Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/d30a1c7e-a4c7-3afd-bfd0-b888614a3889.roa
File:                     d30a1c7e-a4c7-3afd-bfd0-b888614a3889.roa (raw, json)
Hash identifier:          ExjR+gjFY1uaQI2rlQopa7aAB1GwubFMyf2SioD2NSw=
Subject key identifier:   38:D6:AA:52:2A:BF:5D:BA:EE:5F:E7:BF:53:69:FB:C3:30:C4:EF:E3
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F432858476C9DBA3B7CD341160DE37900
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/d30a1c7e-a4c7-3afd-bfd0-b888614a3889.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     212238
IP address blocks:        74.91.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:ba:3b:7c:d3:41:16:0d:e3:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ddf742de-6250-4331-986a-0863c0563190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:09:73:ad:07:f1:16:1b:7f:d0:e8:01:18:eb:
                    5f:92:ea:18:d0:d1:3c:b9:2f:ac:58:f7:6f:4c:34:
                    f0:a2:fb:51:0c:fe:3d:25:90:71:70:2d:94:44:02:
                    94:4f:05:77:f4:ac:f3:e9:c4:ee:c8:53:70:99:21:
                    5a:57:78:d4:e7:3f:f5:65:af:b1:5d:3a:9c:3c:f4:
                    c3:f7:6a:2c:96:ab:97:4b:28:4f:d2:63:60:8a:fa:
                    6a:a9:5d:48:2e:2a:05:2c:d1:61:50:09:58:c4:bc:
                    e9:e9:c7:20:18:bd:a4:b7:01:2a:ad:22:8b:ea:46:
                    75:99:7f:35:c1:df:50:b6:95:7b:58:24:1e:d1:a9:
                    d1:60:48:15:b3:f2:ef:1b:55:27:4e:4e:8c:60:c3:
                    57:3b:8d:bd:9c:82:44:1a:0b:67:5d:5e:df:f5:aa:
                    78:6b:b2:ed:eb:17:96:0a:f1:a9:0d:11:e6:bd:ab:
                    17:e0:15:db:17:93:47:f8:cd:90:8f:19:6b:59:ac:
                    2c:05:ad:f9:66:e6:96:c5:c1:0f:8d:42:d1:d0:43:
                    a1:20:c5:7b:f9:2d:b3:7b:d7:66:c6:a7:1b:29:85:
                    b6:45:7f:8d:d1:6c:38:26:14:99:0f:23:75:4e:7f:
                    6f:9a:91:97:65:ef:a7:bf:39:b4:19:1b:23:45:b3:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D6:AA:52:2A:BF:5D:BA:EE:5F:E7:BF:53:69:FB:C3:30:C4:EF:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/d30a1c7e-a4c7-3afd-bfd0-b888614a3889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:de:87:d7:6c:af:17:da:1e:fa:0c:58:45:ec:5a:cc:44:41:
         dc:88:14:b7:ad:f5:e7:f5:83:fd:4c:cf:85:79:b6:08:eb:e7:
         8d:cd:80:0b:01:7e:fe:e1:7f:8f:38:37:f9:b5:bb:0f:59:8d:
         03:40:fe:39:57:6d:de:a4:73:9f:4e:99:7f:51:1e:56:23:fd:
         69:96:d1:1b:31:a2:5c:10:09:c1:7c:51:44:dd:9a:a4:ed:24:
         89:cd:4d:e1:4e:42:f9:57:a5:67:7e:e4:13:88:01:0d:77:f5:
         f9:4a:fd:51:3e:2b:58:89:e5:7d:40:6f:f7:73:e2:dd:17:1d:
         7f:03:72:49:c4:47:ba:f1:4e:7b:06:48:f3:02:29:a6:75:84:
         fe:29:03:d3:e6:a1:14:e8:0d:10:c2:a3:bc:2f:18:5c:29:e5:
         0a:b1:f4:23:30:4b:2e:61:03:38:1b:e4:1f:88:81:49:e8:3f:
         e4:e6:86:58:b7:7b:e2:d2:7e:07:bf:19:7e:22:f7:b0:40:30:
         9c:75:17:1c:49:8e:f5:9e:be:94:82:27:65:08:1e:0a:5b:c4:
         f0:b1:79:2c:4f:50:9a:26:64:48:0f:6a:36:4e:f1:01:18:c1:
         25:0d:23:17:83:fe:74:ea:6c:44:32:bd:23:23:5d:b2:44:e8:
         9c:b2:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org