Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa
File:                     1ce33f06-30a4-32ed-8f59-596eecccf046.roa (raw, json)
Hash identifier:          u0ZY6l2JSh4QxkN8ZmDGGNmM3cJ2PAQmeikZnRBU/Bc=
Subject key identifier:   D8:F4:C1:FA:97:52:27:68:CA:66:4C:94:48:DF:34:25:65:44:24:93
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F432858455B92F1841DD9E9317A200B80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     174
IP address blocks:        74.91.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:f1:84:1d:d9:e9:31:7a:20:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=3db631e4-f6a6-48f0-a78f-d43d67dc123b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9c:13:b4:3e:a8:e1:10:35:bc:21:75:a7:70:
                    48:2d:92:d5:ad:74:9e:43:0d:00:f8:5c:a7:7a:bc:
                    ef:10:0a:92:9a:c2:d4:bd:9d:84:c6:00:64:68:82:
                    70:39:5f:6e:99:4e:ac:8f:99:ca:e2:07:cf:7a:b8:
                    fc:78:4a:c5:23:8d:2d:a8:40:59:60:2a:9e:52:8c:
                    b1:99:fc:80:c4:9e:89:56:04:e6:54:48:58:ea:4b:
                    82:59:55:f8:a6:68:25:c5:d2:da:3d:43:42:35:f2:
                    07:7a:96:e9:fe:08:63:af:ee:27:d6:6e:b2:7c:69:
                    1d:c2:2e:60:8f:ae:95:a7:3c:04:d5:ab:f6:8b:97:
                    51:75:90:ad:ce:2d:74:a3:dc:ea:47:f2:9f:ab:e4:
                    28:b0:23:6f:8d:b1:9a:43:a5:f4:73:c8:25:b6:0c:
                    cf:96:a9:5c:31:88:64:f0:8f:89:39:b8:44:6a:cd:
                    a3:91:d2:bb:1e:29:00:b6:93:2d:7b:9c:d6:b4:c7:
                    6d:24:75:7f:5b:95:b4:e8:9d:5a:be:68:b9:f1:db:
                    59:b5:7e:0e:07:24:3c:f0:86:64:0b:23:09:d8:08:
                    b0:d4:e7:ba:32:37:c5:d4:a4:0f:d2:98:9b:73:ec:
                    5a:53:dc:15:11:21:5b:a7:c1:15:7f:4b:56:34:30:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:C1:FA:97:52:27:68:CA:66:4C:94:48:DF:34:25:65:44:24:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:59:29:75:7c:24:84:6d:1e:23:6e:30:af:3b:bf:d2:6a:
         d1:c9:5a:21:7c:1c:32:fb:40:23:03:05:af:e5:a9:18:c0:ac:
         8d:1e:e9:e7:d6:32:1e:3c:a7:40:5e:0b:cb:df:4e:cf:c2:01:
         71:01:09:6a:a7:aa:87:68:4a:ee:4f:a0:d8:f0:44:bd:22:e0:
         ee:cf:f1:69:31:3e:e5:41:24:8d:c5:01:16:90:2b:9c:65:9e:
         c9:5b:49:3b:cd:13:fa:d8:7f:2d:a9:0a:3c:6e:18:bf:9e:f5:
         be:9a:27:9b:22:6c:4d:c7:0a:a1:4d:d1:be:d0:26:f9:fd:3c:
         d1:21:1f:fc:f0:7c:c6:05:e5:4f:73:26:b9:60:89:78:a1:e4:
         89:43:e3:c0:21:f1:8e:68:74:77:49:4d:b6:4d:de:90:71:b7:
         c6:23:a1:6b:aa:80:e2:56:7f:d2:9d:b8:34:82:94:3d:e5:50:
         a7:52:e7:d0:22:14:04:cc:e2:2a:8e:ae:28:f8:d6:41:26:37:
         f1:b8:5f:ae:e9:ce:96:82:85:72:0b:7e:0d:03:b0:bf:a1:b5:
         c5:68:20:da:7f:e6:53:8a:97:17:a2:7a:a3:9f:cb:c5:da:64:
         41:07:2e:14:58:ae:b9:33:32:6d:c2:52:94:7a:8b:89:82:63:
         f6:17:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:22:25 2024 by rpki-client on console-ams.rpki-client.org