Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
File:                     971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa (raw, json)
Hash identifier:          8YxzIaoo4xdv5xQqY6hePIMzTztf4dHQGpsB3f0ui3M=
Subject key identifier:   2C:C2:41:4A:F3:65:68:25:BD:58:74:68:4E:CD:CF:C7:62:07:F7:0E
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584561286818E177DCF281D975A0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     715
IP address blocks:        74.63.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:68:18:e1:77:dc:f2:81:d9:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=83abfccc-5d17-4bbc-a016-4d9d3f96fe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8f:f7:c7:c7:31:7e:de:1e:74:28:83:7b:2d:
                    69:e9:27:ef:a3:ab:39:eb:d7:98:a4:4c:b7:d2:90:
                    80:b3:e5:52:47:c8:75:11:f5:24:03:8b:d0:fa:59:
                    ed:c2:4a:73:b7:54:5a:98:13:66:9c:32:55:71:76:
                    77:1c:0d:1b:88:f4:17:3f:e4:9e:32:e9:f6:ef:ec:
                    e2:a8:52:8c:d0:f3:b5:b8:8a:1f:3b:16:90:31:45:
                    00:93:52:dc:63:3f:de:32:27:48:75:95:7b:1c:0a:
                    fa:fa:71:13:ad:eb:01:7b:c3:bb:21:e4:70:a8:d7:
                    d4:6b:ff:50:a3:84:69:30:13:40:0a:2c:8c:f1:de:
                    52:47:c6:79:1d:b5:b8:15:2b:db:d7:39:eb:23:78:
                    91:7d:c2:35:18:4d:7f:8d:43:4f:78:0c:7c:e5:a3:
                    20:3b:e1:72:b9:9c:e3:89:30:62:88:45:c5:1e:88:
                    2c:a5:14:ab:6d:d6:24:0a:dd:75:d2:f0:dd:2e:4d:
                    4b:5f:cb:05:bb:03:3b:47:49:78:21:dd:f3:c5:87:
                    e9:8b:a7:41:38:c0:85:9d:30:6d:15:6d:d7:da:8b:
                    4f:ee:0f:ad:dd:97:63:09:5c:b4:39:96:26:32:75:
                    97:c7:3f:47:29:7c:19:b2:ad:fa:e7:ae:fb:49:a9:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:41:4A:F3:65:68:25:BD:58:74:68:4E:CD:CF:C7:62:07:F7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:be:f5:5a:73:37:40:42:57:af:34:ea:cb:7d:b7:68:b8:
         31:5a:a0:ae:1f:74:0e:7a:29:60:9d:f2:35:6f:62:ad:06:9b:
         99:20:62:4e:9e:6a:f9:d4:9d:1a:2a:13:59:12:f0:e3:25:ef:
         24:04:64:73:67:2e:db:a0:45:11:8f:54:81:60:35:57:8f:c2:
         1b:6e:4d:e2:0f:13:26:83:ef:7d:95:fc:ae:03:b3:8b:83:2b:
         32:4d:99:0b:3f:62:75:76:59:a8:0e:be:1b:69:e3:e1:d6:a1:
         e6:63:cc:1d:13:b4:9c:dc:db:1c:c6:f0:3a:4d:bb:00:5a:ec:
         eb:c4:7e:a8:2c:3b:48:e2:f7:d9:cf:0c:ec:8a:5d:70:f7:e7:
         7b:df:62:6d:bd:6d:8c:ec:4a:8d:fe:cf:e5:2b:5f:38:0f:a5:
         16:9b:e9:03:12:ff:90:e7:34:ed:22:9c:29:21:72:ec:37:c0:
         ca:2d:22:4e:fa:02:2f:b4:aa:32:91:af:66:33:7d:a0:d9:16:
         1c:66:7d:0d:07:a8:c3:8f:91:a0:9f:ff:47:f3:56:03:2a:24:
         c5:1a:ed:78:f7:b1:c5:ac:3d:d0:a1:3b:0e:9d:85:93:68:3e:
         1d:42:db:06:d3:b7:8e:ce:b2:3a:55:ac:ab:ff:8c:e7:04:05:
         d3:8a:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:02:16 2024 by rpki-client on console-ams.rpki-client.org