Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa
File:                     490e40f9-36a1-3d80-91b1-b67f36065073.roa (raw, json)
Hash identifier:          AqdTGCWPYGCQoqOTjbjNfcRNgrnVRsfB4X9NOyvhZnc=
Subject key identifier:   0A:C2:23:72:EA:9C:E4:9F:19:5A:E6:7B:9A:88:28:9E:CC:F3:42:DD
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F432858470A7E9A99C82396F48CA17580
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa
Signing time:             Thu 29 Aug 2024 21:33:07 +0000
ROA not before:           Thu 29 Aug 2024 21:33:07 +0000
ROA not after:            Wed 27 Nov 2024 22:33:07 +0000
asID:                     54668
IP address blocks:        174.137.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0a:7e:9a:99:c8:23:96:f4:8c:a1:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: Aug 29 21:33:07 2024 GMT
            Not After : Nov 27 22:33:07 2024 GMT
        Subject: CN=c74e8479-0129-4422-a4f4-cbecbb08ea8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:30:eb:66:01:14:61:dc:ea:fb:d6:94:c8:
                    74:7f:87:32:b1:e8:04:1c:0a:c1:b8:84:39:1f:98:
                    25:c8:57:ed:c6:b0:b0:09:4c:d5:46:30:cd:d8:b0:
                    02:20:9d:78:17:50:4d:fd:71:88:c8:c3:e6:51:51:
                    da:d3:b5:c9:fe:95:20:7c:22:25:62:c7:a1:71:89:
                    82:f4:e1:fc:cc:13:07:92:fb:ce:38:7e:f0:78:76:
                    ce:2e:f0:b4:e4:1e:8f:5a:eb:6a:93:28:37:51:ae:
                    51:e7:26:03:72:ba:e1:f6:d4:06:46:14:7f:9b:f0:
                    ce:6f:76:59:2e:7e:c6:b4:cf:da:f2:20:b2:75:25:
                    cd:51:28:34:ca:55:64:e4:94:41:c2:2f:5d:00:d6:
                    d8:d8:85:5b:27:13:ef:8e:3a:c0:79:b3:df:fa:4e:
                    3e:b2:e6:01:0c:51:72:6e:aa:50:de:11:78:09:d5:
                    3f:f5:56:6f:bf:b1:7c:fb:3f:eb:76:80:71:31:26:
                    3c:87:d3:47:ca:09:54:bd:81:d1:38:26:39:69:eb:
                    25:13:43:54:ef:1c:0f:dc:75:a0:68:86:63:a1:b2:
                    8c:3e:72:f1:4c:f4:68:46:0c:eb:fd:cb:af:20:7f:
                    a5:3a:b0:ad:76:c6:08:03:80:44:d6:09:74:20:59:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C2:23:72:EA:9C:E4:9F:19:5A:E6:7B:9A:88:28:9E:CC:F3:42:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:50:46:02:86:5e:75:1e:9c:48:91:29:6a:c8:1c:12:59:d2:
         a4:eb:0c:cc:e1:e9:a2:72:a6:da:4f:ba:8d:3a:55:d3:71:83:
         b7:92:46:13:be:1e:44:2b:5a:a3:a2:b6:91:0d:a9:86:6b:15:
         70:08:b6:09:28:bf:2c:6c:0f:85:18:e2:84:62:ac:56:c1:03:
         76:5e:2d:f6:d1:3e:a8:13:9a:13:07:1e:06:be:ea:ae:4b:19:
         03:c5:bc:86:52:09:5d:1d:34:1b:f0:f7:94:b4:c9:c3:3e:9a:
         23:28:9a:b4:71:2e:74:09:87:86:9c:82:13:5c:35:c4:ad:6e:
         a4:b8:23:76:57:45:b6:15:ea:1b:e4:26:34:4d:52:2e:8f:e6:
         73:17:dd:bb:2e:41:df:49:77:49:14:4f:b9:d1:d8:1b:7c:b6:
         ef:91:d4:58:bd:95:51:ae:01:36:69:67:0a:00:18:0c:ac:b1:
         d0:5c:ee:f8:98:48:ba:db:ce:38:1d:c2:b9:08:f9:ff:05:3f:
         b5:05:22:3e:44:fd:80:44:bd:b3:ab:3a:21:ce:4c:8d:41:71:
         23:df:f1:4e:ca:31:09:97:c6:38:c7:5f:d6:9e:2a:2e:8c:5e:
         82:3d:14:9e:b0:14:0a:a0:90:e3:4a:e4:5c:6d:e7:3f:1e:0e:
         37:27:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:27 2024 by rpki-client on console-ams.rpki-client.org