Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dad3a3a7-d251-3139-9045-5e17b6d97594.roa
File:                     dad3a3a7-d251-3139-9045-5e17b6d97594.roa (raw, json)
Hash identifier:          DembJ/M3qldVQ966VAG5e7qsdW54uHd2h3StFzygY/Y=
Subject key identifier:   42:91:C9:D9:91:0B:0D:74:A3:F9:AB:47:88:3D:95:68:94:35:2B:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1453B87778A1E12621800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dad3a3a7-d251-3139-9045-5e17b6d97594.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33629
IP address blocks:        74.143.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:45:3b:87:77:8a:1e:12:62:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=9a038662-c4d3-4a6a-b795-6233d8f79c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:f4:1d:bb:60:62:e9:ce:3d:35:91:a5:b4:
                    19:ac:90:7a:80:0d:1f:c3:eb:52:fe:88:78:c0:9e:
                    ed:11:8e:7d:71:c4:4c:94:71:30:67:56:aa:49:00:
                    b1:be:c8:7b:63:33:49:a3:8b:9f:75:a1:43:33:2a:
                    8d:be:19:08:c7:1c:19:94:27:50:64:88:96:45:d7:
                    05:d1:1d:4e:84:cf:f2:6d:fc:7d:5d:09:ce:41:71:
                    e9:e8:d7:0a:0a:5e:83:8b:1b:f4:1a:d4:3a:f8:84:
                    7e:6a:0e:16:50:52:7b:19:fa:ef:84:2f:63:de:61:
                    bf:ec:02:58:e9:da:7f:38:2c:ba:1d:2c:b4:85:15:
                    ea:68:e3:b6:05:fc:07:dd:df:e6:69:be:87:0b:3e:
                    23:1f:9c:89:2a:2d:9b:66:1b:77:08:41:47:01:d5:
                    8e:1e:86:68:7c:33:b7:c0:da:24:d0:c5:dd:98:f1:
                    59:28:79:fc:58:d3:58:52:05:73:92:09:05:ef:64:
                    8d:b6:c8:b0:7a:1e:06:91:dd:e0:64:ce:3e:5b:78:
                    b7:95:51:d9:4a:d7:49:30:b1:a8:a9:1e:f0:75:0d:
                    8c:56:8d:ca:be:a3:e1:0b:50:2e:11:15:30:ca:e7:
                    39:6a:ae:1f:23:14:86:d8:30:b6:8a:d4:71:41:1d:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:C9:D9:91:0B:0D:74:A3:F9:AB:47:88:3D:95:68:94:35:2B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dad3a3a7-d251-3139-9045-5e17b6d97594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.143.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a6:90:9b:cb:e3:7e:42:ed:c2:bd:44:36:b2:ee:86:a6:0d:
         07:9a:21:ba:85:41:98:34:fa:fa:a6:fd:4a:15:49:c6:94:b3:
         c7:ed:a9:aa:eb:14:27:35:df:ce:58:3e:a0:7e:8b:61:ee:38:
         cd:2c:76:93:ed:99:53:03:81:85:f3:61:a8:8b:a3:17:7e:99:
         fb:fa:5e:f3:da:78:a6:22:66:80:3b:c3:95:34:df:dc:72:41:
         11:c4:da:c7:8b:0d:22:27:24:cc:77:52:cb:90:4f:cd:2a:8d:
         e0:75:25:ec:37:33:8e:ab:31:6d:27:71:65:ea:4d:45:21:d0:
         83:a5:6d:9d:89:59:0e:ec:e4:e7:18:27:93:5a:b4:ae:4f:77:
         9f:f8:b4:94:91:f0:47:12:39:87:8b:2d:42:f5:b3:a9:9e:c2:
         b6:4d:da:d6:19:33:62:79:65:73:bf:f9:9c:76:89:02:e3:b5:
         56:30:c4:e6:50:56:b4:c9:59:ba:36:0e:ce:26:a2:1f:fe:45:
         64:f5:94:4c:26:a0:41:ff:d8:82:e2:0f:2d:8d:b6:28:5e:75:
         ba:f3:f8:79:ff:17:de:9d:06:0f:2e:e9:34:8c:99:13:53:65:
         61:08:cf:24:98:21:d7:87:99:10:b8:39:28:8d:af:35:98:0f:
         78:34:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:41 2024 by rpki-client on console-ams.rpki-client.org