Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa
File:                     f88ad909-af6e-3c19-97ea-abc7c4271328.roa (raw, json)
Hash identifier:          3HNqaeKpNzpUv16frRFS29/PkcWtQP3XHf5wN7D5nvU=
Subject key identifier:   79:E5:C1:C0:6D:76:B7:C4:79:A6:55:21:1E:F4:F8:3C:8D:E3:B0:A5
Certificate issuer:       /CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f
Certificate serial:       010D0C9F4328584563F30BAA21F75BD4C524B040
Authority key identifier: F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     2635
IP address blocks:        74.114.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0b:aa:21:f7:5b:d4:c5:24:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=c851518a-c830-4622-97d6-0df70673826c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:f1:3d:2e:b9:ee:57:23:8b:92:6a:ac:3c:
                    3a:20:7d:5e:ed:de:7a:d8:d5:1e:b4:30:20:dd:97:
                    37:ff:6e:76:44:8b:67:31:02:92:89:d1:9c:4e:21:
                    05:ff:54:eb:42:ba:c4:08:2e:36:4f:9b:de:87:0a:
                    8a:9a:d0:b4:65:50:46:f0:90:47:54:35:c4:bf:7b:
                    dc:e2:97:c2:d5:ad:10:9a:f5:cd:bd:29:d6:d2:f4:
                    0b:f7:ba:e8:ef:57:52:1f:5e:49:a1:ba:8f:d6:dd:
                    2f:d3:27:a7:89:24:0b:86:31:9f:79:c3:c1:4b:f8:
                    b6:16:66:39:62:9e:63:76:f1:55:32:2e:10:7c:d7:
                    c6:28:2e:73:2c:1c:31:6d:0c:8a:68:37:84:a8:0b:
                    d7:7c:24:9a:e0:89:9f:69:6f:8f:62:d2:a0:a9:53:
                    59:b6:a4:1e:27:a5:59:e7:b4:f4:3a:65:da:59:b8:
                    5e:0b:81:9a:7b:95:b5:e2:b1:2b:9d:9f:c3:02:4f:
                    4c:c7:36:e6:5c:69:f6:92:ea:09:1b:47:8a:29:56:
                    55:b0:81:bd:7f:29:6d:ec:b0:14:b4:93:fd:9c:e8:
                    19:6b:9f:a0:9c:d2:ef:da:1e:76:14:c1:66:59:a0:
                    5d:eb:21:11:db:69:7f:c6:05:c7:c3:da:40:11:71:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:C1:C0:6D:76:B7:C4:79:A6:55:21:1E:F4:F8:3C:8D:E3:B0:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:78:35:d5:eb:43:59:46:10:fc:5f:07:8c:55:b1:2e:73:
         5a:1b:40:29:cc:24:a9:57:f2:5d:bb:cc:d9:e3:56:53:ab:0a:
         f1:f2:61:7f:03:34:9b:c5:ff:55:87:0e:64:db:bd:72:aa:86:
         9c:7a:27:52:48:06:39:f4:99:ad:4b:47:1e:02:65:83:0a:a9:
         7e:c6:5f:f7:bc:cf:e2:4f:e6:8c:7e:40:0e:48:cd:2d:81:8f:
         6d:aa:dc:3c:79:da:15:11:18:82:a5:d5:e2:c0:ed:70:38:3f:
         96:0a:5d:00:99:cf:de:1e:d3:10:9f:9d:92:5a:e9:ae:66:ca:
         b5:0f:a3:4f:57:09:a1:d5:f0:c5:8d:59:f1:2e:20:a7:74:fb:
         81:1e:17:00:c5:96:79:9d:4f:68:86:a8:96:74:37:39:9a:b0:
         a6:3a:36:fe:d1:ed:83:34:ed:d9:96:0f:08:84:5c:50:7d:4f:
         2e:94:cf:45:05:b5:1d:91:2d:ea:1c:8a:46:66:5e:ac:1c:53:
         06:c6:bc:c5:3a:72:0f:45:1c:b7:69:d6:b3:92:59:2f:0e:8e:
         52:8a:cc:4c:78:0b:09:78:63:49:54:98:bf:5b:68:2d:af:18:
         0b:69:de:d8:74:6f:6e:4d:95:13:13:91:75:78:8e:ba:bf:49:
         b7:05:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:46:34 2024 by rpki-client on console-ams.rpki-client.org