Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35244d8b-bd51-3597-9f58-8ed105922b82.roa
File:                     35244d8b-bd51-3597-9f58-8ed105922b82.roa (raw, json)
Hash identifier:          TZ4nVPKJD3Fh+sUObVEKueph9gX+cGiTXvBQMuGllEE=
Subject key identifier:   64:41:27:78:DC:DF:6A:09:27:B2:70:22:B3:E9:45:B6:66:B8:07:A6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EC6B2558B01A9B2E03E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35244d8b-bd51-3597-9f58-8ed105922b82.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        74.15.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:c6:b2:55:8b:01:a9:b2:e0:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=73969b88-c07c-489c-8076-1e7f7934ee0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:85:4a:ae:86:23:13:49:53:dd:a6:d4:04:
                    3d:41:ca:3b:fa:ee:59:60:23:78:de:85:5b:7f:76:
                    73:15:fb:49:58:ee:6a:26:0d:5c:3b:65:79:2e:08:
                    04:ab:7e:5a:5a:d4:24:94:a3:f3:e6:d8:59:89:50:
                    e9:71:2c:04:d9:c1:9e:a8:1c:af:64:de:9f:7b:c4:
                    20:6d:bb:86:0d:99:74:2e:2a:84:65:b2:ee:1c:07:
                    00:17:eb:e2:e8:70:cf:35:74:66:24:dd:61:76:99:
                    f3:21:6d:9d:a4:b1:bf:c5:c2:32:73:72:90:ee:a7:
                    5e:79:18:c0:42:a4:c0:c5:3f:e1:05:20:f4:a8:9a:
                    98:46:56:df:8e:aa:5b:dc:e6:8e:eb:80:3f:1c:cd:
                    63:fe:1d:d6:11:26:1e:6b:c3:68:38:20:1b:4c:10:
                    82:1b:d3:b2:3b:30:77:2f:b0:09:0d:04:20:f0:d8:
                    fe:e3:61:6f:9d:cf:d0:fc:d8:f8:f2:5d:99:43:14:
                    92:52:46:6b:9f:14:3f:dd:b1:7d:f5:fa:cd:6f:c6:
                    bd:75:1a:8b:1e:c4:f6:8f:1c:75:c0:98:42:bf:8c:
                    ed:c8:61:d0:65:ca:12:26:6e:77:5e:0c:6e:4e:56:
                    32:50:2b:c0:27:84:5b:f4:d2:e1:4f:a0:f1:d3:3b:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:41:27:78:DC:DF:6A:09:27:B2:70:22:B3:E9:45:B6:66:B8:07:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35244d8b-bd51-3597-9f58-8ed105922b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:5d:dc:d2:19:a3:38:bd:07:66:07:f6:e9:39:83:34:29:
         ee:0f:77:8c:e6:ac:ae:bf:c1:00:4a:3b:d4:09:c6:5c:3e:32:
         a1:c7:d3:99:61:35:76:bc:35:9a:f6:6a:6b:00:de:17:d5:64:
         43:c1:fc:32:ab:3b:ce:d4:87:fd:88:8d:98:2a:bb:0b:db:08:
         92:92:a3:13:3d:dd:22:1a:a0:45:ea:dd:a9:1d:e9:41:87:f6:
         fa:5e:d1:a5:82:0e:8f:93:9e:59:20:4b:57:da:b9:51:96:bc:
         78:ea:76:f3:e1:8a:c0:8a:ee:06:c1:c0:6f:f8:86:35:06:23:
         f2:b2:5b:45:14:29:8b:0e:57:e2:42:3b:fc:1e:37:78:36:15:
         e4:7a:33:17:ba:8d:24:50:5c:ed:51:1e:3c:a6:0e:66:98:c0:
         a7:99:a1:13:29:a5:7d:83:32:0a:9a:29:f2:03:c3:50:12:75:
         86:51:21:a8:11:0e:7f:87:4b:6d:17:5e:49:8b:fb:56:30:40:
         ba:49:6b:e3:0e:4e:bb:d5:9d:51:ba:e9:52:d1:82:25:f5:1d:
         49:e2:f0:2a:e2:63:f8:ab:20:5c:f3:17:c1:34:27:d1:d8:2d:
         27:20:72:06:39:6c:7d:99:71:c0:5d:3b:90:c4:51:9c:e9:7c:
         75:93:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org