Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa
File:                     76976d75-ee42-30cf-9881-ba84b1f75bee.roa (raw, json)
Hash identifier:          5zupC57wZxWvcOaKBiTOy/yRMWxGBBupAewB7N4fNXA=
Subject key identifier:   1D:47:EB:4D:56:2E:F4:70:CC:8B:CF:97:B6:3D:99:A6:46:59:01:BD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584784567E909B64471073BD6580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        45.74.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7e:90:9b:64:47:10:73:bd:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=d00a84db-8a95-483e-937a-7f181978773c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:3e:07:99:c1:c6:4e:72:da:3f:a1:61:48:
                    ad:25:d6:5b:88:0f:4a:37:06:8c:ad:fa:91:18:1a:
                    54:58:00:13:f1:f7:07:d4:b1:fa:3d:2c:d9:e0:c5:
                    61:30:ba:19:30:9d:06:b5:c5:59:5c:ab:7f:cd:28:
                    13:31:a3:62:63:48:cd:f3:ba:fd:f8:b2:9b:17:fa:
                    96:9a:69:45:fc:08:f3:0d:e3:1a:d0:2b:b1:89:8e:
                    27:b6:3f:f3:35:56:58:3c:52:a6:cf:79:84:b0:12:
                    6e:a5:8e:ce:8e:92:cd:d7:95:2b:c3:9a:15:fe:9e:
                    7b:7d:f6:ce:e3:6a:58:63:4f:65:bf:9d:23:70:b6:
                    d1:d8:a7:73:6b:92:ce:c5:12:74:ce:a4:9f:ac:9d:
                    d6:68:65:14:7b:d4:67:58:f0:09:13:7e:ce:58:18:
                    6b:84:c3:c8:89:b7:e2:19:68:62:1e:ab:6b:74:c6:
                    de:3d:78:cb:0b:72:a6:5d:17:a2:ea:e9:d4:f0:86:
                    80:86:e3:c9:e4:07:f6:d1:c0:22:7f:e5:fb:1c:6c:
                    1b:41:dc:22:4b:d9:13:db:28:49:d5:a2:bf:0b:d4:
                    60:c3:11:7c:a7:b2:c9:ca:e0:2e:19:c4:fb:ba:c4:
                    94:8a:3e:a0:6b:44:10:a4:69:10:2c:24:a0:31:91:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:47:EB:4D:56:2E:F4:70:CC:8B:CF:97:B6:3D:99:A6:46:59:01:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:86:55:5a:8b:86:e7:1e:64:4d:44:55:0e:9e:ef:2c:0b:
         b3:d9:4a:dc:93:be:ee:d4:71:c6:b2:c5:42:dc:78:d8:24:63:
         aa:7e:aa:bc:90:29:c0:9d:ca:52:70:37:74:d2:ef:5a:3a:ba:
         17:21:fa:db:b6:c8:89:fb:37:66:b7:c7:7a:a3:cb:f2:72:13:
         63:31:2a:1f:88:1d:78:9f:c5:17:c9:ae:be:6e:7c:82:d1:46:
         0e:e5:64:5c:45:b0:2c:76:4b:23:62:49:36:0b:0d:16:b0:83:
         34:8a:a9:ab:57:03:79:9e:a2:97:0b:dc:27:a6:f4:36:6d:19:
         3e:41:73:f7:ef:b2:37:4f:c1:7b:10:fc:a8:e9:fc:c7:2a:d2:
         69:a0:92:34:2d:23:1d:bb:4f:31:ca:28:1f:27:2b:8d:7b:22:
         39:54:ec:ff:bc:61:f6:af:63:b6:87:c4:40:45:ed:32:45:a7:
         f2:72:12:be:01:56:04:fb:d3:c2:a9:c5:1c:65:eb:9a:ae:73:
         0a:53:88:ee:12:24:de:76:47:38:e5:13:b6:04:df:27:e2:6c:
         ca:da:2b:a0:b7:2f:a3:98:d5:a1:aa:0b:77:49:22:06:1d:0b:
         fa:d5:f8:ad:ce:8b:93:62:94:95:bc:d8:ab:d1:5d:e8:bf:ab:
         5c:5c:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org