Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa
File:                     4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa (raw, json)
Hash identifier:          LlKrGoULlSuZPFn//N73+jOdP+gILgagRrT36sbS6ec=
Subject key identifier:   53:B2:0B:1F:61:78:FA:D4:10:91:8E:74:18:7D:75:49:04:F5:F1:9C
Certificate issuer:       /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial:       010D0C9F432858472F307D286949E840C7631900
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     399989
IP address blocks:        74.117.216.0/21 maxlen: 21
                          74.117.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7d:28:69:49:e8:40:c7:63:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=b13b8ff9-fecc-4ed9-aad9-84c83e9b1d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:08:69:f1:ab:25:d4:7e:13:d4:3b:0a:dc:
                    61:7d:28:c4:04:98:b3:06:36:d3:de:18:81:19:01:
                    27:39:c7:ff:37:16:75:43:e6:c4:7b:9c:89:32:38:
                    d6:13:63:cd:a3:b8:eb:20:94:45:5c:2a:16:8d:bd:
                    46:5a:8f:92:87:21:88:89:fc:ce:20:67:14:78:6a:
                    ba:c4:c0:01:6d:02:57:6c:74:be:25:0d:bf:83:8c:
                    d7:d4:e0:f3:31:4a:51:3d:00:23:40:42:86:9c:ac:
                    bb:6b:19:46:af:26:5e:47:b4:a4:32:91:a9:65:25:
                    61:16:74:f6:7e:1c:4f:a5:45:32:f1:db:8f:62:0a:
                    32:d3:8a:46:d4:78:23:56:0a:63:a6:e5:f7:66:d3:
                    e5:f0:31:db:ee:53:f8:10:b3:95:22:9c:9f:52:4d:
                    66:ba:5c:d7:a4:5b:65:c7:cc:99:53:43:96:58:6c:
                    a1:b0:6e:bb:ba:3c:26:f6:49:a5:e2:0d:c6:b7:88:
                    92:f0:e6:a8:48:bd:c4:34:1b:d8:59:87:30:74:de:
                    59:ee:29:bd:ba:7a:01:83:d8:57:df:0e:45:e2:c0:
                    b8:83:54:2d:af:4e:d2:17:92:7a:2d:81:fa:3c:ec:
                    d7:3f:e9:76:a6:b3:88:6e:1f:d1:ea:9f:0a:98:8f:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B2:0B:1F:61:78:FA:D4:10:91:8E:74:18:7D:75:49:04:F5:F1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl

            X509v3 Authority Key Identifier:
                keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:08:23:ed:db:53:c2:dc:65:c9:30:83:90:c1:80:e4:89:59:
         d2:04:87:ae:af:a3:0f:cf:82:cf:e6:cc:16:d5:a4:b4:d5:45:
         94:19:77:2a:39:13:0f:19:0f:74:6e:86:77:94:39:16:a0:63:
         98:b2:a6:46:ce:8b:29:e0:83:6e:46:b7:1d:50:32:01:2b:1d:
         bd:3a:7e:e5:c6:67:86:a1:cd:0d:a6:58:fc:dc:f8:8d:55:1c:
         55:04:fe:36:c0:6b:e7:66:c9:3f:23:83:9b:f8:94:b1:4c:ca:
         a3:42:06:b2:2c:ce:2b:29:c2:6d:70:f5:56:75:60:f2:f2:11:
         f1:69:a2:f5:92:c1:09:1a:ff:88:cd:3a:ac:b0:0b:08:62:9a:
         d1:f0:cb:a6:bf:5f:ee:4d:84:e6:bf:74:43:32:b1:9d:d8:64:
         e2:c8:41:d3:7b:32:f0:4d:8e:26:ff:89:a8:5e:ec:09:c8:28:
         5a:eb:00:64:c7:59:53:d9:2c:51:a1:49:09:15:f6:a6:5c:52:
         9f:2c:22:f8:ae:14:af:c4:4c:7c:c9:7c:2f:10:67:39:e8:a2:
         2e:02:05:e6:45:dd:5b:cd:1d:53:20:eb:aa:13:76:43:8f:df:
         f4:f2:7a:ef:5d:77:36:dd:07:d9:d9:e6:25:0a:82:9d:7f:18:
         f8:1c:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:53 2024 by rpki-client on console-fra.rpki-client.org