Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/8196ce71-f355-3b28-8960-2849aa992ce8.roa
File:                     8196ce71-f355-3b28-8960-2849aa992ce8.roa (raw, json)
Hash identifier:          RP3SjzWUwJOnTj5A6U84XorSmimDr6PubaIXT8atCqI=
Subject key identifier:   8F:B4:D7:BA:FD:15:F6:FA:7E:24:5E:00:54:1B:6F:C4:4C:1A:5F:F6
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F43285847EBBF85B1252BFFAD67DA33A0
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/8196ce71-f355-3b28-8960-2849aa992ce8.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     20278
IP address blocks:        74.122.198.0/24 maxlen: 24
                          173.243.112.0/24 maxlen: 24
                          173.243.119.0/24 maxlen: 24
                          192.208.184.0/24 maxlen: 24
                          216.107.144.0/24 maxlen: 24
                          216.107.150.0/24 maxlen: 24
                          216.107.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:85:b1:25:2b:ff:ad:67:da:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=6f78e312-8cff-4b75-a52e-c7015678d9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:a4:da:d6:c8:4f:78:3e:71:d6:70:f0:e0:
                    24:de:1e:61:b4:f3:8a:b9:5f:84:71:d7:26:0f:13:
                    33:28:83:93:51:7c:2e:66:3e:8e:73:4a:6f:50:a2:
                    d9:74:3e:5a:2e:5f:c2:70:56:b6:b2:36:ff:cb:3c:
                    87:f9:9e:5f:83:b3:81:c8:58:9f:d4:a6:b9:01:83:
                    79:e4:f1:9e:52:d6:48:2e:68:d7:d7:3b:fa:5f:91:
                    96:af:93:c4:d5:3c:9b:e2:9a:44:c7:9e:1a:23:f9:
                    63:f6:b8:0b:1e:e9:dd:cc:ec:f2:ae:08:d8:2a:a5:
                    bd:d1:11:9b:50:e7:b5:55:55:bf:d9:b9:d0:c7:3b:
                    a7:33:4a:23:96:07:dd:75:b3:bb:72:12:3c:07:58:
                    5d:ba:50:0a:01:9e:79:24:15:91:3f:7f:76:20:d2:
                    94:ce:8e:7d:ed:9c:82:c3:97:ec:de:22:16:01:67:
                    a9:37:85:b0:47:e8:90:ac:eb:f0:0d:72:ba:37:b0:
                    8c:d0:39:45:42:d8:4c:7f:f9:c6:e4:20:98:83:c1:
                    ce:e0:2c:dd:a3:63:50:dc:dc:11:4e:c8:7a:dc:a1:
                    a8:bf:1f:01:aa:4b:d9:e2:cd:b6:59:ff:de:5b:8d:
                    18:30:b3:b8:49:48:a9:3b:ec:77:a2:58:c6:c5:9e:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B4:D7:BA:FD:15:F6:FA:7E:24:5E:00:54:1B:6F:C4:4C:1A:5F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/8196ce71-f355-3b28-8960-2849aa992ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.198.0/24
                  173.243.112.0/24
                  173.243.119.0/24
                  192.208.184.0/24
                  216.107.144.0/24
                  216.107.150.0/24
                  216.107.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:08:bf:f5:b8:33:13:48:eb:81:be:23:69:62:29:3d:de:
         0e:e6:6f:0f:a2:e7:2c:97:93:c3:a6:2c:cd:88:9d:d5:3e:88:
         61:fc:1c:4b:f5:8e:67:10:17:ad:46:37:72:01:9f:c6:e3:c6:
         b1:be:4d:d4:24:b3:f6:3b:21:bb:b0:df:a3:44:75:82:b9:bb:
         db:ad:e5:5c:3c:51:76:41:8a:c6:78:27:c6:8b:a2:94:0d:53:
         c6:4f:ab:21:66:ed:1f:b3:af:21:64:c4:48:90:ab:85:4a:b8:
         04:c9:08:32:1a:d4:d3:ec:3e:9f:4b:e4:9e:7d:f0:1c:b8:6d:
         a1:69:96:6c:92:fd:7d:23:17:0c:25:4e:99:90:e3:7c:74:a8:
         a9:49:85:9a:08:1f:93:1c:ad:24:18:41:d9:80:63:bd:37:64:
         1d:77:d2:d3:8f:9b:4c:1c:79:18:1f:26:e7:4f:67:c3:0e:b2:
         0c:a1:41:c5:24:69:8c:74:c3:13:6b:36:19:6c:65:37:00:de:
         32:69:09:4e:d2:7d:b3:8e:5c:04:4c:9c:aa:89:a6:dd:e8:88:
         53:bd:96:a7:e3:2c:3f:12:56:52:c7:3b:b3:e9:eb:a6:18:ff:
         b1:f0:bf:76:c4:35:93:bf:01:75:5b:a3:b1:c1:7e:53:69:ec:
         77:86:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:26 2024 by rpki-client on console-ams.rpki-client.org