Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa
File:                     658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa (raw, json)
Hash identifier:          z8LxCQyI9hFqiuA+CA6rGwcHdJFM+U/9D2rntwR8EPg=
Subject key identifier:   BF:1A:FC:8C:9F:BD:C1:44:49:3D:9C:70:0D:06:1B:8A:40:E6:05:FA
Certificate issuer:       /CN=05a4c80a-51b6-487d-a927-afcc950c360c
Certificate serial:       010D0C9F4328584854701F5EBBA107690623A710
Authority key identifier: A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     1239
IP address blocks:        74.117.114.0/23 maxlen: 23
                          74.117.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:1f:5e:bb:a1:07:69:06:23:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a4c80a-51b6-487d-a927-afcc950c360c
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=0ccb8522-d9f3-4f24-8282-3626460520d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:cf:c3:bc:3d:48:b0:8f:cf:19:b2:97:47:
                    62:50:b0:c7:45:50:09:f1:32:6a:b2:de:7c:a2:f3:
                    f9:14:22:d3:89:53:df:45:c3:27:6f:18:b1:1c:88:
                    34:9e:6f:2e:c7:ea:3c:c2:23:72:de:38:03:2f:b4:
                    6e:cb:25:43:81:08:3a:45:80:11:1c:85:dc:84:1d:
                    fc:a5:a6:35:df:a1:50:e2:db:8e:bc:bc:65:8c:59:
                    1e:6d:d3:e6:fd:4d:98:13:7a:ef:b6:4c:d8:f8:c3:
                    ca:14:e2:fc:f5:2b:35:d4:b3:63:6d:7b:3c:2a:73:
                    15:76:8f:43:c1:1d:54:37:b5:e6:fd:be:4f:ef:50:
                    52:e2:ca:11:1f:07:27:20:3b:36:cb:da:78:2c:77:
                    96:56:60:09:e3:47:11:35:39:29:89:cd:1c:cf:36:
                    e7:bf:b4:16:c9:3a:e8:ed:4e:1d:e7:ab:3d:fb:0c:
                    6c:84:7b:40:38:bf:c4:e3:3d:8e:56:b2:4c:5a:8b:
                    21:e2:d2:45:8c:4b:bc:d1:c3:c0:00:b3:84:ad:c0:
                    b2:72:3e:3d:f8:5b:a6:8c:4d:4f:53:6d:97:ec:51:
                    18:00:f2:76:b2:27:c7:6e:bd:a2:ff:1a:9f:a0:1c:
                    01:25:d7:73:23:f0:43:04:f3:2a:54:a4:c6:33:12:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1A:FC:8C:9F:BD:C1:44:49:3D:9C:70:0D:06:1B:8A:40:E6:05:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.114.0-74.117.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:e1:49:0a:34:7d:e0:3e:86:57:91:b4:26:7e:98:42:e5:
         72:5f:be:18:3d:07:fa:33:3a:b3:72:d8:11:18:f9:1b:92:b7:
         bd:cb:6a:68:ba:bc:94:e9:1c:11:98:cc:3a:62:38:3f:9a:f9:
         ac:e0:97:4b:51:0e:0c:c1:4f:ef:42:2d:02:1d:8b:2a:0f:46:
         6b:c1:28:6c:71:b6:b0:b4:bc:b0:01:0d:8d:86:84:9e:7a:58:
         cc:c9:26:31:0b:69:15:7c:d2:18:68:de:f7:be:e2:4a:2b:2a:
         e1:ba:eb:72:cd:f2:bd:b9:09:8d:29:13:08:48:b3:65:15:85:
         ef:86:90:76:51:53:13:2a:ae:22:6b:a8:f4:03:6b:b9:29:1d:
         38:b9:c4:21:30:9a:19:66:6b:d9:44:b6:a6:b2:68:62:63:16:
         97:67:ca:76:a6:b9:ee:74:5d:f5:df:00:bc:90:85:d4:ec:1b:
         df:1e:54:76:a3:b2:ac:12:ed:f7:e6:d7:0b:54:c0:6f:dd:9a:
         91:8e:af:c7:1a:58:31:d1:9a:e2:7f:95:de:72:18:13:e7:97:
         57:e6:65:00:db:7a:de:54:91:73:a2:e2:46:bb:b0:07:12:b3:
         50:b4:f6:68:a8:7e:e9:29:23:8b:33:ef:db:9f:7e:c2:b1:e1:
         f2:cb:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:28 2025 by rpki-client