Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa
File:                     1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa (raw, json)
Hash identifier:          loCV9UBeSYcnPJJRT3yhBbKBWKWoL9YAYqg80z29x9Y=
Subject key identifier:   88:E7:ED:4F:AF:06:41:BD:F5:0A:8D:2B:D0:40:A2:97:36:E9:0E:34
Certificate issuer:       /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial:       010D0C9F432858474850BE149CA3BB30A9485680
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     13536
IP address blocks:        74.205.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:be:14:9c:a3:bb:30:a9:48:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=eff4dfdb-8482-4f76-89ef-b697f83dbe9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:13:af:3a:20:88:d9:0f:a2:7b:b4:bf:fb:
                    1a:99:d2:f0:42:4e:15:1d:9b:25:02:bf:8e:49:48:
                    09:76:ac:d6:ee:95:03:17:01:99:96:f4:d9:57:c5:
                    b3:93:6d:51:b6:eb:b7:db:c7:72:c9:6f:69:1f:40:
                    8a:2f:d7:ee:34:f3:53:d8:b4:04:70:3c:f5:e5:bf:
                    38:2c:7d:fb:88:47:be:b9:1d:12:43:25:80:da:18:
                    22:5c:6b:2c:c8:af:bf:2f:89:f3:da:ae:5b:a4:7f:
                    33:3e:cb:4b:91:c2:69:a3:2d:a3:35:bf:92:cc:30:
                    3b:09:7f:b3:7c:2a:5e:0b:a8:ed:15:72:10:db:54:
                    30:2d:db:33:62:3a:28:48:36:13:f6:03:14:90:99:
                    8b:72:8a:9e:06:85:7b:82:ed:f2:ae:c7:ca:a5:85:
                    98:d8:ab:d8:03:e7:c2:d2:4a:a9:7a:1c:90:e0:66:
                    ad:44:98:b8:02:95:0b:19:23:2a:5c:36:d8:3e:c9:
                    69:a5:a9:de:c8:ed:dc:84:19:6e:98:39:51:88:7b:
                    70:7d:07:a4:97:10:0e:92:3b:b9:d6:c2:e7:22:52:
                    43:25:9e:fc:74:7b:b4:36:18:b8:e0:19:ac:c6:f8:
                    96:74:21:9e:aa:85:bc:10:ab:d2:d6:b0:48:f6:f0:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:ED:4F:AF:06:41:BD:F5:0A:8D:2B:D0:40:A2:97:36:E9:0E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:42:6c:67:8e:21:a4:87:f0:73:fc:68:09:03:cb:3d:f6:b7:
         a5:57:93:67:1c:37:b9:ec:32:6a:7d:7e:e7:ff:b1:28:99:01:
         5d:34:90:19:78:6f:64:92:bc:ed:ba:bd:72:01:ae:bf:26:6d:
         ce:6a:be:b2:5d:9d:12:45:89:60:7b:75:5a:d8:66:bc:ea:e3:
         4c:17:5e:1b:20:07:53:4e:97:13:7e:6b:88:6b:24:b4:6b:6b:
         1d:c6:5d:64:66:c7:3e:95:29:53:5d:dd:57:1d:77:67:08:52:
         e9:aa:3c:2c:e1:4c:c3:0c:6f:b9:51:76:99:11:92:64:1c:f1:
         33:8a:0c:11:e0:90:f1:de:4d:e6:9f:9e:3b:03:51:3a:e6:af:
         85:de:4b:e6:13:a5:34:86:79:d6:76:d0:fd:fa:6b:e4:5c:2b:
         58:28:91:db:00:8b:00:58:9d:ad:77:9c:cd:e0:1b:53:be:03:
         83:d9:59:78:99:04:ae:04:ab:fb:32:b8:6e:4a:b3:e9:e3:b0:
         84:00:d5:d2:7e:88:8f:83:b0:2c:26:f7:63:65:a9:45:d7:06:
         59:d6:cd:ec:11:2e:fe:cc:f2:89:c0:0d:da:14:b2:61:1f:2d:
         cc:03:cd:80:c7:a4:ff:0e:b2:2e:bd:fe:bd:27:60:a4:74:c3:
         e1:4c:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org