Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/5b9816c5-4685-3cb0-861f-06591d45656d.roa
File:                     5b9816c5-4685-3cb0-861f-06591d45656d.roa (raw, json)
Hash identifier:          QQODAFimmbAz4Q6hHFkqfXbRNAh6T816Bv769scB87I=
Subject key identifier:   5D:66:57:D8:BF:90:88:E9:E0:EB:BE:92:E6:56:90:7C:68:AA:87:A2
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F43285847DC64AA0B3DB8D8BE11C14380
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/5b9816c5-4685-3cb0-861f-06591d45656d.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     398296
IP address blocks:        74.114.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:aa:0b:3d:b8:d8:be:11:c1:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=23de4c8c-9ffa-4a1c-ac0a-121b7361e753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:58:24:63:a8:18:18:c8:94:af:6f:60:2d:f0:
                    49:47:0f:09:32:4e:cd:0d:23:f0:39:1f:62:6b:1a:
                    4a:76:82:40:d9:22:06:b6:8e:ca:9f:f2:55:66:01:
                    17:f5:ff:51:c8:dc:65:c0:7d:23:a9:f9:12:75:5a:
                    83:c5:3f:01:e0:ab:66:ba:99:3d:e7:99:0a:f7:54:
                    d6:91:ed:cf:02:fd:4f:c3:6b:fa:38:0c:72:69:6b:
                    ce:08:f1:24:9e:4e:08:0b:ce:11:c4:f1:ef:80:89:
                    a8:28:07:33:54:d1:62:b2:55:a3:07:32:98:5e:6e:
                    85:44:1b:45:7e:8a:a5:fb:2c:82:b9:f2:0f:cb:8e:
                    de:99:52:69:e0:4c:a5:fa:04:d7:33:6a:4b:8a:f2:
                    ee:99:18:56:ef:e5:13:26:78:6f:be:61:70:b6:03:
                    fb:53:d6:51:26:f9:7b:8f:64:a4:11:ae:ec:73:b2:
                    de:63:aa:88:d8:0e:ec:dd:08:59:5f:71:1d:02:69:
                    77:bf:38:0d:f5:c8:61:98:38:dc:41:b1:26:c4:52:
                    d8:d1:e1:e3:e3:97:ea:47:fd:59:57:33:20:f5:0c:
                    16:3e:cc:2c:e4:86:57:b2:db:87:9a:c5:96:08:56:
                    43:51:d8:86:d3:fc:2c:04:05:00:02:b1:05:06:4b:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:66:57:D8:BF:90:88:E9:E0:EB:BE:92:E6:56:90:7C:68:AA:87:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/5b9816c5-4685-3cb0-861f-06591d45656d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f4:53:36:70:04:49:58:4d:71:f9:b1:c1:1d:39:c4:50:60:
         0a:a5:dc:db:f6:6f:3f:d5:0d:b8:df:d0:30:0e:44:cf:06:34:
         5c:ff:bd:61:86:06:bc:86:f8:1d:fa:ca:b4:a7:1c:96:4f:f3:
         96:54:bd:17:87:4b:de:13:de:db:d7:7f:79:32:f5:be:3f:43:
         80:69:b6:b8:c2:c1:ec:54:c5:1f:d8:fa:5b:94:92:41:aa:23:
         76:3e:9a:bb:4e:ae:44:90:d4:3d:9c:12:ed:02:72:5a:77:c5:
         41:2d:21:ec:3d:ea:80:77:3c:1a:06:49:55:83:c7:58:21:62:
         ba:53:58:29:f9:d0:28:c0:ce:f6:c3:c7:f5:83:2a:30:cc:9c:
         eb:2c:63:1c:d6:c3:35:02:31:30:87:c8:07:49:52:ed:ba:b8:
         7f:5f:cb:08:19:63:4c:7b:26:41:aa:9b:f2:a7:89:c9:a1:14:
         2c:71:36:14:62:b4:8b:9d:93:75:e1:cb:de:a7:23:d5:f6:2d:
         c8:7a:eb:91:6c:15:17:48:e9:38:32:46:02:5a:71:85:ee:51:
         83:19:7a:b2:a2:ee:fb:9f:5a:96:2c:be:35:26:df:6c:7d:7b:
         ed:77:ff:92:b2:17:d5:63:88:71:d4:03:84:c7:a9:88:c4:34:
         74:b0:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org