Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
File:                     504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa (raw, json)
Hash identifier:          ywu9Rdx2P3ajp/FtTuW6KIH8n99N46Y1GlPLsO8KyQo=
Subject key identifier:   B5:8B:FC:78:E1:AB:E2:66:AF:1A:3A:34:BE:5B:8B:52:D8:85:01:89
Certificate issuer:       /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial:       010D0C9F432858477BF6607BE966F6E3A631F480
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     36671
IP address blocks:        74.121.208.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:60:7b:e9:66:f6:e3:a6:31:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=faedeea8-48d7-4b14-b094-21af4c6ff568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:35:c4:57:a5:33:e2:96:57:de:c3:8c:91:
                    f7:b5:ce:ef:4e:79:ae:26:ea:1f:42:48:19:b8:ce:
                    43:3d:3b:1c:f3:51:b7:3c:bc:34:76:cc:2d:7f:a5:
                    2f:63:14:b6:c9:b0:ed:0a:a8:9c:17:5f:62:0d:da:
                    62:75:e5:1b:4a:f7:19:fe:29:62:e6:e7:b7:72:fb:
                    cc:9f:00:18:f7:5c:07:35:cb:6b:62:a9:7a:65:bd:
                    3b:7f:66:f7:3e:02:5f:61:bb:ec:9d:9a:33:79:08:
                    70:bc:7a:42:1e:4f:4e:2c:05:92:77:a4:e8:6b:87:
                    6f:67:31:82:05:94:85:12:ab:8f:2f:c8:60:72:2f:
                    d3:95:16:9d:85:1a:43:b2:58:6d:ef:80:97:a3:2e:
                    03:6f:fc:d7:f1:04:db:0e:d1:da:39:2b:39:57:8e:
                    60:26:81:ab:d3:08:e3:de:0b:bf:16:13:51:5c:31:
                    1c:43:f1:44:e8:cc:2d:b6:33:93:53:9e:15:e5:76:
                    1d:65:f3:43:b8:f3:bd:7f:57:d3:cc:5b:df:e5:40:
                    87:88:08:30:69:d9:bf:bf:44:23:2a:cb:25:c0:05:
                    a9:ca:92:f3:48:34:67:7d:b5:fb:b1:c9:98:1d:18:
                    67:fe:85:d1:27:84:78:d2:67:dc:7e:4e:51:13:19:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:FC:78:E1:AB:E2:66:AF:1A:3A:34:BE:5B:8B:52:D8:85:01:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:48:63:c1:bb:d1:5d:e2:77:d4:9c:37:80:7c:83:9d:43:
         37:b0:22:27:e3:3f:9f:a5:ac:e1:2a:40:9e:c7:bb:8e:a8:dd:
         0d:71:7e:b7:00:57:12:05:38:5f:bf:70:8f:b2:68:f0:4b:e5:
         5f:a1:53:ff:3f:d6:72:8d:24:e2:56:1a:11:de:7b:91:43:8c:
         2c:1d:3f:fd:27:f7:df:e8:98:b4:44:83:fd:d9:72:f5:32:6f:
         7f:d5:b8:4a:f8:07:36:7f:0e:00:d8:74:56:33:31:67:3e:3d:
         fe:94:30:4b:2b:57:62:ac:07:ed:49:69:71:95:42:36:3e:2d:
         73:7c:7f:78:cb:36:f0:e4:62:56:18:c9:d6:15:b9:66:a7:32:
         91:bc:4f:6d:05:49:d0:ee:df:1a:a3:20:cb:ff:5d:c9:a8:29:
         32:05:95:71:9a:80:c8:7c:f3:36:db:3c:cf:cb:c9:88:09:15:
         80:20:94:54:e4:72:3f:63:08:71:96:ee:22:0e:1c:2d:23:d0:
         73:20:b0:61:4e:d2:cc:4e:e9:e7:7f:f2:9c:82:2e:60:2d:b4:
         f1:4d:0d:af:2a:68:01:fc:29:c0:aa:a1:b3:bf:5b:64:09:5b:
         1d:6f:8a:a2:d9:30:08:1c:d8:4c:ac:90:9c:3c:76:71:0a:59:
         d4:e8:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org