Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a1689ce-248a-3374-aa6f-bc4b92b920b9.roa
File:                     6a1689ce-248a-3374-aa6f-bc4b92b920b9.roa (raw, json)
Hash identifier:          KGDQZAkV0ANgotoweQDrf8o0ZQ8RIotQVKXLaEMltss=
Subject key identifier:   B0:28:77:AD:4E:3A:34:D7:99:F4:FB:3B:BE:1E:2D:53:EA:BE:66:B8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847C1DF5F0041250B0FF2EEBF80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a1689ce-248a-3374-aa6f-bc4b92b920b9.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     393929
IP address blocks:        74.48.102.0/24 maxlen: 24
                          74.48.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5f:00:41:25:0b:0f:f2:ee:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=de1c81d7-1427-406a-a26b-0d60b8198a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:fe:7b:6f:ee:b3:ae:9f:6c:da:4c:d6:65:
                    c5:7f:c5:87:b0:f0:a5:2e:4c:5c:63:46:57:57:f8:
                    b0:25:13:94:86:a8:49:9a:96:9f:26:f6:8b:80:b9:
                    0f:2d:a5:a9:fd:8d:bf:23:70:f7:48:a9:d9:03:4b:
                    9c:43:76:3d:73:47:f5:1e:7a:2e:c3:cc:72:43:92:
                    24:51:22:1a:cb:46:ee:7e:12:9e:70:1f:22:76:99:
                    6e:0e:02:24:51:67:06:da:85:2e:0b:9c:bc:e3:7e:
                    4a:f8:be:93:05:c8:8c:ce:94:51:b9:10:17:c5:38:
                    7a:d8:17:ee:e8:01:0d:57:39:f0:43:93:16:ba:eb:
                    40:cc:c4:1d:de:cf:e6:6c:14:52:bb:d1:dc:59:8a:
                    6b:b9:28:dc:6d:93:da:79:2e:d6:30:fa:8e:95:64:
                    e7:bd:66:d5:c6:6d:3a:3b:9e:3d:e1:c9:96:66:94:
                    9b:2f:c0:af:46:70:ea:d1:c0:fa:2a:09:01:27:f2:
                    c5:fe:17:bb:6a:db:65:0e:a1:b9:46:2a:d0:27:94:
                    c5:bc:6b:65:fa:63:9a:87:eb:5f:b1:66:79:79:dd:
                    6b:4c:be:e1:bf:cb:4c:6f:97:a7:b4:71:d6:0a:b9:
                    54:31:61:cf:28:bf:f9:f0:7c:8b:88:3c:62:b9:75:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:28:77:AD:4E:3A:34:D7:99:F4:FB:3B:BE:1E:2D:53:EA:BE:66:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a1689ce-248a-3374-aa6f-bc4b92b920b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.48.102.0/24
                  74.48.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:67:3a:ae:fc:8c:c9:31:b9:9b:90:1f:04:38:30:df:d7:21:
         41:57:f3:1e:5b:98:04:3d:5a:16:fb:a9:37:02:0e:43:71:03:
         44:28:bb:39:b2:53:7d:4d:69:fd:cc:89:0f:c6:29:bc:8f:b1:
         6e:fe:f6:3e:7a:0b:63:7c:c3:2b:79:39:25:f7:8e:25:5e:50:
         22:18:39:8b:08:24:2a:a7:33:93:71:31:b0:6b:8f:b3:a1:8a:
         ff:e7:53:c6:33:39:fd:3f:e5:ea:5b:09:fa:88:5d:18:c9:e6:
         ba:ac:3a:ee:71:be:4c:77:cb:cb:93:4b:8d:65:b5:19:c9:65:
         c2:dd:20:91:3b:a3:9d:59:c7:6b:fb:cd:bf:82:b8:52:44:f0:
         de:87:a6:2a:44:bb:5e:ee:e0:1f:ac:01:06:f1:25:20:8d:fc:
         69:9f:0e:25:15:d5:42:37:b8:d3:45:2b:dc:99:f8:71:ef:1d:
         bc:9f:08:e2:e1:66:b0:f1:49:74:1c:3d:f6:ea:ed:ff:b1:a6:
         82:f9:db:cb:4b:4a:ff:24:d6:42:ec:46:7e:90:59:32:4c:ca:
         39:be:f2:b8:39:42:20:a8:73:8f:f9:7b:23:b6:6f:38:fa:93:
         91:93:6e:52:93:f6:69:a0:11:c7:89:67:f6:8d:25:68:52:54:
         bb:43:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:06:29 2024 by rpki-client on console-fra.rpki-client.org