Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa
File:                     3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa (raw, json)
Hash identifier:          byXDRRMzs1jVByus6BO7hSnHbmiyASetFLmb1B08LmU=
Subject key identifier:   6C:10:7E:DA:F1:1E:D0:DA:A3:C2:29:44:C0:8A:8F:2E:4A:60:C7:A2
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858459D2DE451BD5739BA3E95F580
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     7106
IP address blocks:        74.126.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e4:51:bd:57:39:ba:3e:95:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=ac44889b-1621-4503-b56e-47ec7c60cfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:40:75:e6:62:08:60:50:d3:2c:ec:e6:6e:
                    33:10:34:f8:43:a0:87:10:d0:45:3c:92:2a:cb:56:
                    73:a9:6e:fb:21:87:5a:b1:c2:31:48:59:c0:7d:b0:
                    6b:d0:43:f7:d7:51:04:b4:eb:16:a1:ab:ac:f6:65:
                    15:ef:52:51:7f:74:63:bf:9d:c1:70:c1:5d:32:dc:
                    ef:ca:3a:8e:be:f2:8c:e2:f8:4a:1b:bc:2b:c1:91:
                    14:45:f2:8b:dd:ea:e7:6b:1f:47:58:4a:86:38:c0:
                    89:9c:3b:71:b1:9e:df:7b:32:71:fc:bd:a6:12:16:
                    d7:2f:2e:e9:91:d3:f7:74:22:22:bb:51:38:43:10:
                    bd:63:b9:12:1c:f1:32:0e:0b:86:2a:10:25:76:ec:
                    98:69:dd:df:b0:b7:69:11:f3:54:be:4d:4a:5c:4f:
                    c3:60:f4:87:ed:09:27:6c:b8:43:12:cf:c6:e7:9d:
                    aa:16:09:21:ae:bb:af:45:1e:53:b9:13:38:08:fd:
                    6a:45:d4:5e:b2:e2:7a:a7:65:f0:97:f5:e9:28:23:
                    22:31:c0:86:92:e2:24:3a:51:5c:6d:8e:2d:15:90:
                    77:4c:a5:00:8e:4b:4a:a5:4a:87:6d:a1:93:2d:f1:
                    98:1c:e3:91:4e:2c:89:a2:6f:57:0d:37:1a:1e:2b:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:10:7E:DA:F1:1E:D0:DA:A3:C2:29:44:C0:8A:8F:2E:4A:60:C7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:8e:f3:d4:cd:4d:51:7f:00:3c:a3:91:7b:19:b5:66:de:
         57:d2:63:c8:da:f0:57:bd:05:b6:27:f2:40:f1:b9:77:db:cd:
         33:da:d1:6f:62:08:d0:fb:26:50:49:c8:2f:d0:66:d2:41:62:
         70:67:5c:a3:1f:e9:bf:42:50:ec:43:67:04:70:43:e6:45:25:
         5b:68:00:ca:3e:0b:95:1b:7f:fc:79:37:07:3b:2c:65:17:ce:
         a5:b8:d4:ed:2f:89:99:c1:ae:a1:89:19:04:f7:92:dc:4d:f1:
         7d:c6:4b:98:3e:cd:3c:a1:49:f2:a5:e8:ab:83:71:dd:c7:c0:
         53:db:4c:1a:95:ec:9c:3f:53:26:3b:e8:ff:ca:32:48:f9:d6:
         9a:a9:8d:28:36:8c:38:b9:7a:b6:3e:4d:d9:43:7d:3c:16:52:
         ff:aa:23:0a:36:f2:2a:65:9e:e9:2f:bb:69:59:95:86:23:7f:
         bd:ea:1a:2a:d7:95:2e:8a:61:be:3b:31:18:f8:2c:0b:22:9b:
         cc:f6:b5:d8:91:16:33:f5:7c:99:c5:59:e7:be:60:ed:e3:f7:
         63:f6:69:3c:52:a8:ec:03:da:50:eb:bd:08:18:d2:5e:8a:66:
         54:54:ca:c1:16:e2:f6:c5:bc:4e:b9:35:3a:10:0e:ad:e6:09:
         dd:bf:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:54:55 2024 by rpki-client on console-fra.rpki-client.org