Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa
File:                     3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa (raw, json)
Hash identifier:          1GPCcq2KGgi8XOKjh5fSRawFawa9K2mle9ejQarmuSM=
Subject key identifier:   63:88:9D:D3:A3:3B:4E:30:5C:CD:B2:D2:FA:6D:C2:84:53:8C:5D:DE
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F432858456C45D1B88B0D903F208C6900
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa
Signing time:             Wed 03 Apr 2024 12:34:03 +0000
ROA not before:           Wed 03 Apr 2024 12:34:03 +0000
ROA not after:            Tue 02 Jul 2024 12:34:03 +0000
asID:                     5511
IP address blocks:        74.91.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:45:d1:b8:8b:0d:90:3f:20:8c:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Apr  3 12:34:03 2024 GMT
            Not After : Jul  2 12:34:03 2024 GMT
        Subject: CN=30c45574-9d36-4f61-82d1-ffe38d7864ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:57:77:fa:14:1e:bd:cd:90:cd:c4:02:20:
                    9f:c3:92:60:5d:c9:56:ed:8c:20:01:7d:57:ee:6b:
                    76:2f:15:56:81:ca:86:90:0f:7d:52:81:09:2a:af:
                    bd:8f:60:93:38:b6:73:93:f3:2b:96:d4:96:59:7d:
                    ed:c4:6c:3e:93:a9:90:9e:77:b4:d1:dd:22:1c:bd:
                    e9:cf:5d:a9:31:47:b3:d7:57:7d:1b:12:15:b1:c1:
                    ba:c7:7c:d6:70:f8:f0:b8:38:b1:fe:7e:8b:50:c1:
                    46:dc:bf:55:6a:47:76:33:27:88:45:b5:47:1f:e1:
                    a2:e5:7b:91:ba:47:04:c5:d3:c4:33:ac:70:63:03:
                    19:4e:41:67:b4:18:f6:4b:76:9a:cf:0c:b9:21:a3:
                    60:0c:78:61:42:5d:e3:03:b2:c6:74:9f:b1:45:df:
                    38:30:6c:ce:6f:1a:e3:de:01:52:2d:80:e6:90:4c:
                    1a:ea:bf:8a:24:6e:3d:eb:86:51:8e:f3:e9:b3:76:
                    44:15:e5:d6:86:73:c8:33:52:a1:73:02:a7:a3:51:
                    4c:b5:8f:ca:14:b9:a8:d7:42:10:3d:4e:32:37:9f:
                    c7:93:01:a4:37:ab:b3:5e:bd:78:88:31:b9:83:93:
                    eb:95:f9:c1:41:41:2d:13:65:53:16:4a:c5:ee:8a:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:88:9D:D3:A3:3B:4E:30:5C:CD:B2:D2:FA:6D:C2:84:53:8C:5D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:7c:f7:6f:63:81:b0:3e:e3:aa:23:ac:10:7d:66:dd:51:
         c0:30:d6:eb:e4:e5:1a:60:44:25:ef:b0:16:72:c3:57:b9:76:
         ee:9e:b4:fb:95:3b:4e:f7:64:68:64:f3:b7:3d:38:a6:ba:49:
         26:3d:f3:48:e1:ab:7a:4b:54:bc:65:a5:57:fd:c7:bc:4d:08:
         6f:81:6a:61:a0:67:4f:f3:05:7b:01:70:4e:54:af:4e:7d:7b:
         9f:41:31:b2:33:b5:b7:46:6e:c8:f9:08:16:99:55:a6:fa:07:
         2a:3c:68:44:4d:58:d2:c4:33:f1:cd:dc:2d:ba:00:38:d5:ec:
         b8:66:c3:2a:0b:b1:3e:88:32:f9:89:b0:49:56:bb:1b:ad:4c:
         07:22:cb:b1:45:07:02:2b:7e:ee:53:77:74:bc:d9:52:b5:0a:
         42:f8:4e:55:7b:89:70:b6:0b:7e:df:03:bb:4e:da:93:82:98:
         17:18:8f:e9:51:81:35:40:79:95:f4:5f:14:5f:0b:4a:a0:db:
         d2:b0:61:66:69:df:b2:bf:7a:e7:bd:5f:b2:71:9a:e1:71:6b:
         c5:bb:13:5c:36:5d:1a:56:7c:cb:c3:e0:13:e3:eb:1e:ab:2e:
         8f:23:ac:1f:bb:a0:6b:0d:d1:7c:90:cc:31:b1:58:d1:53:eb:
         5b:2c:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:46:50 2024 by rpki-client on console-fra.rpki-client.org