Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/31792338-03cb-3771-b4a1-a6a1a4df2a60.roa
File:                     31792338-03cb-3771-b4a1-a6a1a4df2a60.roa (raw, json)
Hash identifier:          WQvIAMd+NEdUwMkzzyFJvBn8CuSywVPlzYgn6oBjQP8=
Subject key identifier:   A9:93:D7:FC:AB:ED:E7:6A:78:8A:DC:88:64:E0:8C:B3:03:88:8D:72
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F43285847AE36B6FA5FC7CBB8C0AEC000
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/31792338-03cb-3771-b4a1-a6a1a4df2a60.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     36582
IP address blocks:        74.113.151.0/24 maxlen: 24
                          2620:7d:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b6:fa:5f:c7:cb:b8:c0:ae:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=00e693ea-c8c2-4b27-893a-a47b5a43592f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:61:60:56:90:92:ed:75:34:95:92:3b:4d:
                    dc:9e:f1:e3:f5:01:e8:40:7e:65:bd:df:e2:41:e0:
                    0e:83:6c:30:3e:cb:f3:bd:40:78:bc:4e:6f:1b:e3:
                    f5:e0:3e:92:ee:07:c2:9d:9a:30:91:46:a8:26:d4:
                    24:c4:ff:26:b4:d9:99:5f:cf:45:79:19:16:0f:05:
                    1f:e5:e7:ab:dd:05:ef:11:96:8e:54:72:2b:7d:9f:
                    bf:b9:b8:ed:07:24:10:4b:35:54:fe:f5:16:b6:f3:
                    dd:1c:47:07:24:8b:ef:ca:51:11:ed:57:2a:79:eb:
                    1e:b8:ae:99:4b:72:65:21:97:62:3d:9f:fe:26:03:
                    46:66:13:0b:73:b6:35:0e:6d:82:05:af:78:58:b9:
                    51:05:24:3d:07:51:11:94:24:50:d9:6f:48:2c:c5:
                    a1:33:e6:00:36:a1:7c:09:0c:4e:31:c9:45:de:34:
                    33:4d:51:9e:54:4d:28:42:95:ae:c3:75:bd:c4:9c:
                    1b:24:90:71:5a:55:f8:2a:cb:bf:59:35:ed:4d:07:
                    51:8f:5c:b5:4c:6e:d5:f2:7f:c9:16:25:f8:7f:a7:
                    62:28:44:e3:2b:a2:9a:ee:dd:db:c7:99:19:11:09:
                    4d:e3:31:f0:86:f8:91:2f:58:4d:da:b0:ad:25:00:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:D7:FC:AB:ED:E7:6A:78:8A:DC:88:64:E0:8C:B3:03:88:8D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/31792338-03cb-3771-b4a1-a6a1a4df2a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.151.0/24
                IPv6:
                  2620:7d:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:aa:96:f1:ea:2d:18:11:ee:0f:6f:8f:0f:a2:46:95:bb:7c:
         96:4f:3e:74:02:a9:91:2b:37:62:8b:50:30:b4:ca:23:6b:35:
         af:ca:b1:a0:09:29:cb:9a:1f:ee:38:29:3c:65:a3:28:dd:aa:
         0f:07:ee:9b:b5:9f:2b:0d:9f:30:9e:54:9d:39:b0:41:1f:a0:
         a6:cd:f4:16:e8:9a:a8:37:58:dc:d7:82:e0:db:10:76:66:db:
         b0:2c:5e:9d:88:98:79:41:a5:eb:0d:40:74:96:67:b9:a1:9e:
         ea:e1:a0:e4:41:a5:ee:a2:de:bc:8a:df:95:78:74:1f:3e:1c:
         6c:76:10:3a:60:99:5c:ab:47:ac:4d:94:de:38:43:17:eb:66:
         65:2d:50:6f:47:7c:df:a0:f9:09:ff:6f:a2:c6:ee:de:4a:bf:
         2e:95:8f:42:cd:50:c0:52:da:7a:d1:d1:8a:7f:48:b0:17:fb:
         d7:49:3f:0f:96:3f:47:f7:a4:42:bc:53:7e:07:61:30:1e:1e:
         71:1c:02:b3:4e:f0:ea:b2:2e:17:04:6c:66:a8:6d:95:c4:51:
         f9:11:88:75:2d:63:6e:9f:e6:61:98:cb:28:60:0b:50:77:f4:
         66:84:83:58:3e:df:fa:ac:88:45:ee:a5:e2:97:74:5a:a8:ab:
         a3:4a:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org