Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa
File:                     93929419-5010-3d66-bae5-2cde7ec1457c.roa (raw, json)
Hash identifier:          7n0jCqgJ7sSEpivLjAV6XUYeMJ1qwb+REMoNnsyamvM=
Subject key identifier:   73:9B:83:CF:25:17:3F:D8:64:4F:6B:DC:75:90:1A:04:8C:FC:6C:36
Certificate issuer:       /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
Certificate serial:       010D0C9F43285847537B59D1CF8FB40E46B795A0
Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     53769
IP address blocks:        74.116.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:59:d1:cf:8f:b4:0e:46:b7:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=c97ac6a0-ef52-4efc-aad3-7c9e615602c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:3d:5d:00:5a:a6:9f:1d:94:67:9b:8d:b2:
                    c3:a0:f9:95:93:16:40:f3:cd:02:21:f2:0b:3c:48:
                    98:90:12:4b:67:17:cd:70:1c:9d:f1:76:04:3e:82:
                    03:e1:ba:73:5f:45:7b:78:d7:b3:9c:dd:a3:a4:62:
                    d6:52:49:b8:d6:db:6f:20:92:16:7a:9e:f3:b5:83:
                    8d:46:80:17:a4:80:cf:99:0b:e0:2e:77:13:ad:fe:
                    b1:fa:02:d5:43:05:02:3b:4c:66:53:4e:9e:7e:58:
                    d8:82:a8:8b:da:dc:60:ac:ba:70:99:29:78:83:5e:
                    a3:a3:dd:e2:16:2e:53:e2:c7:7b:6a:6b:70:5c:ea:
                    a1:99:95:51:15:4f:05:81:86:a0:bc:c1:73:f8:f5:
                    df:b9:2c:f9:da:50:19:7b:51:32:7a:5a:d9:8a:d0:
                    04:1a:ac:b2:c1:fc:37:a4:aa:47:04:3c:bf:e4:62:
                    ae:45:a0:b2:c4:61:90:d1:57:69:d4:69:c4:92:26:
                    08:15:87:29:13:11:0c:39:8a:c4:f9:bb:13:68:f0:
                    48:4c:4c:ac:3c:77:ef:c4:6f:b0:00:80:35:10:ce:
                    0e:fb:0b:90:c1:d4:7a:46:80:6d:1f:68:55:34:8b:
                    19:51:d1:fc:f7:35:fa:97:11:38:32:c5:78:12:89:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:83:CF:25:17:3F:D8:64:4F:6B:DC:75:90:1A:04:8C:FC:6C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:86:c9:32:89:11:54:f4:cd:58:bb:38:d5:54:82:b2:51:0a:
         67:82:4f:54:f6:7e:7d:30:47:4a:a2:44:0c:44:c3:d6:d8:7c:
         8e:52:71:1c:9d:f1:a2:9c:47:16:aa:eb:44:95:a4:ab:b5:6e:
         2d:cb:35:09:ab:3c:64:60:45:a9:30:32:f0:e0:40:02:16:94:
         93:81:15:4d:f3:c6:db:bd:5c:fa:44:39:53:8c:2a:48:a9:3b:
         b0:71:7c:b6:9d:9e:93:75:a4:e6:0f:92:9f:91:07:d3:6b:f2:
         f9:4b:73:2d:e6:48:bf:08:a1:5a:8a:65:b6:61:98:89:0d:ce:
         21:19:87:4d:0a:f6:11:40:a2:ff:a9:63:76:02:55:27:de:d8:
         08:8e:8f:6c:8d:2e:42:7a:76:4a:56:fd:d1:cf:ef:ad:57:27:
         2a:c0:f0:2a:b3:6c:f5:f1:37:89:0e:4a:c2:3f:8a:29:79:aa:
         da:a4:91:1b:4d:15:fb:c3:b3:59:83:ab:14:73:19:9c:55:b3:
         49:49:c9:a6:ae:47:1b:4b:fc:84:b6:a7:0a:7c:b0:f0:8c:f5:
         bb:9f:27:b5:95:12:d6:cc:0b:17:70:55:a3:77:05:6f:3a:03:
         b9:4c:c0:69:be:1e:00:6a:da:ed:44:98:67:a3:dc:b2:f8:20:
         87:19:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:55:44 2024 by rpki-client on console-fra.rpki-client.org