Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c98bfe7-984b-37d4-b7e1-c261b358f577.roa
File:                     8c98bfe7-984b-37d4-b7e1-c261b358f577.roa (raw, json)
Hash identifier:          Yh20ZAGT/RyjLuLhfGu1YxvD3kuJIwNsNoNyISoDGUU=
Subject key identifier:   A7:95:1E:54:26:7F:48:50:25:9A:DC:62:68:F5:BB:1D:AA:90:C5:92
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583932199E445D052A5CBB56CE74
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c98bfe7-984b-37d4-b7e1-c261b358f577.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        74.87.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:9e:44:5d:05:2a:5c:bb:56:ce:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=80f25251-2370-4afe-97d3-ebdda590260b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:5b:27:9d:d2:35:2e:18:d2:57:76:4e:8d:
                    ea:b9:bc:c0:93:2e:94:cf:6a:9c:c7:cd:f5:b4:0d:
                    11:5a:fe:30:4a:9a:2d:41:a4:ef:03:ca:14:51:05:
                    e3:b7:40:76:ca:f6:e1:71:fb:c9:05:5e:77:ad:3a:
                    83:29:82:a2:f2:1c:f5:8d:40:84:55:fc:58:a9:de:
                    ee:70:4c:08:e2:0d:92:bd:70:dd:73:a5:c3:19:79:
                    b6:29:7c:92:77:a7:e5:32:ac:49:4d:69:7c:31:d8:
                    2d:0e:86:e0:24:0c:9d:89:67:a6:f9:ae:70:5e:e8:
                    7a:54:c5:85:b8:de:fc:15:6a:7a:7d:de:de:ba:8b:
                    ee:ed:3b:77:97:d5:c5:8a:47:07:fc:41:27:b3:bc:
                    0c:1e:1c:3c:4f:70:10:58:bd:0b:2f:80:43:43:39:
                    9e:f2:16:fe:be:4e:80:fb:1c:42:62:74:79:b2:9d:
                    1c:65:5c:da:83:84:c7:9b:02:46:c2:c9:a0:01:e2:
                    63:cc:49:69:af:3e:26:54:76:10:e5:57:96:23:a2:
                    cc:d7:c8:7d:06:9d:a9:39:75:34:0d:18:50:c0:13:
                    6b:76:23:68:c7:4f:8b:0a:d6:a7:73:65:74:2e:c2:
                    9e:21:84:8b:c1:90:c3:b0:7d:01:92:44:c2:00:3e:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:95:1E:54:26:7F:48:50:25:9A:DC:62:68:F5:BB:1D:AA:90:C5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c98bfe7-984b-37d4-b7e1-c261b358f577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:9e:a3:56:4c:cd:7b:5f:88:a1:bb:5f:36:e3:ef:5a:52:
         8f:62:b8:b5:16:33:c4:e0:f2:be:f1:02:cc:59:21:c1:d9:b4:
         fe:a5:6a:5e:33:6b:19:b2:20:3c:85:08:00:24:5a:bb:8c:27:
         15:3a:ca:97:55:db:98:16:f9:1b:73:32:5a:db:cd:58:da:ad:
         6d:7d:11:f3:28:b2:f2:a9:85:69:90:fe:48:17:13:14:dd:58:
         cf:b0:17:1c:20:61:04:14:89:bc:e1:45:3f:fe:5a:42:7b:4d:
         6a:00:c7:54:47:1f:cd:37:63:5d:73:66:0d:80:ab:e0:ad:3c:
         81:58:cf:8c:6d:59:97:a1:22:d3:ae:61:ff:23:9f:f4:a1:44:
         89:27:4b:f4:9f:99:9f:ad:c1:b9:2b:2f:22:77:7d:de:1a:41:
         45:59:09:3e:1a:a5:27:29:fb:62:07:3f:de:91:51:eb:f7:40:
         26:79:3b:74:00:04:8a:e0:02:a8:15:ee:d9:22:cb:d3:9f:27:
         07:23:16:ac:8b:f5:53:8a:0d:6a:dc:91:3d:68:29:08:db:39:
         a0:7b:44:c8:66:ca:b9:59:fb:de:36:f3:c8:65:f3:1e:d8:17:
         db:c1:bf:b3:58:8c:18:73:30:5c:98:8a:ec:ed:16:63:7d:c1:
         d9:01:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:52:33 2024 by rpki-client on console-fra.rpki-client.org