Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e111478c-6114-37c3-ac44-86a6ee25a0df.roa
File:                     e111478c-6114-37c3-ac44-86a6ee25a0df.roa (raw, json)
Hash identifier:          tGRyTDvY6XVYxG4Wl12NAvkpuGHRMM8Btwn0rPVWx4U=
Subject key identifier:   A9:19:C1:4E:5C:F5:BD:35:85:60:5E:0B:D6:CB:E4:67:51:79:DD:54
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F43285845480820C4DFEC0ED586A89D00
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e111478c-6114-37c3-ac44-86a6ee25a0df.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     32035
IP address blocks:        74.122.116.0/22 maxlen: 24
                          74.115.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:20:c4:df:ec:0e:d5:86:a8:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=4b7c676c-c06c-451f-89de-52d4e7c47bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:a7:81:c3:b8:8d:8e:87:39:38:94:91:97:
                    08:9d:8f:b2:42:04:70:75:fd:98:6d:2c:f0:6e:c9:
                    aa:23:34:2e:e5:82:4b:e6:04:1f:f4:3e:77:6c:ca:
                    dc:5c:18:c2:4c:11:e6:7b:2c:35:2d:cd:27:92:14:
                    f6:67:10:50:5c:27:4a:2d:40:2d:37:59:76:9e:96:
                    bf:a1:47:55:ce:af:93:a7:e7:3b:51:1e:82:dc:61:
                    4e:48:1f:7e:22:3d:b8:43:98:42:ea:df:8d:ba:77:
                    c2:36:1a:bc:4a:10:3f:38:d0:db:e6:0f:5d:ff:94:
                    6a:6c:0b:00:cc:a5:ee:fc:b4:5e:01:a9:e6:f2:19:
                    54:25:00:e8:25:f2:68:5f:18:46:df:1b:9f:5f:9c:
                    03:c9:55:e3:2c:76:58:bd:28:56:35:42:5f:30:61:
                    0c:e1:1a:0b:11:dc:75:82:93:65:26:4b:6a:6d:30:
                    6f:58:d7:72:76:b4:e5:5d:ed:8f:7e:bb:7e:5a:74:
                    1b:36:e9:57:36:df:21:a5:d3:cb:cf:6c:ea:46:d6:
                    25:e6:d1:e0:e3:32:9f:d8:45:fd:79:3a:f5:3e:91:
                    38:16:a8:07:0d:d2:11:87:a3:b2:4a:66:d3:ff:3e:
                    a4:fb:b4:7d:78:f7:d6:2b:8b:0f:3d:47:03:ab:db:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:19:C1:4E:5C:F5:BD:35:85:60:5E:0B:D6:CB:E4:67:51:79:DD:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e111478c-6114-37c3-ac44-86a6ee25a0df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.96.0/22
                  74.122.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:e0:4f:f1:17:38:7d:03:b2:0e:cb:e1:7b:bb:d8:9a:80:
         07:d5:9b:ff:94:89:ac:66:26:59:41:c7:f3:90:0f:67:99:16:
         32:53:a7:f2:ea:2b:5c:e3:57:c8:b2:ad:62:24:d9:48:35:78:
         5b:52:b1:a9:9a:59:ea:9f:f1:14:0a:2e:2e:cc:bd:7b:bf:17:
         12:ad:b8:9e:44:f5:4e:7c:bb:f0:42:77:f7:46:3f:fe:ff:6a:
         d3:b7:21:ab:7d:04:70:b6:b9:e9:da:94:35:d1:74:cc:14:4b:
         e1:82:a4:8c:38:51:05:9c:22:c6:58:f3:71:ba:c3:17:43:f3:
         87:df:6b:1a:14:5f:b2:51:51:f8:6d:de:99:4e:f2:c4:f2:66:
         2a:cc:c9:4d:48:7a:63:d9:aa:e2:6a:f8:69:64:71:58:2b:41:
         e4:ca:db:e8:65:b4:b3:72:10:24:c6:80:bc:8a:61:62:7e:cd:
         ac:74:0a:0f:ae:dd:d9:be:a4:f2:14:81:a4:df:7d:60:e0:84:
         3a:80:c5:99:b8:56:3c:c7:f1:55:b2:4c:67:8f:9b:a2:4e:09:
         ae:33:2f:34:23:22:ae:47:07:ec:6a:cc:c0:7b:4b:85:d8:31:
         53:19:b8:a1:95:8d:f1:56:05:1d:71:95:6b:96:ef:e4:45:26:
         30:77:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:48 2024 by rpki-client on console-ams.rpki-client.org