Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/d9f52a12-5ae5-3e66-b66a-d99c00125b0f.roa
File:                     d9f52a12-5ae5-3e66-b66a-d99c00125b0f.roa (raw, json)
Hash identifier:          MgalDBAETJYXaHyKrTiReAfsva692rjRu0J4EQXggrA=
Subject key identifier:   91:62:D3:D2:97:F2:1D:B4:F7:D5:F9:6A:DB:FE:D7:CB:54:B1:58:19
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328583B9D753362A3C5EC42D7188700
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/d9f52a12-5ae5-3e66-b66a-d99c00125b0f.roa
Signing time:             Thu 09 Sep 2021 04:00:00 +0000
ROA not before:           Thu 09 Sep 2021 04:00:00 +0000
ROA not after:            Sun 14 Oct 2029 04:00:00 +0000
asID:                     39975
IP address blocks:        74.119.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:9d:75:33:62:a3:c5:ec:42:d7:18:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Sep  9 04:00:00 2021 GMT
            Not After : Oct 14 04:00:00 2029 GMT
        Subject: CN=6ad13f1f-cf6d-4abe-b2bc-652ebc0779bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:f0:a0:65:a9:11:ca:3a:1d:42:a0:0f:f7:
                    c6:a8:3e:92:2e:e3:09:76:63:e1:01:b9:b9:58:14:
                    3a:ef:52:2b:6c:9b:2a:09:53:4d:45:16:b1:b4:10:
                    54:50:23:2b:a1:5a:28:83:99:81:9a:2c:ab:c6:20:
                    6b:28:25:88:e1:4d:69:35:09:17:e3:a8:79:0d:de:
                    68:66:42:ac:d0:38:93:8c:24:7d:cd:b5:20:82:5e:
                    7b:88:f1:01:61:38:ff:99:fb:67:39:44:3e:69:4b:
                    8b:6a:75:a6:7e:6f:6f:c8:4c:09:ac:85:95:73:a7:
                    9a:3b:58:9c:c2:22:52:b1:4b:9d:e7:40:d7:01:9c:
                    f4:ff:f5:15:50:96:4e:a0:68:7b:b5:86:49:a2:ce:
                    f7:8a:e2:dd:c2:41:52:e3:6c:ac:d4:91:c6:b0:89:
                    e7:2f:04:31:2a:34:21:46:65:aa:6d:1f:5a:9f:9f:
                    70:e2:30:53:90:c6:fb:43:f5:b7:eb:04:a0:d8:24:
                    da:87:61:62:5d:87:5c:90:47:07:c2:dd:26:d2:79:
                    8a:88:8c:a7:57:40:f7:32:b7:74:56:0f:e0:73:ad:
                    31:b9:51:43:46:9e:6f:a3:08:2e:a6:2c:18:e9:25:
                    da:f0:04:5f:2a:82:47:9e:dd:93:d4:57:5d:0f:57:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:62:D3:D2:97:F2:1D:B4:F7:D5:F9:6A:DB:FE:D7:CB:54:B1:58:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/d9f52a12-5ae5-3e66-b66a-d99c00125b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:23:d9:bf:57:3a:b7:45:1d:30:d8:25:bf:4d:d0:e3:cc:
         d9:0d:68:be:d6:54:aa:3e:84:1f:b4:93:ce:2d:60:a7:6c:4f:
         e2:19:82:3c:61:a2:91:4b:90:a1:ea:e2:b4:6e:06:ce:1e:c1:
         8b:fa:12:7c:c4:b5:9d:06:28:c1:eb:15:b9:ff:dd:4e:82:a9:
         24:21:1d:af:68:df:ad:ff:a4:dc:49:48:42:7f:d9:ad:79:42:
         a6:ca:fb:9e:e2:87:a7:1a:31:69:dd:72:03:a0:0e:3d:30:b0:
         09:ec:2c:2d:af:f5:0a:4c:09:f8:c5:23:2d:fc:3b:56:79:0a:
         9f:67:9b:9e:25:13:d5:84:dd:9f:fe:b8:18:96:ab:e1:40:8d:
         22:e2:00:d1:1c:12:7b:7d:9a:c1:e3:c2:a9:71:56:10:32:a9:
         86:cd:c9:6e:ac:0f:bf:e3:15:de:28:ef:48:ad:3a:7c:8d:72:
         bf:e5:0a:76:c1:f3:93:f0:cd:3e:9f:24:01:51:ff:d6:e8:f5:
         a5:37:b8:12:fa:89:65:3c:51:76:b2:a4:21:0c:48:d9:7e:f0:
         c8:96:f1:1d:df:81:bf:59:18:f5:43:cb:5f:94:5b:1c:1a:5c:
         99:b3:05:0a:9f:3e:6e:68:6f:4d:6a:ef:cc:75:7b:d2:51:c2:
         1c:2c:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org