Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa
File:                     23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (raw, json)
Hash identifier:          gjm4+EJ3+jLSaP+k8ml9wn5Jetbe6N24WwkEsR9pOwE=
Subject key identifier:   9A:26:06:73:FF:F6:A0:B7:62:86:BB:7C:C0:1E:E1:7D:D5:1E:5D:5D
Certificate issuer:       /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial:       010D0C9F43285847E78F652EBCE12F7864F6C5A0
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     16655
IP address blocks:        74.205.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:65:2e:bc:e1:2f:78:64:f6:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=ff2a549f-b9ff-49e2-b473-4731de29f89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:c1:65:61:92:ab:ef:be:7a:53:24:a1:d8:
                    a6:a4:3b:07:d8:7b:0a:1d:ae:7e:b1:e6:4d:72:12:
                    fa:fd:30:f4:9a:37:10:d0:56:87:5d:33:54:c6:34:
                    9b:2e:c9:20:01:99:e0:ef:24:37:5c:a6:ca:ed:cc:
                    9c:a7:be:28:72:dd:0e:13:d9:1f:6d:3b:9b:f4:b9:
                    72:27:b1:62:cd:78:a7:90:65:84:2d:d5:c5:92:cf:
                    2a:64:90:ae:c5:39:08:dd:b5:ea:9d:75:a7:18:48:
                    d1:d9:c0:05:82:d4:b5:fa:bc:44:2e:b6:2b:b5:9b:
                    bf:6e:51:0b:2c:1f:b6:65:92:cb:b8:4f:99:34:37:
                    69:c7:74:75:1f:9f:bf:5d:3b:18:1f:91:f1:d8:e1:
                    1a:b1:b8:08:c3:99:ce:c2:80:42:d4:31:00:06:dc:
                    85:23:77:9e:e6:e3:35:52:49:71:f4:5d:21:0f:65:
                    54:f0:8a:37:ec:8b:e5:02:a1:80:d6:b4:da:fa:60:
                    9a:81:3e:5c:54:10:2b:21:c3:3e:e2:e6:30:3d:25:
                    69:6e:38:47:47:c0:0c:1a:3c:43:53:0d:00:d7:6e:
                    14:20:68:e3:19:0b:47:5f:4d:c3:b8:15:20:e6:7e:
                    cc:8b:71:e0:7d:27:a0:13:55:c1:03:84:fe:6a:79:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:06:73:FF:F6:A0:B7:62:86:BB:7C:C0:1E:E1:7D:D5:1E:5D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8c:9a:51:e9:61:dc:35:32:3f:f9:e5:53:a9:ad:3e:a0:42:
         de:61:a7:fb:6c:96:9f:6d:e9:0a:30:3d:45:9b:71:4b:cf:75:
         c9:69:be:e8:48:38:6b:89:f7:cf:3b:01:ca:7f:c3:e6:f1:3d:
         23:a9:c0:fc:94:96:cb:dd:a5:f1:b9:b2:60:cd:77:fc:12:f0:
         1f:82:ec:07:47:27:c5:44:bb:cc:39:cb:1f:14:bf:7b:7e:3e:
         db:fc:d4:da:a1:d5:d2:9c:19:2e:86:8a:62:26:f1:e3:25:1a:
         31:d8:e1:a4:06:c7:8f:02:c0:6e:57:44:fc:bc:69:e9:91:d0:
         fc:d1:86:48:64:76:bb:1f:0f:91:60:4f:9f:8d:ea:59:85:b4:
         d0:ec:74:a6:1d:14:7b:61:0a:a2:46:fd:ae:db:8e:d4:4c:04:
         99:81:6f:97:a5:30:0f:5d:7c:e3:61:7f:fb:65:fb:67:fc:e7:
         ba:4b:16:c8:63:32:37:64:ff:74:94:fb:95:a0:31:0e:3b:4b:
         e2:4b:d5:dd:36:94:af:fd:a1:a2:d6:06:d2:0e:d2:9d:6f:40:
         9d:f0:74:b7:5c:a5:6d:63:42:8c:92:e8:0d:b0:0d:24:4a:f0:
         b1:0e:36:29:18:e4:34:d6:00:a7:c9:cf:87:38:2c:7e:4f:ce:
         c5:00:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:23 2024 by rpki-client on console-fra.rpki-client.org