Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/382c49f9-127c-36d4-b620-f38fd1a81551.roa
File:                     382c49f9-127c-36d4-b620-f38fd1a81551.roa (raw, json)
Hash identifier:          tfcWZLJayVwlBeZU1nIvh+2Vp4UFKTolOcUISzMW8Ks=
Subject key identifier:   70:56:72:4C:0B:EB:E1:73:CD:97:25:39:5F:67:A0:E5:DF:6E:68:BC
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285847338927C9C90140FDD4787600
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/382c49f9-127c-36d4-b620-f38fd1a81551.roa
Signing time:             Fri 13 Sep 2024 14:22:32 +0000
ROA not before:           Fri 13 Sep 2024 14:22:32 +0000
ROA not after:            Thu 12 Dec 2024 15:22:32 +0000
asID:                     54548
IP address blocks:        74.208.38.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:89:27:c9:c9:01:40:fd:d4:78:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:22:32 2024 GMT
            Not After : Dec 12 15:22:32 2024 GMT
        Subject: CN=ef10404f-76f5-4a0c-9d02-5c0e99bbb47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:33:12:f8:b7:83:e8:b7:ec:2c:cb:27:05:
                    6f:57:6b:b5:eb:73:97:04:99:d8:df:00:ab:3b:15:
                    6d:71:ec:6c:e0:77:18:74:11:6d:1b:9c:c5:ac:01:
                    02:51:67:17:09:9b:c7:05:e6:b9:02:fc:e7:3c:8a:
                    bb:62:06:53:41:54:eb:5d:b7:81:50:11:5b:c1:1f:
                    6b:48:38:31:8b:5e:c8:4a:f4:de:15:a0:85:a4:e6:
                    c4:1a:45:45:f3:08:a6:11:50:d2:b5:64:12:2c:61:
                    46:5e:04:21:c2:6e:7b:c4:84:c2:ef:95:55:4d:8e:
                    72:04:55:ec:a9:97:d4:c3:a8:bb:5a:0c:de:f1:97:
                    26:a5:e3:c3:55:0f:c3:c2:a4:fe:51:d5:c8:ad:9d:
                    1a:05:ff:ab:6c:07:95:2d:06:c1:d5:02:f3:44:50:
                    d3:2f:38:4a:79:d2:01:38:87:0c:eb:53:33:75:09:
                    74:21:ca:6a:db:28:9c:35:f3:32:e6:7e:ba:ff:6c:
                    d6:37:95:4e:56:cb:ff:af:8b:74:cb:7b:0b:b0:19:
                    ba:60:6e:4f:d8:21:4d:37:01:fe:e6:da:15:54:b8:
                    e3:82:e8:f4:f2:4d:09:79:cb:0c:8a:2f:24:1b:b1:
                    36:29:20:67:43:32:e1:fa:24:58:a7:e4:35:f3:4f:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:56:72:4C:0B:EB:E1:73:CD:97:25:39:5F:67:A0:E5:DF:6E:68:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/382c49f9-127c-36d4-b620-f38fd1a81551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ae:f0:8a:89:77:76:03:8f:53:34:2f:36:a2:40:fb:0e:28:
         8d:1e:8a:57:e1:b3:41:a7:29:51:5f:bc:5a:41:7b:cc:6c:7f:
         27:63:de:03:ed:61:91:63:5d:c5:04:aa:b6:89:cf:96:c4:03:
         40:33:14:3f:d9:98:8d:36:c3:aa:a8:2e:01:32:4e:80:e3:52:
         75:0c:44:f4:c8:f2:6d:f0:18:d9:04:fe:90:25:b5:4b:66:10:
         84:a6:84:a5:27:27:12:16:72:94:68:dc:73:85:65:f2:6e:0a:
         b6:ad:11:e5:2f:cf:1b:43:24:d1:e3:da:a7:a1:7c:3a:89:71:
         bd:83:0b:7e:77:46:f7:ac:c0:f8:08:9c:62:7f:e8:04:77:6d:
         22:6e:12:0c:cf:c2:e3:fc:46:03:88:87:25:b6:ca:30:82:71:
         39:86:84:70:eb:d0:40:2e:90:fe:79:56:07:92:03:f7:5f:e1:
         5f:cb:03:66:d8:da:40:35:16:d3:ab:fe:d7:5e:b9:cc:8c:05:
         86:94:86:6a:49:30:d9:aa:6c:77:45:99:7b:36:51:52:f1:d7:
         ac:d4:06:6c:18:00:ac:43:4c:f3:20:82:3f:3e:b2:05:91:08:
         c0:64:41:6b:c3:f3:7c:03:27:85:e0:23:03:ef:94:6d:d2:5c:
         8a:c9:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org