Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa
File:                     3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa (raw, json)
Hash identifier:          2sQjkSCqkButxvcx37M6BFoOd545SVwi5cKYCD1ZK8Y=
Subject key identifier:   EF:7E:89:1A:E9:EB:3B:1C:D8:58:F5:EA:7A:4D:7F:6A:07:FD:02:8D
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F432858480A75215D4B052F13DCC26400
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa
Signing time:             Fri 29 Nov 2024 14:00:51 +0000
ROA not before:           Fri 29 Nov 2024 14:00:51 +0000
ROA not after:            Thu 27 Feb 2025 14:00:51 +0000
asID:                     5511
IP address blocks:        74.91.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:75:21:5d:4b:05:2f:13:dc:c2:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Nov 29 14:00:51 2024 GMT
            Not After : Feb 27 14:00:51 2025 GMT
        Subject: CN=028431be-62e8-4c30-aaeb-1c42b991760e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e8:c6:49:00:72:38:d8:8f:77:b8:48:bc:35:
                    f7:a7:80:3f:b2:a9:67:f0:a2:11:57:13:b4:d9:c4:
                    22:6e:44:c3:7a:ab:54:b7:c4:25:e2:66:71:a8:32:
                    18:9f:df:82:74:21:d0:73:f8:9f:93:05:41:be:cd:
                    9c:fb:42:56:ce:11:dd:cb:bf:30:09:88:eb:8e:3f:
                    e3:ef:c4:59:66:63:ce:31:4a:da:31:a0:69:f8:a7:
                    79:7f:41:f6:e2:a9:4f:9a:3e:d2:96:a3:b3:3f:a7:
                    97:2d:0b:4f:97:f5:c1:c4:92:ed:4e:c5:84:34:1a:
                    4e:d3:b3:77:a0:fb:31:30:04:58:d3:8f:5e:50:1c:
                    80:32:a2:6e:52:c1:08:cf:cb:11:70:a0:8f:d1:8e:
                    67:ba:31:64:0d:40:76:99:65:0e:2e:90:53:b8:49:
                    59:22:62:0e:21:6e:41:48:88:e8:14:cd:49:0c:03:
                    23:52:a3:9d:02:91:4e:7f:1a:28:0e:c5:58:6f:37:
                    26:cd:3f:a8:5c:24:f5:f7:c9:e1:9d:4d:4d:16:b0:
                    59:a2:3c:b7:5c:c8:2d:3c:80:66:7d:d3:17:95:32:
                    26:64:65:34:a1:59:c2:98:4b:d6:77:7c:66:36:e0:
                    ac:02:e2:94:69:9c:60:74:27:8e:68:e7:ee:08:e3:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:89:1A:E9:EB:3B:1C:D8:58:F5:EA:7A:4D:7F:6A:07:FD:02:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/3f15acb2-5dea-3ae9-8e7b-9a68d9cb6116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:b7:fa:f6:3c:bf:32:f5:7e:cd:34:0e:d8:9e:4c:8e:80:0d:
         9c:11:93:f2:15:9b:52:e4:9c:78:69:65:fe:a9:2a:dc:ed:36:
         84:4b:0a:99:0d:a3:b6:02:9b:0f:08:5f:fc:e0:fa:42:56:fa:
         fd:fb:4e:8b:c7:50:e9:2e:d1:1a:ad:b6:94:be:2b:2b:7a:b0:
         2a:18:af:b2:e8:b5:d4:11:89:b8:d4:7d:d5:55:f0:d0:8f:ef:
         24:72:8a:76:9b:93:93:5f:78:ed:ff:db:c8:22:a9:9d:b9:9c:
         dc:4e:cc:59:b2:5d:af:78:38:19:03:bc:1b:0c:2a:8e:96:04:
         d5:d5:91:d3:50:84:58:4b:e6:9c:e3:c2:e7:1b:68:56:6a:63:
         3d:7c:e5:58:a3:ca:b3:89:99:0c:e2:ff:d9:72:16:b8:ba:e9:
         08:f6:7b:6d:01:eb:33:e3:db:b0:9e:93:70:12:54:c5:72:d1:
         8e:68:5c:f7:f4:60:ef:91:df:1f:ef:01:fe:64:87:43:29:f8:
         7e:88:2c:c0:84:be:63:2b:ea:76:8f:79:7f:1a:1f:db:59:f2:
         2e:d0:71:54:bb:a5:4e:48:40:73:b2:3f:d3:df:fc:3f:84:09:
         a0:83:c0:38:88:a9:88:15:24:91:48:9d:57:6c:30:1a:b3:1d:
         35:4c:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:42 2025 by rpki-client