Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/419898d1-a316-3dcf-854d-adb599e2482f.roa
File:                     419898d1-a316-3dcf-854d-adb599e2482f.roa (raw, json)
Hash identifier:          IzEOKn5IU1uHBhiC6L+Ik75iahGSPIABefgV+Uz/R7I=
Subject key identifier:   F8:10:BF:69:8D:0C:5C:6E:7A:9A:C8:E7:54:E2:C9:7A:E8:CE:92:A7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DAAE1C960ADA47DE7F610
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/419898d1-a316-3dcf-854d-adb599e2482f.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        74.87.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:aa:e1:c9:60:ad:a4:7d:e7:f6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=3ff4c560-d4ff-4439-80c2-f2fec58129e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:ec:bb:c0:c8:44:1b:19:d5:57:1a:20:0e:
                    c5:31:12:6b:69:1a:1d:c7:f9:a9:c6:5c:b5:85:1d:
                    ba:32:76:eb:32:94:7e:73:ed:05:fa:05:ed:49:9d:
                    1e:2f:c1:1b:23:90:da:ca:52:21:bd:02:3d:90:75:
                    c0:ec:82:54:be:01:ce:6f:c5:f4:8a:38:4a:f6:dc:
                    2a:52:6c:34:e9:7d:11:0d:de:18:21:6d:6a:ed:3d:
                    d5:25:57:15:59:6c:d2:e8:50:23:3d:6d:13:57:b4:
                    3a:d1:3e:06:38:cd:d5:12:af:9a:11:de:a6:4c:73:
                    bc:52:ac:0a:b5:64:ad:38:3a:e5:1f:22:97:23:5f:
                    cf:ab:52:f4:fb:a5:7f:da:19:8a:7a:14:db:9e:1f:
                    b4:dd:48:f1:49:5c:7c:8a:40:ab:14:56:d9:b3:a1:
                    c7:0e:6b:f3:a5:b9:d7:2c:97:18:7f:11:4c:c6:ed:
                    71:1f:de:2f:49:c8:d9:cd:f4:13:db:0e:16:fa:43:
                    52:5e:3d:97:99:b7:3e:7a:9a:b5:e4:aa:80:f4:89:
                    b0:87:af:d1:9a:10:30:78:60:c1:b9:1c:f2:d2:59:
                    9e:75:51:d5:a4:93:03:a7:cd:21:ef:58:35:0b:8d:
                    6d:e1:91:81:1c:99:2f:31:96:72:25:36:1a:e8:0e:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:10:BF:69:8D:0C:5C:6E:7A:9A:C8:E7:54:E2:C9:7A:E8:CE:92:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/419898d1-a316-3dcf-854d-adb599e2482f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:43:d1:f5:98:0e:e2:84:a5:b9:43:c9:de:7b:3d:57:a8:
         2d:1c:b0:d6:d1:88:99:80:91:5a:95:46:61:39:d9:52:13:64:
         cc:70:92:51:30:07:7d:fe:7f:1e:f3:01:dd:ec:f6:65:c4:40:
         0a:3b:17:00:ae:14:87:04:15:d2:74:0f:01:74:f8:64:e3:b6:
         3d:89:c6:15:47:55:d9:82:14:1c:e8:25:46:5f:39:ff:8b:44:
         35:23:9a:ac:16:2e:e4:11:a4:4c:9f:11:3a:33:8d:24:6a:8f:
         ce:10:05:79:01:dd:4a:47:97:6f:03:24:23:42:98:8f:59:c5:
         5a:43:9e:fc:44:d7:48:5d:11:6e:49:da:da:d6:06:91:66:be:
         be:8a:8e:da:d0:be:c3:bf:38:b6:7a:13:07:c1:ee:6d:4e:a4:
         8f:03:1c:ae:0a:4d:f4:5b:c7:0d:58:5a:43:aa:a1:32:1e:a0:
         36:a6:f4:c2:4d:da:14:79:fa:29:57:6f:40:4a:ec:8c:4d:4d:
         45:12:d9:39:10:2c:34:76:29:6e:75:78:24:0d:9c:76:6c:b4:
         16:53:80:a0:c8:20:21:84:77:9a:d8:4d:a2:c9:4b:51:e2:83:
         f7:66:8b:8d:64:9e:0e:64:8f:03:15:2f:96:c4:21:0a:7c:6c:
         fa:c3:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:10 2024 by rpki-client on console-fra.rpki-client.org