Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa
File:                     f88ad909-af6e-3c19-97ea-abc7c4271328.roa (raw, json)
Hash identifier:          223/Z8yXX9vHTAmFFFls2Msd5UmOd63iv8ex/gOfU3s=
Subject key identifier:   E3:C8:FA:5E:E2:FE:42:39:D0:8B:0A:A6:D8:61:1B:FC:CA:43:5B:E4
Certificate issuer:       /CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f
Certificate serial:       010D0C9F432858472405C8E7CC6111BA33F1AFF0
Authority key identifier: F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     2635
IP address blocks:        74.114.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c8:e7:cc:61:11:ba:33:f1:af:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=4ff38842-b5c0-47a4-b971-c5d6208a8627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:6c:ee:73:1d:11:40:07:90:90:e1:57:fd:
                    0b:c7:17:34:a0:5a:17:98:4f:27:f1:1b:e6:b1:9e:
                    94:c9:30:c6:94:50:02:f0:86:21:2e:fa:0b:09:63:
                    89:27:9e:42:d9:59:7d:6e:c2:e8:1d:ec:2e:41:05:
                    02:74:e7:92:6c:ae:bb:f4:38:c3:3d:df:e8:9a:e4:
                    7a:e7:0c:14:42:6b:57:79:65:23:3f:7f:c2:bc:be:
                    cb:8b:0e:17:58:e7:85:94:6f:1b:71:7b:35:16:e7:
                    c3:8b:a6:c5:4b:1d:67:a0:bd:07:15:f3:28:17:e8:
                    16:08:62:39:86:75:a6:ca:17:a5:e3:5d:74:f7:cd:
                    c9:67:46:3a:9d:0f:96:15:ab:b1:6b:9f:cb:f0:9f:
                    0b:85:85:52:f6:78:33:ee:2f:02:3b:6a:f8:31:d2:
                    2d:07:60:d9:5f:04:39:4d:c5:f9:02:78:30:db:f3:
                    ad:15:12:45:86:9a:2f:dd:89:6b:2e:18:10:c1:a7:
                    bc:36:bb:6f:b6:e0:0e:0e:78:fe:e7:d3:06:03:eb:
                    4a:73:c7:6b:a0:98:d7:d7:96:b2:30:15:b2:d3:1d:
                    ff:86:8d:24:18:dc:54:8f:9c:4c:ec:21:6f:8d:05:
                    b6:29:10:09:30:5b:ea:f4:2d:d5:01:0d:f5:e5:96:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:FA:5E:E2:FE:42:39:D0:8B:0A:A6:D8:61:1B:FC:CA:43:5B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:ed:09:ae:3e:77:42:82:e5:f4:f8:b2:4e:5b:7b:e4:8e:
         c2:66:c9:02:a3:b8:02:7a:02:a6:97:0b:af:96:c6:04:53:be:
         67:bd:c2:21:e9:53:fe:6d:76:a9:14:1a:1a:2c:ca:cd:eb:66:
         c3:9e:73:c9:8e:b0:78:66:41:e6:ac:aa:7c:e7:9d:dd:a9:d8:
         2f:2f:57:82:2e:48:2b:ca:86:b6:8b:62:3d:c4:d2:f3:fa:bf:
         0c:5b:72:b0:53:c4:e9:cc:bd:c9:7e:cd:1c:cf:e6:1f:26:dd:
         ca:53:dd:f4:b0:c2:c9:4a:69:60:25:ae:1d:74:bf:a1:90:88:
         cd:8a:50:a7:f1:2f:16:03:39:50:dc:e4:6f:a6:07:11:4e:c1:
         6e:a9:80:51:f7:22:4d:80:d9:d2:09:df:7b:c9:63:2f:5c:82:
         ce:64:9e:e0:ef:cd:c8:e3:4b:00:b4:02:e4:74:57:fd:82:6c:
         1d:39:a6:52:13:a3:59:e4:97:79:03:32:75:7f:45:77:de:83:
         31:0b:7f:71:d4:a4:a3:31:95:ca:f3:f3:11:d1:e3:93:2a:13:
         3b:ef:0a:eb:e4:7c:48:3a:af:ae:28:e1:5f:42:48:3e:a3:76:
         83:d5:99:7a:01:74:2b:af:21:2f:88:0d:f5:8a:28:4f:90:3a:
         74:56:73:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:31 2024 by rpki-client on console-ams.rpki-client.org