Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/dfb1d344-6b07-3597-a546-a308b4db9f42.roa
File:                     dfb1d344-6b07-3597-a546-a308b4db9f42.roa (raw, json)
Hash identifier:          +2ihctDAsUeixXaakI1lZzomkbPyOTxLX5Fcf6KN7KA=
Subject key identifier:   2C:92:EF:20:B9:D0:88:EB:99:1D:D8:A9:F9:40:FE:D9:86:8F:0F:94
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F43285847A8A14E6C77C9781ACBB6BB40
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/dfb1d344-6b07-3597-a546-a308b4db9f42.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     394180
IP address blocks:        74.114.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:4e:6c:77:c9:78:1a:cb:b6:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=6ff2931e-b031-4b75-b8d1-3cb5b5ab1cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:5a:a2:51:8c:1c:d4:c7:d0:0b:4e:e8:ba:
                    fe:b1:3e:e5:32:d4:3f:c1:ed:c5:c4:ea:9a:32:25:
                    ae:d0:67:99:1c:d6:c7:52:30:8f:0b:bc:ec:2e:58:
                    80:91:98:53:32:01:86:02:89:e5:e6:0f:87:ac:27:
                    66:dd:53:0d:99:da:73:16:81:7f:87:9c:3b:93:ff:
                    cc:f1:fd:70:d3:68:47:3e:18:47:3a:e9:cb:34:c3:
                    95:5a:8c:f4:ab:25:17:7f:57:54:fc:f6:20:23:c4:
                    92:fa:22:4e:1d:19:f1:1e:f5:27:2c:53:d3:b8:dc:
                    5e:c4:fd:b4:c3:bf:cf:8a:96:28:f8:57:be:b5:b1:
                    28:33:ab:a1:ab:2a:fb:02:7a:36:40:6b:5b:7b:5e:
                    44:40:b7:13:b1:85:eb:48:ea:d9:6e:71:5e:78:24:
                    43:ea:54:e5:9a:61:32:5e:e6:01:57:19:74:67:80:
                    d6:a2:66:f1:82:aa:66:77:04:f4:53:43:e2:eb:93:
                    7e:ba:7c:9d:aa:3c:e2:05:b0:06:75:eb:77:9d:44:
                    d7:5a:2f:67:20:19:78:49:3f:d8:3d:ec:07:dc:b2:
                    ce:bc:9f:ea:d3:1e:6f:1b:f6:2f:a1:90:87:06:d9:
                    f5:99:7f:bc:43:a9:49:69:d2:e5:f9:78:38:fe:50:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:92:EF:20:B9:D0:88:EB:99:1D:D8:A9:F9:40:FE:D9:86:8F:0F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/dfb1d344-6b07-3597-a546-a308b4db9f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:c0:c3:39:a7:3e:72:92:ea:b7:97:18:d8:b1:0c:22:a8:
         53:b8:3e:af:87:ad:19:94:64:ea:2c:e3:37:fe:0c:68:6d:a0:
         af:0c:23:30:4a:68:ad:56:e1:29:f5:a9:0c:8d:27:18:e1:f6:
         34:4e:a0:08:f0:21:f8:1d:6d:88:af:95:2e:1d:3e:b2:35:81:
         a7:9f:9e:ef:2e:e1:95:71:1b:be:ce:ba:65:8d:be:df:fe:36:
         17:14:41:f6:f4:1f:cc:d1:35:c3:7a:95:46:ec:7d:90:fd:78:
         d9:39:ed:81:74:02:60:35:00:92:60:06:a2:2c:8e:02:4e:32:
         62:09:af:b4:75:7b:17:c9:67:5b:a6:3d:96:71:69:62:91:b1:
         8f:ac:8a:d0:a8:08:62:17:eb:69:99:37:08:2f:b4:89:ba:45:
         70:4d:d3:34:bd:23:76:cd:85:b8:3e:6b:f9:a1:80:2c:0f:66:
         ad:3d:99:30:56:b5:15:c3:3e:fc:33:dc:f0:d9:67:a0:e3:8b:
         0f:90:06:7b:fa:4e:3e:49:22:a4:34:38:53:99:cf:db:65:63:
         6d:d8:b3:b6:f2:32:56:15:4b:51:14:99:13:12:3b:55:c1:a3:
         3f:74:a9:ef:07:0d:41:6b:9b:90:95:59:18:79:40:9c:35:a0:
         bb:81:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:55:42 2024 by rpki-client on console-fra.rpki-client.org