Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
File:                     376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa (raw, json)
Hash identifier:          1xRZjthbb4N7stBN0R5B+hAe4jnIdy6DLBCLBP8l6l8=
Subject key identifier:   06:F2:DC:B7:D8:82:8D:EA:AD:1C:F4:2F:10:39:24:E7:89:9A:04:69
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F43285847C05C14D540E52F06A31D15C0
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     46474
IP address blocks:        74.205.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:14:d5:40:e5:2f:06:a3:1d:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=653a03eb-f3b4-4866-8bec-a895bb8037ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:78:88:ab:57:4d:da:72:87:54:02:c5:fa:
                    29:14:35:ce:6f:8a:08:b2:d7:36:12:54:f3:94:ec:
                    35:1a:bc:08:d5:98:57:f4:f4:97:4c:e8:8d:58:58:
                    8b:a1:58:16:d3:5e:e0:ce:38:8b:85:d9:a0:73:80:
                    d2:cf:34:c5:a6:08:49:3d:2d:fd:cd:57:f0:e7:5f:
                    89:44:f8:17:58:0b:39:07:ef:ea:91:fb:94:11:ed:
                    df:a5:40:94:58:6b:bb:28:cd:1e:d0:8f:02:bc:da:
                    b9:ed:c3:b9:7c:f9:8e:01:4f:6a:ad:b3:9e:be:a0:
                    22:de:73:8c:78:d5:ed:b2:63:aa:1d:5b:e5:21:d6:
                    5b:c0:8d:fd:8e:a6:53:a3:ef:d6:a9:10:c5:0b:b9:
                    09:af:2e:1d:91:23:48:83:c1:1e:4f:b8:86:5e:a8:
                    75:6d:f5:6d:94:91:51:46:b4:35:ec:b6:ac:75:38:
                    8e:91:32:71:78:76:68:4f:40:c2:da:56:b0:91:c3:
                    4d:bb:3c:86:80:a2:bf:3d:db:32:7a:34:e8:c2:84:
                    f3:25:ac:7c:51:c1:ae:f7:69:d2:af:1c:a0:03:48:
                    77:69:6a:97:a8:76:c2:83:45:8c:9a:f1:cd:e7:e0:
                    00:59:95:4b:66:31:bf:5b:38:40:8c:f6:3e:1a:4f:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:DC:B7:D8:82:8D:EA:AD:1C:F4:2F:10:39:24:E7:89:9A:04:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:d7:2e:46:3c:00:a5:56:24:1b:7f:dc:fb:2f:ef:04:0d:
         94:b4:66:28:f7:0d:84:59:52:bb:e3:4c:fb:5a:93:b8:c4:06:
         79:ca:59:91:0c:fc:b0:0d:2c:22:44:0a:79:92:f5:f7:26:85:
         8d:a0:d7:26:f4:82:81:75:49:a7:d3:b5:0d:99:cc:1c:95:90:
         1b:b1:1f:dd:e6:d3:a4:9e:57:e2:2f:0d:30:9d:e7:3b:77:56:
         2f:61:01:62:15:d4:14:e7:34:20:83:2c:5d:f1:72:bb:c8:a9:
         c5:e6:98:ae:93:cc:03:3e:e4:20:07:8b:29:d8:02:38:6e:0d:
         12:e0:b8:55:c9:b4:4b:a5:28:26:4a:3e:86:a9:de:da:1b:49:
         14:a7:1b:4e:8f:73:0b:25:a0:29:87:e7:d5:62:14:45:c4:3d:
         54:e0:f6:b3:23:c1:3d:e9:e8:dc:4e:5d:94:e1:e9:1d:54:cc:
         1a:97:c8:f1:fb:9c:f9:89:5b:d4:55:b0:b0:59:9c:a7:96:26:
         91:cb:91:3b:6c:6e:50:fa:5f:07:7b:ad:f3:8a:f3:7b:b9:3c:
         c7:7c:d0:f4:3a:9e:6f:82:bf:f4:2a:7a:23:94:c4:d4:ef:0b:
         ff:44:58:fe:56:0b:b8:66:d8:23:50:11:c7:29:4d:c2:c9:b5:
         00:33:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org