:32:6c:02:e0:a6:3d:ed:14:
                    df:14:c7:39:ce:58:d1:12:08:7d:0d:93:df:38:d2:
                    1a:81:14:1c:76:63:65:e3:f7:94:24:82:44:38:80:
                    bf:08:67:d5:ff:a5:48:32:b8:e4:26:23:57:bb:cd:
                    f7:2f:73:80:23:8e:3a:0b:d6:47:db:f3:cb:6c:e2:
                    ef:e9:a0:0e:51:d9:a4:88:26:d2:da:b3:ef:ee:55:
                    da:ba:03:57:27:ad:8d:1f:d3:04:dc:de:c7:99:b3:
                    cd:d7:c1:2f:36:78:74:52:c4:24:84:36:75:db:81:
                    2c:46:8d:c9:77:20:2c:c6:04:ac:fd:05:6f:d4:c2:
                    70:e8:3b:78:cf:6e:46:18:46:d3:9e:1f:a9:a0:2d:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:22:79:11:9C:10:DC:2E:27:D8:DE:0F:C7:47:64:F0:4D:EE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.66.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:06:44:11:c9:90:81:ac:45:8e:b8:c7:9d:37:48:82:c2:
         09:e4:02:db:97:f4:5e:26:67:03:b2:2d:bc:a1:9a:45:d1:5f:
         60:40:b5:e3:3d:17:c9:a1:c1:1b:7c:93:a5:31:87:b9:e6:f6:
         da:4b:78:8e:10:83:a4:c2:e6:9c:e7:6d:c9:5c:0e:81:78:3f:
         72:58:69:fd:f5:82:9c:dd:48:be:32:02:d7:47:89:ce:fa:55:
         2e:21:47:97:84:81:61:a6:3f:41:78:18:88:98:6e:0e:08:37:
         c3:85:bb:78:fd:fa:45:1e:9c:55:5b:29:5d:fa:e3:ce:78:31:
         c9:31:d8:b8:cf:7f:03:60:3d:c2:5c:57:6d:51:75:d3:0a:b4:
         fd:32:3d:24:2b:e9:6f:f0:cd:1f:a7:a7:e9:1c:16:45:05:52:
         e1:09:0d:c7:d6:ac:f7:2b:55:eb:1e:00:39:b6:49:6e:3d:63:
         fb:09:b8:b0:ec:d1:42:a8:de:2e:e5:a2:72:4a:11:0d:8d:86:
         6b:8c:bb:ac:12:62:54:b6:64:36:6f:c3:8e:d9:27:d3:bc:0f:
         15:e5:db:af:02:b0:a6:db:62:41:6d:3c:fd:db:21:bf:27:fc:
         98:66:9e:14:86:e4:dc:59:78:de:ff:ef:82:c2:15:67:d3:de:
         7f:da:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:50:34 2024 by rpki-client on console-fra.rpki-client.org