Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ac9010c9-c091-397c-b40d-fbeba657711f.roa
File:                     ac9010c9-c091-397c-b40d-fbeba657711f.roa (raw, json)
Hash identifier:          rcFiV0eu2xOm2v7OszScHGur196JD5IVaaCH0VcYuZU=
Subject key identifier:   DA:8C:B0:3C:95:06:02:F3:D0:0F:F8:29:BF:31:33:FD:95:F3:CF:9C
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F43285847EA5A12DD927C96838EB7837B
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ac9010c9-c091-397c-b40d-fbeba657711f.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     398420
IP address blocks:        74.115.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:12:dd:92:7c:96:83:8e:b7:83:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=17cd573a-a892-4e2c-aa71-3c864e679ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:b8:ad:13:b8:75:b8:62:7e:ee:21:6a:7a:
                    bc:41:70:34:a0:b2:22:b8:d0:53:d2:07:42:0b:e9:
                    26:be:5d:20:eb:e0:39:51:71:99:e1:14:5c:29:b7:
                    02:66:9b:3a:76:62:0b:e1:3e:e8:d1:2c:f4:20:38:
                    52:2b:90:bb:9b:ae:81:1f:ce:d3:d0:9a:3e:dc:31:
                    f6:6a:af:c1:6e:da:a4:b6:f3:24:f4:ee:1e:4c:72:
                    30:b7:44:95:bc:e4:86:d2:f1:76:f0:07:a5:17:79:
                    17:b4:e0:38:aa:a0:83:da:3d:f5:f4:ef:99:33:44:
                    d0:72:08:0f:14:f4:d0:15:d7:c8:99:c3:5e:5b:1b:
                    41:2e:ff:c3:5b:e8:40:e0:6c:82:7a:82:ee:49:ba:
                    17:0b:d4:0b:28:3a:32:ba:6f:38:17:32:8f:86:26:
                    55:4e:f5:ad:e1:88:a2:0c:91:51:ab:47:4e:d0:21:
                    05:1c:8a:6b:cc:b6:4f:c1:a3:5a:62:93:69:d4:c9:
                    c2:e6:e8:d5:52:c4:bc:26:b7:41:3c:31:3b:8f:fb:
                    09:f6:f1:c0:ea:2f:69:ed:c8:ca:29:09:f0:b7:0b:
                    fa:ce:6e:e8:90:3d:3b:d2:32:0f:5a:cb:f1:99:e8:
                    2d:5e:6c:a7:32:8d:1e:41:73:d8:ec:99:92:32:42:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:B0:3C:95:06:02:F3:D0:0F:F8:29:BF:31:33:FD:95:F3:CF:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ac9010c9-c091-397c-b40d-fbeba657711f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:b1:9d:50:7e:39:e6:3b:93:e6:9e:82:95:dd:98:fc:3f:
         95:f7:68:fc:43:7d:e6:b8:07:c2:87:46:a3:37:22:ee:30:bf:
         f3:71:46:99:98:f0:ad:a9:92:07:6b:b2:92:05:82:33:fd:ea:
         7e:ea:67:39:54:36:7a:aa:b2:ac:ab:0c:22:d5:a4:4b:80:1b:
         10:69:3a:3e:7d:39:7f:d5:8a:07:ad:37:b9:81:3a:47:e1:9c:
         8e:ff:6f:49:55:03:3b:f8:1e:a2:e9:a0:ef:a3:79:3c:1a:a1:
         34:cf:aa:5e:2b:65:0a:3b:31:d2:13:8d:cd:09:c2:56:78:77:
         58:da:86:5f:09:de:3e:c0:76:7e:a1:f6:b0:bb:d7:eb:f8:d2:
         91:32:26:69:04:bc:de:2f:b1:66:c1:02:48:a0:48:1c:ce:62:
         a1:df:c7:ce:a9:1c:81:cc:1a:08:e6:92:00:d3:bf:c6:93:2d:
         2b:b2:7f:63:30:9e:ca:81:f2:ff:5c:84:e9:57:a1:42:1a:05:
         2a:c2:4d:66:a4:00:ff:86:e6:0c:18:f1:97:8c:a6:72:9f:de:
         fc:e9:8b:58:4e:b3:31:df:4e:bb:85:a2:91:41:ab:93:68:64:
         25:3b:5c:75:43:e1:24:c6:99:5e:80:86:15:53:6b:4e:e4:4c:
         04:32:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org