Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa
File:                     289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa (raw, json)
Hash identifier:          jRgeZ0NvJl76CbYnDZt/VTRo22Kuh1P6wUWk1ZUuGp0=
Subject key identifier:   55:DD:FC:44:2C:BF:A2:E5:B4:07:CE:74:97:E3:5C:EF:CB:B8:CA:1A
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F432858472C65C33161F79715CDB8D500
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     42
IP address blocks:        204.14.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:c3:31:61:f7:97:15:cd:b8:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=d67aa808-c0d7-43d8-9e04-9945867f616a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:34:3c:dc:ff:a3:fe:85:d0:d9:2e:b4:43:
                    63:49:cd:23:38:74:7e:79:33:28:30:f2:37:07:9b:
                    d2:4b:ba:56:43:0d:b8:af:c0:e5:64:b9:b9:31:07:
                    b3:f6:81:05:2c:cc:bd:1e:f4:bb:ba:c1:7c:a1:c9:
                    d9:4b:31:7f:09:a6:4e:78:d2:d6:8b:21:11:59:94:
                    c8:45:b5:67:64:b0:30:88:a1:aa:28:ac:d9:6a:b4:
                    26:7f:53:53:db:dc:bc:c0:a7:77:6e:cc:97:d5:2a:
                    2e:e0:dd:be:0d:54:10:d6:7a:02:d5:65:25:b6:bc:
                    89:4a:e5:d6:37:38:07:4f:99:de:64:ee:e4:cc:df:
                    73:af:b0:e9:28:02:1b:91:55:90:c8:b0:45:22:e5:
                    38:72:22:d4:1f:64:4e:5d:e6:23:1d:e5:9e:85:56:
                    19:aa:1e:a6:c7:07:38:a8:89:8d:83:bb:f5:b8:41:
                    d1:cb:a2:ca:75:c3:56:40:43:2e:5b:c4:21:fa:0b:
                    ad:82:5a:b1:4b:54:71:b4:f9:59:c5:59:d8:cb:27:
                    b1:e4:37:e3:39:c4:52:4a:05:0b:da:ff:3f:ac:6d:
                    df:ff:c0:0d:db:cb:6f:07:0c:ed:f2:2f:84:3a:49:
                    f4:95:94:bf:df:5a:d6:36:24:71:87:49:d0:4e:76:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:FC:44:2C:BF:A2:E5:B4:07:CE:74:97:E3:5C:EF:CB:B8:CA:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d3:dd:7d:99:42:67:3c:d8:65:27:47:92:a6:bb:70:e3:be:
         6a:0d:33:a3:a6:77:35:93:3e:a0:84:f9:68:2d:52:ee:03:66:
         07:c9:be:47:97:7b:9d:47:4e:53:c4:51:8e:b5:22:58:7e:d1:
         93:ad:59:a9:b0:cd:4f:0f:49:c0:89:08:32:d5:01:b5:b9:01:
         f5:cc:f5:fa:44:b5:fc:11:0e:41:60:37:e1:a1:4c:d8:26:97:
         a6:f0:66:ed:51:1d:22:13:c1:5f:db:ab:9c:e3:55:35:1a:04:
         ae:a2:19:7a:e1:37:48:79:c6:66:e1:09:ba:63:25:e6:1e:dc:
         1f:3d:6d:17:eb:60:cc:0b:48:86:f9:de:4a:a4:75:94:ee:3a:
         0a:75:3e:2e:27:c6:cd:73:54:10:ab:28:ff:92:df:f8:61:15:
         2c:1a:e0:c4:d2:3e:40:b8:ef:4c:56:c1:7a:ff:54:58:30:ae:
         aa:d3:40:91:d2:b0:c0:36:ad:60:bc:9f:ea:1b:7a:bf:55:4d:
         a8:f2:18:ce:7e:0b:23:70:4d:df:de:ab:34:2c:2f:a1:4c:06:
         e0:9f:bc:bc:7a:a7:e4:19:44:4a:d8:80:e4:cb:ee:c8:8d:67:
         09:e6:cf:0b:f2:4d:a4:45:1d:64:3e:54:11:d0:c0:16:96:44:
         b4:6c:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:30 2024 by rpki-client on console-ams.rpki-client.org