Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a9d8845-2282-345a-ad58-831bfd8d7d84.roa
File:                     2a9d8845-2282-345a-ad58-831bfd8d7d84.roa (raw, json)
Hash identifier:          Op0AR/tlVDbXktJnGIc7mCakPr1QJKXaVP86EHX6SqI=
Subject key identifier:   47:F5:C7:74:91:14:C5:AD:9D:94:EC:3F:C8:0C:60:6C:F5:76:CA:14
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584733896397C7922F41EC538580
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a9d8845-2282-345a-ad58-831bfd8d7d84.roa
Signing time:             Fri 13 Sep 2024 14:23:00 +0000
ROA not before:           Fri 13 Sep 2024 14:23:00 +0000
ROA not after:            Thu 12 Dec 2024 15:23:00 +0000
asID:                     54548
IP address blocks:        74.208.188.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:89:63:97:c7:92:2f:41:ec:53:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:23:00 2024 GMT
            Not After : Dec 12 15:23:00 2024 GMT
        Subject: CN=e9ac6d0c-c6e7-44a5-8724-568322d5652c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:97:79:a6:2d:ae:37:43:22:f3:4c:2a:db:90:
                    ac:bd:50:06:32:8a:17:ae:84:49:7e:9e:76:9f:6d:
                    31:af:eb:53:12:3a:5d:70:7f:9d:0a:02:66:86:16:
                    89:7e:53:03:4b:e0:8a:77:c8:53:6e:82:b7:b6:54:
                    68:5d:05:11:da:8b:bb:05:f1:6f:53:b4:aa:af:94:
                    bc:87:74:c0:2f:eb:c7:6e:3d:69:d4:f0:6f:4c:76:
                    95:3f:c3:59:48:55:89:fc:38:a3:68:df:8e:db:51:
                    77:6d:d8:dc:5c:e4:73:f5:d6:52:9a:0a:f7:c6:60:
                    f3:d6:74:5b:5f:3c:98:07:1d:e2:54:70:12:6e:0f:
                    57:94:40:9f:f5:ec:ff:5a:e9:97:b8:a4:2d:94:91:
                    a7:d7:8d:8f:98:56:96:19:8f:18:12:68:22:37:e7:
                    fc:62:9f:85:be:fd:0c:1c:e2:b1:00:6c:0e:1f:ea:
                    35:6a:c6:f5:c9:5d:e4:fa:6e:20:cb:27:ab:12:bb:
                    cb:9f:eb:f0:32:cb:85:f0:75:2b:52:58:0f:c5:e0:
                    30:fb:08:e8:50:4d:ba:2a:54:c7:bb:69:16:12:c8:
                    e7:39:d1:bc:b8:fb:f7:8f:ec:9c:ab:d5:56:0a:f5:
                    af:b1:b6:31:4c:c3:f7:2b:61:0e:b0:62:d3:4f:f7:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:C7:74:91:14:C5:AD:9D:94:EC:3F:C8:0C:60:6C:F5:76:CA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a9d8845-2282-345a-ad58-831bfd8d7d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ba:75:b9:14:c1:1f:6a:a1:26:18:3a:4b:2d:e2:58:76:7c:
         25:a1:a7:ac:29:ca:ce:8e:d4:d4:8d:fc:29:8a:fd:7b:8a:b8:
         f2:d5:d6:f9:23:85:98:e6:53:49:77:4f:7c:c7:c8:f5:47:00:
         f6:86:ce:09:34:a1:80:10:5d:8e:6f:47:de:06:61:d1:cb:5f:
         e3:31:29:b2:fa:f8:95:0b:9f:05:55:ec:63:02:b2:3e:1b:16:
         b6:24:1e:51:c6:f0:1f:b8:f5:69:af:f6:09:8d:c5:3f:7a:68:
         52:1e:f7:6f:11:1b:3f:98:14:6f:84:5e:e6:a1:50:27:3c:39:
         fb:a5:35:0f:c6:0a:33:56:08:b4:76:dd:1c:d6:44:c3:bf:ec:
         bf:74:fe:a1:e7:57:ef:d2:c9:26:51:06:72:5f:d8:02:d0:ed:
         37:4e:b7:8c:e3:41:58:17:3c:56:47:b1:19:6e:dc:0e:98:88:
         db:b9:5e:e3:86:a4:20:c2:41:7a:cc:3b:99:ad:1e:89:c6:d6:
         9e:46:8f:24:16:41:fb:46:03:43:71:05:e6:52:79:b6:70:a5:
         6e:7b:67:4c:7a:57:b2:65:c6:18:b0:44:ff:fb:bb:30:a1:ee:
         e3:86:60:82:d5:5b:6b:f8:be:d0:19:6e:08:33:b5:07:ac:83:
         b7:d0:e4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org