Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa
File:                     8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa (raw, json)
Hash identifier:          ngEc9+RquxxJMofCGr+C8odkBSP9oPRUIAbXFKHb41s=
Subject key identifier:   2B:2B:A1:3A:6D:8D:00:0D:73:BC:48:D9:4C:2F:9B:6F:F2:45:C4:99
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285847792BB345ED9A88437C6B7040
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     18594
IP address blocks:        208.74.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b3:45:ed:9a:88:43:7c:6b:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=1b40b33f-0987-4dc8-b6b7-72bed9d118dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9a:16:80:5c:12:af:80:cd:bb:c0:bc:c0:60:
                    c6:80:62:79:48:88:a9:d4:d9:5b:45:ba:7e:7a:c1:
                    16:1d:d6:05:bb:4d:1a:e9:c4:66:55:fc:32:9a:e5:
                    26:df:c5:3b:a8:d8:42:cb:3a:35:1b:5e:1b:fa:43:
                    05:56:ec:12:58:86:42:63:4d:2c:05:51:26:c1:ef:
                    13:6e:06:e9:66:78:f6:07:a5:bb:69:bc:08:5f:b9:
                    9d:aa:95:2d:5b:c1:96:ab:15:fa:97:c3:5c:6e:03:
                    a0:5a:19:dc:97:e3:d8:b3:12:55:b2:c6:0d:f9:3a:
                    6b:2d:d9:9f:66:67:39:e1:68:0a:cd:c1:5a:2b:2c:
                    67:13:1e:22:19:e5:f4:0f:b4:31:e0:d4:95:a9:94:
                    e4:cf:13:0c:37:d7:b7:4a:9b:2f:e5:ee:3f:94:68:
                    75:6d:ab:49:c1:7b:38:89:1d:34:73:74:2f:07:15:
                    57:28:19:51:f1:4c:27:33:57:b3:4f:0d:b8:1e:4c:
                    9a:83:2b:3c:27:a3:62:6c:50:de:1a:a4:f7:eb:0e:
                    ac:aa:fc:10:1f:fa:d1:41:be:e3:27:3a:17:5b:a1:
                    9d:a9:2d:3f:d0:f6:88:fb:23:b2:30:3e:78:a5:89:
                    0f:a2:e9:68:9a:ca:24:df:0c:b0:e5:52:84:25:8f:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2B:A1:3A:6D:8D:00:0D:73:BC:48:D9:4C:2F:9B:6F:F2:45:C4:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:f5:88:2c:c6:e9:f7:cb:7d:e2:94:7b:88:3d:d6:1e:76:
         5e:f3:32:32:d2:98:fc:68:7c:a2:e8:6d:5b:0d:ef:62:d3:a2:
         3b:bb:91:7f:e9:13:67:54:95:93:38:92:85:5e:13:36:09:84:
         25:0a:18:1f:da:04:2e:71:fe:1c:c0:7b:a7:bd:26:9e:3e:a5:
         7b:85:11:fe:c9:a3:2a:38:65:0a:e2:6e:47:1e:95:f3:17:df:
         d0:1b:5d:bb:f7:08:51:95:7d:77:5a:fe:03:70:e4:a0:c5:0f:
         ad:c6:40:d6:5c:7a:97:c1:20:a7:a9:45:24:6b:40:01:9c:f6:
         e0:ac:ba:51:2f:05:0a:dc:4c:da:18:92:fb:af:b8:62:25:f9:
         fa:71:6e:ec:a1:ef:29:4a:22:e6:f5:03:b9:40:13:1e:c1:39:
         95:c2:1d:ae:84:f1:f1:c6:af:1f:f4:fd:5c:fa:99:3c:20:27:
         01:c2:e9:8e:6e:f3:8c:9f:5a:35:4d:fe:1f:3b:34:54:36:fd:
         be:e8:96:dd:e4:1c:de:3b:09:4c:94:8f:f5:47:69:cb:20:b2:
         9b:b7:37:41:cf:b5:bc:17:53:55:68:4a:83:4d:b8:14:7b:62:
         da:61:51:11:66:c8:3c:c4:35:49:53:15:51:25:07:11:b3:4f:
         1b:c8:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org