Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa
File:                     8504dbf1-b1c3-3afa-96dc-c510762f1210.roa (raw, json)
Hash identifier:          k8Mw5bYxoO0vTZJR6GUbEgrbPwRIU7Wlk3WzOALVop0=
Subject key identifier:   35:E6:42:17:0A:BD:EB:B0:BC:4F:CB:08:C5:8C:EC:73:4C:AC:8F:87
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB6909233A2210641A4A328
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        174.137.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:92:33:a2:21:06:41:a4:a3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=90fe8d0e-e3ed-45d9-9a90-e0339d94cb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:72:10:7b:45:65:e6:1e:12:ae:c4:3c:b8:
                    80:18:4a:d5:28:3c:73:0c:ef:b9:e2:db:fb:24:18:
                    22:8d:7e:cc:59:32:4b:09:8b:e1:5b:93:49:c5:fd:
                    ff:cc:83:54:43:48:d8:3a:4f:bf:af:73:a3:6f:fa:
                    1e:36:f1:3d:b8:fb:1d:e0:01:cc:e0:22:e1:78:57:
                    0b:ea:79:8e:6b:45:e1:e0:3a:ec:60:12:c6:85:9e:
                    97:53:0e:17:f5:21:15:7a:ae:e0:25:83:31:7d:f4:
                    96:32:d5:ff:9c:32:ed:63:d0:a5:30:96:36:e7:43:
                    eb:7d:a2:ac:95:66:0b:9a:be:0e:35:ef:e7:6a:3d:
                    e8:09:e5:80:35:06:82:ab:7f:b9:95:45:60:f6:9a:
                    d3:34:5c:d7:7b:01:14:52:4b:7e:4f:e8:3b:36:35:
                    1a:d2:6e:06:5d:2b:d3:67:8b:1e:45:07:a0:35:82:
                    9d:b1:5d:58:c5:c3:f0:61:36:ee:c4:dd:3b:c0:ec:
                    a0:f0:12:36:1e:7a:80:8c:90:f3:ac:6a:7a:19:2b:
                    e0:58:e7:62:b2:99:f7:bd:23:f1:d2:60:93:31:0a:
                    0e:8d:74:e0:69:c3:7a:15:f2:71:d5:74:3f:90:f8:
                    30:be:a9:68:cd:4a:21:f8:32:fb:fa:d3:f4:b0:81:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:42:17:0A:BD:EB:B0:BC:4F:CB:08:C5:8C:EC:73:4C:AC:8F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:d3:62:0c:60:e3:e3:da:8f:3b:b4:0b:fb:c3:dc:88:9e:
         b8:dc:fe:29:55:3c:7e:7c:13:99:b1:bf:b1:20:62:c8:ec:af:
         4e:39:a4:6d:51:c6:97:6c:76:05:89:b7:04:c5:81:b9:42:ec:
         1d:55:84:7d:86:9f:66:ea:70:56:9a:25:76:2c:7d:f9:dc:75:
         01:38:12:a5:61:4e:21:b6:4e:79:fd:bb:d0:01:1a:73:c8:8a:
         0f:da:77:1b:52:a5:03:58:89:70:69:93:3b:82:ed:68:cc:c7:
         70:49:23:bf:2d:ed:d8:f1:5c:11:e4:05:db:a5:10:f5:83:95:
         fb:ca:4f:85:b1:06:4a:c9:73:c5:46:18:d1:16:80:00:ce:4f:
         d4:b3:6b:43:76:92:09:57:cd:86:c1:25:28:9e:6a:ee:40:ea:
         b6:f6:e9:de:66:de:a5:c2:8b:98:c8:78:72:3c:34:9c:c4:22:
         77:31:3b:99:bf:55:fb:ba:d0:44:17:9e:92:a8:65:fd:52:f9:
         9f:f3:59:7e:59:de:72:bb:d7:87:4d:85:3a:8e:42:d8:94:16:
         29:e3:ad:13:a0:0a:31:d3:97:d3:49:4e:b9:a2:97:6f:f5:44:
         f2:e5:0d:31:97:54:38:1d:ec:95:7d:94:39:73:f4:18:92:48:
         17:3d:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org