Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f78adad-aafb-384e-b270-f45e03547834.roa
File:                     0f78adad-aafb-384e-b270-f45e03547834.roa (raw, json)
Hash identifier:          biSlGeRirBxDXEVJV9CLqDFVb8UsynsbtN2C/0J+tiI=
Subject key identifier:   EF:4C:9B:3C:E3:C9:A8:B7:5C:DF:24:44:2A:1D:B2:34:A6:63:FA:90
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E63125421917B04B66700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f78adad-aafb-384e-b270-f45e03547834.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11781
IP address blocks:        74.218.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:63:12:54:21:91:7b:04:b6:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=0ef649ab-3260-4751-8221-d10f5401ae43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:50:da:0c:78:54:56:13:89:c5:54:60:d9:
                    cf:f8:96:9d:d6:37:bb:7e:41:b2:49:5b:4b:2b:82:
                    2d:9b:e7:48:39:1e:e8:65:03:f1:70:33:db:9a:1a:
                    67:00:7d:5e:49:b6:16:34:f8:d7:03:16:a9:97:e2:
                    68:6f:97:0c:4e:83:25:0d:75:90:61:b5:ee:b8:c4:
                    42:5f:0f:5e:07:97:b5:52:e7:97:4e:56:7a:0f:b2:
                    a7:ee:67:01:af:80:3c:1c:37:6b:42:64:cb:bd:aa:
                    6b:be:0a:b0:83:54:a1:a3:81:66:bb:ef:71:fa:84:
                    2d:e2:2d:71:77:aa:e4:82:88:3a:47:08:eb:f2:06:
                    a2:e8:e1:1b:b3:ac:3f:38:ec:4e:d6:25:53:90:db:
                    be:18:a2:dc:a8:86:90:f1:c2:62:83:49:cb:e5:4c:
                    2c:4f:72:ee:f8:11:73:f2:e8:90:5c:e1:48:1b:0d:
                    6d:72:f6:fd:50:a7:9c:be:2d:2b:85:aa:0c:6e:48:
                    01:20:77:21:0b:cb:a5:f1:11:f1:56:e7:21:ed:84:
                    11:64:a2:41:77:fc:40:52:93:ab:e5:0d:df:07:c7:
                    f5:7d:4f:e2:b7:8a:df:e9:36:66:39:21:21:6d:19:
                    9a:13:99:14:23:74:37:fa:60:f2:39:4c:a2:28:d9:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:9B:3C:E3:C9:A8:B7:5C:DF:24:44:2A:1D:B2:34:A6:63:FA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f78adad-aafb-384e-b270-f45e03547834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:27:b1:7d:ce:f3:23:cf:81:57:95:26:8e:9e:b1:dd:cf:3e:
         02:00:c5:36:19:74:c6:38:59:37:d2:57:2d:a5:da:51:88:31:
         75:bd:3b:cf:e8:36:61:e3:e0:75:f5:c0:10:d3:bb:34:22:86:
         60:84:fe:0b:44:42:62:ef:1c:54:ba:67:5d:18:4f:8a:1b:a6:
         0d:7b:02:e2:1b:a1:16:c4:fb:06:77:62:dc:aa:b8:5d:ce:c6:
         a3:9b:54:f2:0f:66:fa:88:3e:0d:05:70:e5:17:0b:87:18:70:
         ea:89:ea:75:d4:be:30:fe:db:70:32:d4:70:7c:5c:91:29:83:
         0f:4c:38:3d:53:e3:ab:86:a5:fb:3e:fa:9a:73:f3:e5:40:f6:
         9e:81:bd:c8:41:1d:f4:fc:9f:9b:41:02:e5:e9:cb:68:a9:84:
         80:5a:32:2c:40:07:bf:dc:be:8b:e9:07:09:f9:fa:fb:aa:cc:
         85:fd:ca:ff:cc:a6:8f:fd:8b:2a:43:d8:77:8a:f8:cc:09:35:
         93:47:ad:e0:dd:af:37:8d:d6:1a:18:24:77:3a:c7:aa:24:1f:
         97:75:ba:0a:29:1f:b3:c7:cb:80:29:30:47:51:bb:38:4d:28:
         01:cd:4d:60:a8:73:14:b7:3f:df:69:32:bf:18:a2:11:12:69:
         88:8b:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:14 2024 by rpki-client on console-fra.rpki-client.org