Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa
File:                     7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa (raw, json)
Hash identifier:          fYqM4XJspXcbo5RDjO2nO23XXO6RCpgHMUkud/jpG/g=
Subject key identifier:   D5:F8:1D:3D:15:31:D1:56:FB:63:0C:21:15:01:33:8B:46:E8:B5:03
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F43285847A73BE0889126D1F47E53C280
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     396982
IP address blocks:        74.112.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e0:88:91:26:d1:f4:7e:53:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=8dbafb78-e585-4c0e-8067-122fdfe9ed55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:07:11:28:f2:0e:a6:75:a0:92:e1:7c:79:
                    00:cc:90:90:1b:28:d5:d6:98:86:62:48:4a:a5:6f:
                    6c:7b:02:ac:b3:ea:3a:9a:e8:1c:66:d1:77:da:32:
                    08:31:6e:b7:2d:00:f2:7c:4c:54:82:4e:56:73:53:
                    b7:20:eb:7d:e1:89:2d:ab:b7:71:99:5f:9c:5c:b4:
                    db:22:cc:69:ce:47:f4:6c:cd:f0:b6:20:34:be:c1:
                    b0:e1:d5:3f:10:50:00:2e:00:88:7e:02:5c:83:f3:
                    13:71:f8:ab:a2:aa:f9:51:42:94:f9:86:40:87:a0:
                    27:4c:00:10:79:54:cb:a7:50:71:e4:a3:72:6f:14:
                    aa:16:32:bf:41:11:a0:9a:5f:84:6b:32:83:de:05:
                    a9:cc:a0:ff:5e:15:ad:27:b5:c6:23:38:5f:12:ee:
                    83:51:f7:76:24:b2:c8:41:61:77:5e:ce:be:7f:9d:
                    65:d7:81:df:3b:6c:36:6a:4c:b3:02:3e:e8:fa:d4:
                    26:8d:6b:c8:d3:39:c8:b0:ad:8f:7f:24:d0:96:44:
                    e9:63:eb:cf:f2:ec:24:b1:e2:b0:07:b6:98:8b:56:
                    f7:70:35:12:40:db:b3:e7:18:c7:38:34:98:24:c6:
                    17:c2:28:46:0d:28:29:7b:58:b3:30:60:48:a8:22:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F8:1D:3D:15:31:D1:56:FB:63:0C:21:15:01:33:8B:46:E8:B5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:d5:c2:55:81:ec:81:22:a1:f2:83:cf:64:8e:22:ac:29:
         d0:5c:e8:e5:aa:60:b5:ea:90:75:c4:9a:5a:32:91:96:d4:25:
         6e:a3:d8:44:33:2d:e5:0e:29:16:69:37:b3:06:f9:57:9e:06:
         33:d0:3d:ac:09:01:11:cd:bc:ba:69:d5:42:86:22:86:ec:23:
         12:f7:e3:1f:29:c1:fe:91:ca:df:a7:3d:f7:cb:61:89:14:5b:
         d8:2b:08:5c:e6:9f:b9:ff:29:9d:e7:9b:90:12:ca:ed:42:c5:
         bf:67:64:15:95:96:65:d7:43:5c:27:25:db:cc:54:c3:34:ea:
         41:6f:ff:e0:b6:a3:ea:50:18:d8:be:8f:f4:60:9b:f8:db:fb:
         1c:f4:d5:6c:f0:59:1d:5e:2d:67:1b:c6:35:2c:5d:a6:ed:d7:
         be:72:15:10:74:09:52:ad:ac:e7:f6:66:71:ff:a9:98:5c:26:
         8c:38:05:0f:f9:25:87:17:05:16:92:f9:50:6e:16:df:c9:d1:
         7c:1d:a6:93:df:48:3d:27:b9:11:b6:34:59:39:bd:e7:20:b5:
         45:2a:02:6b:9d:d5:30:da:0d:d7:df:8b:96:12:b7:ca:53:ac:
         c8:39:3f:1a:ad:7b:6b:23:36:7f:84:80:27:f6:07:12:87:16:
         89:eb:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:08 2024 by rpki-client on console-ams.rpki-client.org