Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa
File:                     afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa (raw, json)
Hash identifier:          PWXHQ3wyZE/+DmoTk6Lax5L2BXYBkq1lJ0CYDrOK7GM=
Subject key identifier:   50:15:D0:54:C8:00:9B:5B:0B:D2:B5:2F:A1:33:93:1C:93:60:BF:15
Certificate issuer:       /CN=b558fe83-60e3-423a-b823-c3c24b9a60dd
Certificate serial:       010D0C9F4328584789EBF613E3CED699F311E2C0
Authority key identifier: 7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     8075
IP address blocks:        74.80.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f6:13:e3:ce:d6:99:f3:11:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b558fe83-60e3-423a-b823-c3c24b9a60dd
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=54c49a1f-1f05-41f4-acd8-2440d9a0171b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:5c:36:14:17:12:fd:c9:15:92:11:c5:20:
                    86:1d:cc:5d:40:22:36:6a:68:98:56:2d:8e:bb:18:
                    a6:72:6e:69:a5:8a:6a:73:88:bf:c8:f4:5d:bb:6b:
                    c7:32:e8:bc:c4:b0:e6:ae:92:b7:54:d5:92:29:57:
                    5f:5b:de:cb:0d:23:11:c6:e5:2a:b3:6b:33:5f:00:
                    e3:d6:fe:77:38:0c:f3:00:ac:29:86:79:61:76:f9:
                    56:c4:06:c4:5b:48:1a:c7:92:2e:9d:5c:6e:a8:24:
                    9a:59:2b:e7:46:53:d1:c6:2c:b7:93:d4:5f:72:fd:
                    bc:0d:43:cc:88:58:26:8a:dc:d6:8d:a4:e1:4c:a5:
                    1c:58:f0:3e:f2:40:42:50:16:31:e8:c9:2c:92:15:
                    2c:30:11:b3:38:bf:b8:98:53:e6:56:34:6f:b6:ee:
                    32:01:b6:3a:a8:b1:3c:c0:3a:00:37:d5:41:56:23:
                    be:c1:1a:67:b2:62:91:01:5c:57:86:d3:00:78:0f:
                    19:0c:80:9a:08:7e:2b:27:73:2d:53:11:62:44:1a:
                    b9:27:0e:db:cd:0a:22:fe:18:85:e2:a1:79:3a:b4:
                    07:1c:f7:ca:61:5c:5b:8a:81:84:3c:2a:22:d3:4f:
                    f0:db:ac:86:ae:fb:2c:3c:24:7f:09:b0:fc:b5:07:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:D0:54:C8:00:9B:5B:0B:D2:B5:2F:A1:33:93:1C:93:60:BF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:e8:f2:83:16:36:af:28:e5:04:90:09:99:d6:f5:0e:df:
         2c:d6:b8:46:ff:2b:e4:8b:7d:45:b2:75:2c:b4:01:8b:e9:60:
         b1:45:30:35:ac:61:2d:34:a3:4b:b3:56:fd:e9:13:9e:f7:15:
         f9:17:fa:4d:44:fd:69:58:91:8f:6f:cd:61:3d:cf:c6:36:05:
         c7:b9:ce:8d:f2:10:19:75:88:5d:1f:53:c6:98:45:d7:6f:02:
         87:d5:14:06:a3:d1:c8:13:61:2a:41:ad:9b:57:ea:9f:ae:93:
         c6:4a:9a:43:c3:b3:83:fb:9c:2f:3e:1b:49:01:b5:25:b0:e0:
         7b:7d:48:12:c9:91:54:c4:68:15:90:39:52:d5:13:dd:f8:a5:
         d0:9b:31:9c:76:19:43:df:18:cc:c0:43:3e:c0:c4:66:41:d7:
         b1:5b:89:4c:4a:dc:7e:15:26:ab:12:d5:86:26:39:ef:fb:9d:
         a1:cb:f4:12:c4:60:85:5b:94:83:7d:9f:35:cb:10:28:51:47:
         66:f4:94:70:e0:fa:9d:cb:5a:8e:c6:3e:76:b3:0d:a3:a8:42:
         9d:03:55:08:23:1e:8c:65:3b:de:e4:08:46:d4:45:1f:06:cc:
         79:f0:9c:b6:a6:e8:9e:9e:ea:45:6b:68:5c:77:2c:65:4e:d9:
         d7:c2:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:14 2024 by rpki-client on console-fra.rpki-client.org