Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa
File:                     fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa (raw, json)
Hash identifier:          ruOy9bfl+Bxu3euyoLrwXN67Rexc9oiI1D7Hijvtumw=
Subject key identifier:   C3:60:B0:FD:D3:FB:7C:1A:9B:4D:6B:86:0A:49:18:AF:34:89:56:8F
Certificate issuer:       /CN=f32917d5-115d-4c33-8f66-98c515f1b37c
Certificate serial:       010D0C9F4328584561285689CD651C128E11AA00
Authority key identifier: 01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     14556
IP address blocks:        74.114.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:56:89:cd:65:1c:12:8e:11:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32917d5-115d-4c33-8f66-98c515f1b37c
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=01fed5ad-4f11-4618-b0ee-ee627ef59bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:bc:bd:1f:43:8c:1e:0a:bb:22:fa:be:bd:
                    ca:e2:7d:4b:93:a6:81:7c:ac:07:22:f3:67:fa:cd:
                    5b:c0:3f:34:dc:49:54:7b:0f:d8:30:cc:83:35:f3:
                    92:74:bc:49:6d:92:c7:1f:d2:04:4e:23:f5:33:9c:
                    e5:9b:d2:2c:34:88:06:b2:23:b9:f6:6b:31:30:0e:
                    82:fa:17:bc:9e:ad:b0:26:f2:65:db:50:25:5a:a8:
                    dd:0e:e8:3d:25:ae:24:40:5a:ce:46:e9:6a:7b:ff:
                    b8:a7:9d:a2:cb:28:51:39:be:f8:f7:bb:a1:29:d8:
                    b4:03:22:c2:c6:93:76:af:5c:fd:4b:4a:a8:60:6e:
                    e8:4e:7a:69:16:a4:42:1d:23:94:80:93:1b:28:72:
                    fe:16:c2:05:41:38:8d:d2:8d:d5:36:98:f0:58:ae:
                    0b:49:3b:0f:27:fa:d6:22:1c:fd:4c:96:fe:ba:80:
                    8d:bf:7c:25:f6:8c:90:c5:d8:de:2e:5c:c5:42:12:
                    53:07:0f:4e:0d:f2:b0:8b:1f:68:6a:c0:80:14:7d:
                    12:25:6b:ec:b8:92:d0:87:44:e3:a1:02:17:b4:ed:
                    1e:31:95:6a:ca:8b:1e:e6:96:5a:0a:ec:87:a3:d0:
                    0a:a4:aa:2f:85:91:3d:7a:6f:11:98:33:87:df:3a:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:B0:FD:D3:FB:7C:1A:9B:4D:6B:86:0A:49:18:AF:34:89:56:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.crl

            X509v3 Authority Key Identifier:
                keyid:01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:46:fc:65:d0:ba:00:c1:6c:cd:96:c3:bd:7d:47:29:80:82:
         ff:4b:1a:18:54:bc:3c:2f:1c:a9:6d:2e:6c:59:f0:5e:d5:7e:
         52:21:2a:19:19:63:31:f5:05:c7:c3:48:55:e4:55:b8:44:a6:
         c4:f7:04:ca:b0:bc:e8:ee:33:28:b0:8e:bb:df:a5:4c:9f:24:
         28:fc:79:cc:d8:5f:d6:ef:6a:b6:ce:64:82:49:a8:79:ed:20:
         49:ba:e3:80:65:44:56:b3:af:39:98:16:1f:e2:7e:ac:66:d7:
         33:16:f8:29:ff:82:26:c7:42:f3:64:59:7c:0b:b6:f7:d6:f2:
         e7:dc:cc:31:8a:bc:37:46:30:1b:bf:48:e9:2d:e4:c3:d7:9e:
         fa:9d:66:ed:2b:29:e0:51:27:25:d2:18:1d:f0:83:a3:d0:8c:
         6d:dd:c6:4b:d8:b0:62:a0:06:11:0b:1c:50:a5:7f:09:07:2d:
         f6:0e:9f:c9:84:03:86:0b:4d:e3:10:3c:c0:a8:21:57:5d:b6:
         b4:bd:6e:04:21:f3:51:a3:27:2a:24:cc:b2:0d:ef:52:18:55:
         b7:7f:7d:9c:ae:cf:18:71:95:d8:90:bb:b7:5f:d3:ba:11:af:
         70:d1:be:31:c6:b3:62:f1:c1:f5:f3:2e:20:ad:ce:f1:d1:15:
         4a:8f:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:03:06 2024 by rpki-client on console-ams.rpki-client.org