Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
File:                     bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json)
Hash identifier:          8T4tm7hGX8ZMc1LmVf+7kctTLxaPWBLpQUW+JXUSWSA=
Subject key identifier:   D6:4F:D4:86:C4:C5:8B:37:76:BD:EC:C3:3A:00:E7:F7:D2:39:C1:CB
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F43285845679A66AD05EE302A0A8A1D40
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
Signing time:             Mon 01 Apr 2024 20:25:26 +0000
ROA not before:           Mon 01 Apr 2024 20:25:26 +0000
ROA not after:            Sun 30 Jun 2024 20:25:26 +0000
asID:                     19528
IP address blocks:        74.209.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:67:9a:66:ad:05:ee:30:2a:0a:8a:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Apr  1 20:25:26 2024 GMT
            Not After : Jun 30 20:25:26 2024 GMT
        Subject: CN=94b35ecf-8033-4795-96ca-3badffffabdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:a4:db:9b:57:49:14:a7:a0:c3:f8:63:b2:
                    d7:07:a4:64:8d:36:1a:0f:97:70:2a:39:b3:d3:91:
                    e3:44:0b:78:f5:ed:f2:a2:dd:8d:23:18:2b:f4:56:
                    1f:b7:5d:27:27:34:46:77:01:60:35:6a:d3:b3:21:
                    69:94:1a:74:3f:d9:d7:5b:12:b2:f3:86:36:8e:a5:
                    02:b1:9e:11:4a:1f:1a:3f:fb:34:86:e5:0d:c8:bb:
                    e2:cd:75:bb:6a:fa:a2:22:4d:b7:c5:01:5e:1c:d4:
                    01:6d:3c:93:d8:1d:33:fe:00:7d:f3:a3:1f:13:e6:
                    59:5e:66:a5:12:58:7b:3f:b7:3e:2f:53:36:64:83:
                    0a:5c:6b:bf:94:ed:78:f2:f8:d0:38:d8:a5:a7:1e:
                    77:10:48:92:65:d5:2c:57:27:e0:a3:92:c4:65:6d:
                    c0:1d:be:cf:2a:fa:91:91:8b:42:af:01:52:87:65:
                    06:f7:2f:7d:d2:56:66:73:ef:c4:2b:b5:22:06:83:
                    55:82:af:d4:51:5d:20:71:c5:38:0a:48:3d:09:79:
                    38:ac:16:45:46:8e:ae:02:2a:88:d8:e2:37:89:94:
                    85:a0:ea:4f:37:2d:70:bf:8e:83:aa:a4:41:3a:ce:
                    16:55:fd:ab:72:69:34:90:01:20:c9:05:0e:17:63:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:D4:86:C4:C5:8B:37:76:BD:EC:C3:3A:00:E7:F7:D2:39:C1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e6:e8:e9:a0:74:85:64:6e:5a:66:a1:af:a0:ea:ca:39:dd:
         48:24:42:09:e8:4d:b9:d2:b3:f2:f7:53:8a:a9:f7:43:e6:59:
         67:55:c6:6a:51:1b:7b:6a:67:41:ba:c1:74:a3:a7:7e:bb:6e:
         0e:ef:57:32:55:0e:ec:0e:5b:df:39:b9:ce:94:85:dc:fc:e8:
         6e:cb:ed:57:77:a7:a3:40:53:70:0e:f1:34:27:98:87:ab:18:
         92:1c:b9:e7:38:7e:85:df:ac:3d:a2:9b:1c:70:2f:a6:ca:e3:
         e4:97:d5:7e:cb:c7:d4:b0:77:93:0b:95:04:ea:91:4b:9c:fd:
         39:3c:b6:37:1c:7f:2a:f2:ca:b7:5f:d2:9f:f4:5b:eb:9e:91:
         d6:b2:77:f6:0b:19:88:c3:04:17:47:20:ba:e3:16:48:77:0b:
         54:99:10:46:6b:00:d6:83:4f:09:2a:41:28:af:7d:05:5c:fd:
         e3:57:bf:03:bd:29:93:03:3e:df:48:58:31:95:f6:0f:45:b1:
         58:f8:d0:93:2e:7c:38:89:92:9f:b5:48:3b:f2:04:96:5d:ee:
         94:4c:de:83:86:2f:8f:58:19:20:9b:9f:ef:76:ed:cb:81:f3:
         27:a2:2e:a1:42:64:7e:f5:27:65:0d:17:b6:83:11:cb:39:8b:
         ac:0b:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:29 2024 by rpki-client on console-ams.rpki-client.org