Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bce2344f-b1c0-3b18-9568-66a07b6b4418.roa
File:                     bce2344f-b1c0-3b18-9568-66a07b6b4418.roa (raw, json)
Hash identifier:          fLfA08HYD8DG801jk6evhCiVr1f/L+c3USKxBnX0d6Q=
Subject key identifier:   B4:7F:C9:78:6D:97:75:18:D2:E5:A8:D8:CE:38:D5:FB:44:66:D6:A5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A14563A399963F3802C580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bce2344f-b1c0-3b18-9568-66a07b6b4418.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     36199
IP address blocks:        74.219.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:45:63:a3:99:96:3f:38:02:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=1890455c-b173-4623-9169-b3c2b3988b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:d2:2d:aa:84:ab:81:a1:c3:c8:8e:ab:12:
                    34:91:fd:8e:ca:2f:ec:8b:ca:7c:c8:17:68:12:bf:
                    ae:e7:bf:31:8d:05:bc:b5:a4:bf:8c:55:1c:c1:84:
                    f1:be:94:ad:90:cc:01:37:ad:02:fa:96:83:13:c4:
                    93:1a:73:21:7e:95:97:76:5a:01:9d:85:e6:90:e1:
                    6a:c9:88:e8:35:a0:5c:e7:7d:9e:8f:aa:86:8d:18:
                    f6:60:46:ae:c7:36:57:4c:51:b4:d9:9b:fd:56:f3:
                    1f:5f:27:53:1d:11:27:a7:ed:21:0d:c9:31:4f:cd:
                    37:77:88:b6:4e:e6:fa:d5:96:cc:43:e1:2a:46:8a:
                    9f:fd:ac:12:26:80:c4:92:4d:97:1e:f3:41:d3:0b:
                    97:7f:e4:a4:b7:71:9d:be:1a:ba:cd:21:cf:41:8f:
                    ed:16:d0:b8:a1:28:e3:6c:85:1c:af:88:ed:9d:f1:
                    86:25:4c:6f:19:d1:21:0b:46:e6:1b:de:0e:a4:03:
                    6b:1e:60:e0:bf:2f:53:db:49:5a:28:77:cc:9a:6a:
                    b6:b5:cf:b7:5e:bb:94:69:6c:cb:43:74:3d:13:7c:
                    dd:17:42:38:96:f9:65:82:e3:86:bf:ce:5f:4c:d9:
                    74:a8:ec:fb:e4:6e:24:6c:77:03:2d:18:3b:7e:b4:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:C9:78:6D:97:75:18:D2:E5:A8:D8:CE:38:D5:FB:44:66:D6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bce2344f-b1c0-3b18-9568-66a07b6b4418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.219.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:40:a7:2d:ce:8e:32:cd:bc:7c:a8:49:80:b8:a2:53:c2:55:
         73:0d:51:49:62:52:aa:ef:c8:59:31:a7:f8:43:01:26:2b:07:
         c0:ae:8e:17:23:af:88:08:d0:4c:c2:e8:1a:fa:85:c6:5b:2c:
         db:20:51:ff:78:97:3f:30:04:aa:38:56:60:27:d6:6a:71:fa:
         a2:9b:08:11:e3:75:61:ce:ad:3a:4a:27:71:00:42:81:7e:d2:
         09:aa:19:ac:98:ba:eb:47:2a:8a:2e:1e:d3:2d:3a:8e:ae:8a:
         91:6b:cd:d1:f3:d8:33:e5:4b:60:82:06:9a:a7:92:85:21:c0:
         af:32:2e:d6:cf:b2:0f:e3:6a:ea:02:38:d7:7d:e2:29:53:cc:
         8d:89:96:22:68:ef:cb:ff:4b:4b:8f:bf:21:ae:35:ad:b8:f2:
         1f:4e:1b:08:cb:10:e4:f3:f3:0b:b1:48:ae:f3:56:51:e3:71:
         24:3d:df:e9:da:65:e0:16:4f:6f:45:4d:7e:f4:23:51:14:3d:
         a7:d4:da:fc:b3:58:83:ce:2d:64:0c:8b:45:d1:e0:76:48:69:
         2b:40:82:2a:d4:16:5a:f3:58:2e:08:a1:42:59:48:0f:f0:1a:
         37:d7:cc:2a:ba:02:88:32:f2:f4:ba:74:f4:5d:1e:8c:3d:7c:
         7f:e1:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:36 2024 by rpki-client on console-fra.rpki-client.org