Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/980f3d0a-8387-396d-a5ee-c4812e0b6180.roa
File:                     980f3d0a-8387-396d-a5ee-c4812e0b6180.roa (raw, json)
Hash identifier:          mRmXoQb72/NWGA33ZOBY/vhaM/7Wk+Uapp5ff+KhnNc=
Subject key identifier:   95:A0:B8:69:71:AC:BA:84:9D:01:B7:6A:6C:55:CB:89:5B:3F:83:8B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB8359205872CA8C20AC80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/980f3d0a-8387-396d-a5ee-c4812e0b6180.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        74.216.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:83:59:20:58:72:ca:8c:20:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=1c4754aa-8cb8-4f6b-abd1-f8778bbabcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1b:1c:24:ab:7f:4f:67:52:63:3d:6a:7f:b5:
                    7a:80:f5:7e:9a:ef:c0:1a:22:a0:8a:4e:80:09:11:
                    5c:35:2e:a3:0a:c6:61:ce:57:c9:bb:78:4f:8b:19:
                    89:2f:6a:e6:2b:47:34:e1:18:db:02:73:17:cd:c2:
                    69:3e:73:39:a7:23:4f:1e:ba:e0:45:c1:4a:43:d6:
                    0c:ea:7f:4d:95:af:8b:6f:43:54:42:e4:61:ac:42:
                    a0:f9:54:00:13:4e:46:32:0a:08:b7:e8:22:c5:6e:
                    88:60:e6:1e:8f:fc:37:e4:13:1e:34:2a:34:d6:c6:
                    6f:6a:0e:e6:c4:f8:f5:de:7e:19:1c:55:27:ab:ed:
                    e8:88:70:cc:db:96:57:a3:b3:0d:ba:12:d2:de:61:
                    56:ad:cc:8b:32:0e:fa:b6:75:ce:64:39:51:d1:62:
                    f4:4e:57:5c:a3:ec:9f:bb:7b:1d:59:7f:03:81:b1:
                    c2:f8:4d:ad:34:30:28:83:89:dd:20:3b:90:28:8c:
                    04:04:f3:fa:b3:26:dd:2b:02:2a:51:08:b9:01:05:
                    c3:ad:f3:8b:d0:74:8c:2c:bd:e5:be:ad:24:40:ff:
                    96:f8:52:d2:3c:b1:e4:24:6b:4e:ba:35:99:50:7d:
                    93:e7:b1:16:46:06:4b:ae:ee:5b:60:33:ce:04:d6:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:B8:69:71:AC:BA:84:9D:01:B7:6A:6C:55:CB:89:5B:3F:83:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/980f3d0a-8387-396d-a5ee-c4812e0b6180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:05:e7:e0:df:f3:04:29:9f:6e:33:69:94:61:75:b5:30:
         23:d2:60:62:84:c4:4e:8b:7f:00:36:f7:03:8a:07:79:de:6a:
         b9:99:a3:65:b8:fd:32:b2:11:b5:a3:ad:a3:35:56:7b:10:18:
         85:10:69:78:ae:d1:5c:c8:61:54:86:87:67:d6:e8:a9:94:70:
         86:ee:61:77:c9:86:05:fb:85:b3:5a:aa:52:2f:06:fc:d1:70:
         02:dd:55:14:a9:c1:64:5b:8c:ca:ad:51:2b:15:04:80:10:fb:
         7b:94:aa:93:11:9b:3c:43:c8:de:bf:8a:d4:ab:cf:67:7f:ea:
         93:af:f6:9b:36:d5:1d:96:f5:7d:48:8f:ae:78:37:61:01:7c:
         f0:74:02:bc:e1:6e:c1:79:36:9b:33:a6:cc:5e:c9:7c:b5:a2:
         54:7a:65:94:1d:52:f3:3a:3b:e7:75:d7:20:ec:97:db:19:01:
         37:c9:47:54:c0:92:ed:d4:31:8e:65:21:fa:06:8d:45:54:d4:
         91:ec:10:aa:6c:c9:80:23:27:81:30:36:cf:7c:67:1c:cb:a1:
         23:5b:18:33:ba:c4:19:73:2f:89:9b:53:1a:8e:f8:ee:f2:83:
         16:e0:78:3e:97:08:c9:e5:18:44:b2:fe:f1:2a:7e:05:24:7c:
         8e:27:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org