Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa
File:                     4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa (raw, json)
Hash identifier:          sCx+dFttfGERYYKVpbFwqjKrxDfmbtT9/r/ghB1gX1o=
Subject key identifier:   80:A2:FC:D1:2C:BC:AB:CA:D9:3C:47:B9:E0:11:08:34:DB:44:CB:C9
Certificate issuer:       /CN=07f3d583-55b0-4da4-96a4-c23530389673
Certificate serial:       010D0C9F43285847B3CC0EA841B03B35BBAC7E00
Authority key identifier: 2A:6F:A2:89:FD:2D:05:D9:D9:58:7C:A4:5B:D6:74:5C:11:F0:6D:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     400527
IP address blocks:        199.74.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/07f3d583-55b0-4da4-96a4-c23530389673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/07f3d583-55b0-4da4-96a4-c23530389673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0e:a8:41:b0:3b:35:bb:ac:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f3d583-55b0-4da4-96a4-c23530389673
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=547e94f2-7d5c-4b99-af08-41b7f1925e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:9c:bd:92:cc:26:4e:9c:4a:19:5a:3f:01:
                    9d:e4:d3:02:ae:a7:93:a6:88:8e:5e:76:14:a2:66:
                    fd:11:0b:5d:79:da:03:8e:b5:f2:26:b8:19:d2:8c:
                    c2:12:32:5e:d7:ba:9f:78:94:88:11:8a:47:86:ac:
                    54:f3:40:cd:81:63:d6:c3:8b:72:5b:4e:1f:3f:87:
                    02:fb:1e:46:78:24:a9:7d:a2:ba:1d:8d:c5:c8:ca:
                    c9:39:79:3c:dc:57:14:27:3b:ac:e3:f1:60:e0:3a:
                    30:f4:81:ba:4e:27:95:73:82:42:76:71:f4:b6:a8:
                    f8:5e:e4:82:29:8e:03:fe:f4:3f:e2:32:3e:05:c6:
                    76:f8:14:2e:14:7c:47:bb:42:93:0f:31:ce:63:36:
                    79:b4:57:3d:d1:48:33:d9:b3:cc:72:3e:6c:ad:87:
                    79:4a:41:6a:70:2b:6b:0c:c5:ef:ad:7e:49:35:af:
                    4d:7b:36:96:62:1e:d4:ec:44:db:d0:a7:1c:b9:44:
                    73:82:fc:12:86:62:59:cf:ba:70:04:2c:9a:27:54:
                    76:44:c7:66:f0:6e:64:fa:24:02:7f:08:e6:34:6d:
                    ae:a7:4d:69:aa:bd:b6:2b:89:23:8c:4a:12:3a:1f:
                    6c:64:c5:3c:8f:46:ad:d8:00:4b:9e:73:cc:c0:b7:
                    3f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A2:FC:D1:2C:BC:AB:CA:D9:3C:47:B9:E0:11:08:34:DB:44:CB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/07f3d583-55b0-4da4-96a4-c23530389673.crl

            X509v3 Authority Key Identifier:
                keyid:2A:6F:A2:89:FD:2D:05:D9:D9:58:7C:A4:5B:D6:74:5C:11:F0:6D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:3f:aa:ba:a9:b8:06:28:1e:2b:f9:26:18:b7:2f:aa:3e:
         b7:bc:32:e7:d5:c2:33:ca:74:66:fe:84:3b:d7:6b:ed:33:a1:
         9a:ee:f2:5b:6e:a3:ab:d2:b0:27:6a:8b:e5:50:c0:b4:e1:a7:
         3e:60:ff:69:14:b1:07:2b:b1:fc:84:84:f7:8f:6d:30:2f:35:
         95:9b:69:65:14:77:62:19:54:e3:15:0a:48:8d:4d:1b:b3:af:
         7e:7a:66:ed:60:5b:52:fe:fd:44:79:2e:af:dc:6b:12:58:e5:
         77:58:c1:41:c4:00:36:89:46:2d:e5:07:9e:c7:0d:dc:ef:e0:
         39:17:8b:52:85:ff:7d:b1:35:23:f4:d5:b9:f5:46:3f:cb:8b:
         b1:c1:7b:e2:2b:4c:13:f5:5b:23:35:8f:7f:63:12:c9:3b:e4:
         c5:f8:82:73:27:ac:7b:05:78:6c:91:1f:fa:1c:77:c5:e6:5e:
         58:06:c7:02:75:8e:2b:2f:3b:eb:56:25:db:1a:06:c1:cf:fc:
         a7:dd:5c:20:c3:87:67:18:75:08:39:24:bc:66:92:8f:9b:a8:
         d1:e5:c8:6a:39:3d:9f:83:65:6a:f4:16:1b:c5:55:48:a5:93:
         c8:9f:02:b0:a7:2d:67:2d:49:c8:23:82:f4:1a:68:58:2e:af:
         25:9f:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:55 2024 by rpki-client on console-ams.rpki-client.org