Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/833760e4-6289-3e4f-b752-fa667417c563.roa
File:                     833760e4-6289-3e4f-b752-fa667417c563.roa (raw, json)
Hash identifier:          fzfybppb3jRbexE69hO5y0fB+sswGEzcwcD0ApSd9EM=
Subject key identifier:   AE:54:AA:21:A8:80:55:17:D0:50:65:6F:8D:D2:7E:29:70:7B:35:26
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584819CFC0B53E8D9EA10BAC3440
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/833760e4-6289-3e4f-b752-fa667417c563.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     396982
IP address blocks:        74.112.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c0:b5:3e:8d:9e:a1:0b:ac:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=ca8988d0-e937-4533-8e32-1059a65d5f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:4e:fd:da:c9:8d:31:8e:75:a2:2b:1d:ce:
                    c8:c7:10:38:88:26:ec:81:bb:a6:05:44:c8:c6:13:
                    3c:62:7a:26:00:b9:a0:01:0f:cd:41:e0:85:67:32:
                    3a:7d:92:07:b4:0d:33:e5:70:3e:c4:87:3e:65:d0:
                    6a:60:f1:c4:cf:40:8e:fb:13:41:8f:a2:0b:c7:9e:
                    c7:3d:3a:f0:c6:18:52:1d:cd:00:32:c4:1a:5d:96:
                    d3:fd:99:5d:bd:63:13:25:ca:41:39:05:18:0c:ab:
                    7b:4b:c3:88:56:9c:d3:82:a3:9e:37:47:2b:50:6b:
                    1d:b6:c6:78:f8:ab:08:28:b0:3e:1a:6d:b4:43:b0:
                    6a:ba:73:58:49:69:a2:ad:aa:93:13:6c:9b:0e:c2:
                    f4:5b:b8:9e:af:ec:b7:98:7d:7c:ad:4a:f1:e7:63:
                    be:5b:a4:8b:f7:8a:9a:9d:c0:1e:d8:47:43:99:45:
                    ec:5d:18:bb:df:41:db:1a:ee:b3:fb:b8:83:2c:c7:
                    d0:35:bc:ab:bc:64:2b:77:33:c0:89:19:1f:99:41:
                    38:b4:d4:98:ee:87:0b:1a:bd:c3:cc:72:27:f0:ca:
                    17:c0:3a:f7:68:4e:69:a6:64:ed:2b:8e:9e:b5:4e:
                    95:39:bd:93:8f:36:d1:b5:b0:94:d3:dd:9d:e7:f9:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:54:AA:21:A8:80:55:17:D0:50:65:6F:8D:D2:7E:29:70:7B:35:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/833760e4-6289-3e4f-b752-fa667417c563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d0:6a:21:20:a0:45:36:11:f9:25:1f:84:10:06:04:fb:81:
         d6:a7:74:bc:6f:90:6d:01:33:17:ec:33:a5:15:fa:99:53:e0:
         c2:7b:aa:0f:a8:56:78:60:95:1f:b2:a8:c1:74:92:5d:30:8a:
         c0:cb:41:ab:3c:36:d5:be:70:3b:08:49:2e:0f:40:8e:7d:f5:
         89:51:fd:fc:fc:45:d9:95:e9:78:91:54:f6:98:7d:ef:39:4a:
         27:0b:c9:64:89:3d:dd:86:be:b6:16:96:45:ae:ac:f9:2d:16:
         b2:69:93:9c:9b:e3:b5:53:9a:94:20:7a:44:bf:4c:bf:c9:d5:
         be:e8:a6:49:44:99:a2:b3:bb:14:46:9a:b3:77:84:f5:b7:d6:
         26:8e:69:55:59:7a:95:cb:45:43:72:b4:aa:13:06:d0:44:cd:
         64:1c:8d:b4:37:e4:c5:d1:b3:c1:53:4d:02:6f:b2:ec:14:d7:
         81:a6:a7:9a:ef:a4:46:30:9e:09:40:4f:28:1c:6f:b9:3a:03:
         56:20:ae:5a:65:b2:4d:e4:49:6c:7a:5b:69:cc:a6:ad:4a:aa:
         78:b2:6b:0f:75:07:e1:3a:e7:96:ce:cf:50:cd:c5:d4:34:27:
         b4:06:52:bf:e5:cf:00:4a:87:9b:63:02:7a:c0:65:6f:f8:b7:
         a5:9d:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:55 2025 by rpki-client