Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa
File:                     394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa (raw, json)
Hash identifier:          h04faBWPNIR99yWkccS+rBOdxyuZFSxwxUOhvOESOBc=
Subject key identifier:   B4:36:C6:D8:4D:B7:C5:F1:15:62:7C:D7:2C:C0:63:7E:74:44:5C:FC
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F43285845ADEE1434920DBEC655C00780
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     14007
IP address blocks:        199.101.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:14:34:92:0d:be:c6:55:c0:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=4545bd20-8bfc-4282-b479-8896b2939ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:44:c5:34:1e:a1:36:79:95:f4:f9:11:25:
                    38:50:2c:dc:5e:2f:91:05:e3:65:a7:22:3d:e5:2d:
                    82:9e:24:d2:44:f9:05:be:48:98:43:5f:73:b3:5b:
                    a2:fd:f3:6f:99:fa:76:fa:0b:67:94:4f:fb:85:14:
                    3a:c8:d5:83:fb:56:56:fb:a2:13:cc:da:48:b6:d4:
                    71:69:9a:a8:ea:8a:75:af:33:58:fb:a6:dc:16:f4:
                    bb:8f:51:8d:5c:ff:bb:74:26:64:8a:c1:e1:8f:b7:
                    a7:13:c8:bd:7b:d3:27:35:3e:fe:05:59:2f:01:15:
                    c3:8c:90:65:a6:3b:0d:cf:6d:50:dd:0a:a8:85:8f:
                    68:40:32:37:7c:ec:5b:3f:ce:60:7d:08:ef:de:fc:
                    dc:f1:3e:ad:d7:a9:d3:92:df:5e:f7:00:18:b4:92:
                    fa:2c:09:ea:24:97:b5:be:be:00:e0:f0:35:1e:16:
                    41:e4:87:d0:7a:13:53:47:c4:d3:35:5b:ec:3e:71:
                    da:fe:13:7c:64:e7:28:e8:53:1b:8c:54:b4:c1:0c:
                    93:80:b2:a9:aa:d3:0c:bc:99:c5:c7:88:82:81:2e:
                    a7:0e:aa:7c:54:20:fa:7f:02:80:b0:3d:3e:b1:c0:
                    aa:ec:e1:73:96:7d:e9:11:74:28:ee:3b:ad:0e:4f:
                    29:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:C6:D8:4D:B7:C5:F1:15:62:7C:D7:2C:C0:63:7E:74:44:5C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:a5:07:00:ca:6d:48:c0:5e:40:70:c5:51:70:74:2a:2c:e3:
         fd:62:29:ca:13:ed:33:a9:e2:9d:ab:08:55:57:3c:19:a1:b9:
         79:23:11:bd:6b:7f:f7:24:9d:d2:7d:9c:06:83:f0:85:bb:f3:
         8f:4c:37:01:52:2f:47:39:31:6c:ab:86:bc:93:0d:fe:72:ee:
         e9:46:3d:47:98:6c:42:7c:ff:7e:4f:81:4f:de:37:c7:ed:c7:
         bf:d4:56:28:6e:50:c9:b0:95:fd:9a:54:cc:a0:4d:d9:05:17:
         12:97:c2:0f:94:ac:f9:82:46:a8:1e:e2:84:d2:6d:af:37:18:
         e4:79:4a:36:f0:fd:fd:7f:16:f2:13:85:d4:42:7b:88:eb:f7:
         9d:fc:b5:bb:9e:1d:c1:19:59:23:2e:38:cd:25:f4:0b:d3:de:
         57:c4:8a:ad:c2:29:c9:5e:b4:cd:3c:7f:7f:29:c8:fb:38:b2:
         02:4f:18:05:d0:a0:60:ec:f0:40:07:89:34:f6:a5:d1:4f:de:
         c6:6a:74:76:c8:86:41:d1:ba:a1:d7:d9:74:d6:2f:6c:a3:9a:
         93:0a:b1:2d:f0:ce:38:16:17:b5:86:b4:b3:b0:c8:fe:52:4e:
         20:7e:68:dc:59:79:14:f5:0a:bd:90:a3:02:0b:a9:a4:4a:bd:
         aa:75:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:40:16 2024 by rpki-client on console-ams.rpki-client.org