Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
File:                     bd706a23-0d52-3069-8efc-b247735d9c39.roa (raw, json)
Hash identifier:          IAzIkbXIIqVh/Snr8z409uCpD8+bo/bYz01regQYiZY=
Subject key identifier:   86:3F:6D:F2:EB:73:25:10:81:29:AE:BD:B9:14:88:62:64:54:BF:7D
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB69018D25D8EAE308BD200
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        174.137.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:18:d2:5d:8e:ae:30:8b:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=4ccfc64a-1ac5-460b-bfca-f36df1be5afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:68:9b:e5:5c:d0:6e:1d:7a:e0:61:58:27:
                    61:0a:3f:d2:9a:09:61:ba:09:30:94:1d:d7:54:0c:
                    c5:e6:3c:89:aa:d6:3e:d3:7e:2c:9a:a1:a7:ab:27:
                    d9:73:16:18:46:21:b2:bb:e4:3d:9b:e6:c9:e5:99:
                    97:90:6e:ab:cb:40:a8:85:70:04:a0:c6:b9:64:aa:
                    f3:4d:bf:73:8d:36:61:f6:34:db:fc:32:c6:fd:e5:
                    79:47:99:b7:87:21:79:e5:98:d3:2d:95:0b:f8:ce:
                    31:a6:47:f2:2f:9f:42:21:44:94:39:77:ed:13:8c:
                    59:93:fe:08:ae:93:dc:65:c6:48:49:83:a4:c8:72:
                    07:b6:35:0a:b7:8f:dc:84:9b:ea:3a:51:4b:1b:c7:
                    85:00:47:2d:c7:69:86:5e:43:d1:31:87:4b:3f:1f:
                    d5:44:85:fc:12:33:0a:c6:40:0f:42:57:bc:8c:6f:
                    d1:68:8c:e2:58:1a:38:81:42:37:6b:f1:d5:87:c7:
                    bd:3b:78:d2:6b:5e:6a:c0:25:a2:cb:35:92:7b:f6:
                    79:e0:c1:78:8c:44:e3:9a:a7:45:aa:b4:54:55:bf:
                    de:cc:f6:20:5e:3d:2e:e5:99:8b:af:8f:90:ae:4f:
                    fa:ad:6f:9f:d7:79:95:42:e9:ac:ae:c8:79:4a:b0:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3F:6D:F2:EB:73:25:10:81:29:AE:BD:B9:14:88:62:64:54:BF:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:42:ce:91:c5:bb:19:f3:68:86:cc:53:4f:48:a1:2a:5e:
         86:3c:61:69:27:f5:7f:3e:5f:07:ac:7d:2d:19:2b:b5:26:fb:
         c3:df:f1:31:65:db:78:53:ff:b5:d1:3e:7d:2f:a3:0f:a1:c7:
         6f:9a:4f:3b:77:c4:8b:02:d2:8a:90:a4:2f:9e:62:bb:1a:a3:
         a2:91:83:e2:b2:de:10:70:eb:00:3d:e8:31:74:67:f7:af:93:
         52:bb:b1:4f:68:13:4c:ab:cb:22:a0:18:6a:75:33:fa:36:57:
         d1:dc:b1:b5:33:4a:60:c0:06:d1:f6:34:2c:12:10:51:32:6e:
         1e:60:31:20:ba:c9:f9:3c:a0:e2:3e:61:5e:f1:cf:51:d7:2c:
         72:ea:e8:32:95:28:c6:33:1f:35:fb:2b:a6:42:a8:c8:f5:7c:
         95:96:aa:b2:50:80:a2:2f:82:91:21:80:65:8e:66:45:b1:4e:
         6c:47:48:93:e5:c3:39:f3:70:78:81:37:20:fc:6f:9e:f0:66:
         d8:de:bf:51:3d:f0:11:60:9b:0a:2a:39:18:03:51:f8:60:ad:
         1d:77:66:1a:69:34:56:22:10:b9:26:2b:38:cf:f0:62:6c:8b:
         f6:79:91:3e:a4:c0:18:4e:cc:87:00:f6:1c:a0:65:75:d6:f0:
         2c:d5:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:07 2024 by rpki-client on console-ams.rpki-client.org