Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa
File:                     df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa (raw, json)
Hash identifier:          CEHjspOyzugaPqKhMOkg+zeqnLHM1nYYVBH2Z4GpqRQ=
Subject key identifier:   44:7A:79:20:CA:D2:56:30:40:44:CA:56:0B:AE:2B:3C:49:C2:6A:18
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285847CA3F449DD35CF71499BC0380
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        74.207.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:44:9d:d3:5c:f7:14:99:bc:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=6df721d9-fb8c-4525-8fa5-62fedf94c276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:0a:d1:39:22:60:c0:55:f2:bb:d7:87:13:
                    1a:19:4d:9d:1f:cb:53:81:a8:06:89:0f:75:52:7b:
                    3a:89:5d:ab:51:19:39:e7:9f:12:db:9f:d0:86:59:
                    14:2c:72:aa:33:54:fa:4a:d2:7f:59:6d:c7:a4:36:
                    5d:f1:5f:6a:bd:f1:a3:50:f6:ff:04:c5:75:ed:c0:
                    25:52:61:8f:d8:5c:fa:00:ba:4d:8e:1d:14:de:f5:
                    d2:2c:c1:07:03:6a:20:22:23:72:3c:84:7f:d8:64:
                    7a:12:d1:af:48:7a:27:f9:58:65:05:fe:11:9d:29:
                    fd:f5:e1:ac:d6:b1:9c:30:a8:1e:89:4a:a5:21:e9:
                    14:fc:3e:18:fb:93:3c:fd:fc:dd:08:e0:21:58:6c:
                    27:3d:29:f9:14:52:b5:60:d0:80:a5:29:f7:5d:bb:
                    f1:0f:f2:c5:a6:ab:e6:f6:64:da:59:88:36:44:62:
                    dc:40:ec:56:1a:89:7a:8a:fb:03:d3:6a:06:cb:38:
                    99:2c:a9:a1:13:f2:06:a6:68:1a:fd:7b:82:b8:d1:
                    0c:5c:3a:4a:9c:e3:fe:af:bc:d1:88:fd:11:1a:17:
                    92:b3:32:45:04:ba:ef:85:e6:5d:73:f3:87:be:fa:
                    a6:06:d9:9f:2d:fa:44:b6:f3:4f:e8:a2:7a:e7:3c:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7A:79:20:CA:D2:56:30:40:44:CA:56:0B:AE:2B:3C:49:C2:6A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.207.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:06:b0:c6:63:d5:cb:87:f7:85:02:d5:46:ba:93:8e:14:64:
         77:9d:d2:b4:98:d1:c3:ce:97:46:e7:74:ea:ef:04:e8:86:82:
         f1:7d:0a:5f:67:fa:6a:63:f1:c9:d6:9e:2e:55:c6:71:84:f9:
         12:f2:80:9e:63:75:b0:de:fa:94:47:e9:c3:b8:4c:41:bc:29:
         ea:84:ed:44:eb:41:bc:c6:2b:2d:a0:37:9e:b1:e0:c0:e4:1c:
         6d:b3:53:b1:9f:26:ca:b7:62:96:92:10:9a:8a:b5:35:81:25:
         cc:35:22:f2:a4:f4:59:2a:3d:85:07:f6:1f:e8:1f:1a:b0:e2:
         ab:77:88:30:9e:82:f1:ab:3f:fa:59:e7:a4:91:86:80:8d:36:
         10:44:80:1f:fd:be:23:1f:b7:ea:3b:bf:74:66:ad:c8:a1:e2:
         0e:82:12:ed:d8:9a:b4:0d:90:ab:e4:b1:9a:35:53:1b:dd:83:
         46:f4:cd:59:52:c3:d9:de:1f:63:37:d8:1c:bf:5b:43:73:e8:
         3c:9c:39:4f:88:a2:94:b8:0b:47:9a:4a:42:d6:f2:3f:74:0b:
         21:6c:eb:12:d3:51:d7:5f:c9:86:5e:1d:e3:3b:20:3a:cf:57:
         4a:44:db:b4:9a:fc:8f:6f:23:ea:fc:fd:82:cd:f7:01:e9:b3:
         6a:d5:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:24 2024 by rpki-client on console-fra.rpki-client.org