Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/68a03cb3-ec1f-3e15-8899-81d0c7e71e19.roa
File:                     68a03cb3-ec1f-3e15-8899-81d0c7e71e19.roa (raw, json)
Hash identifier:          nbAsqFdVyhpe0MqPY7k8isPEjedP/sfU+IW+WGRI5g8=
Subject key identifier:   10:5D:E3:BD:8F:06:6B:6F:01:24:9F:4B:6A:86:61:B5:9C:31:33:B9
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285847338E1C59666B6903AFD11100
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/68a03cb3-ec1f-3e15-8899-81d0c7e71e19.roa
Signing time:             Fri 13 Sep 2024 14:32:31 +0000
ROA not before:           Fri 13 Sep 2024 14:32:31 +0000
ROA not after:            Thu 12 Dec 2024 15:32:31 +0000
asID:                     54548
IP address blocks:        74.208.221.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:8e:1c:59:66:6b:69:03:af:d1:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:32:31 2024 GMT
            Not After : Dec 12 15:32:31 2024 GMT
        Subject: CN=eb4b34ea-9887-435f-9a08-4d52056e6554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:e4:bd:38:b9:2a:8a:f0:20:c9:71:f4:03:
                    17:0e:4c:ed:b9:34:79:85:fd:62:57:2c:6c:0a:b5:
                    00:86:63:07:da:fa:41:fe:ad:02:ed:30:e3:b4:c0:
                    22:61:dd:03:b6:35:da:7f:94:e6:71:7b:b9:4d:12:
                    d2:e5:80:63:19:ef:a4:15:d1:e1:ba:9e:92:c8:47:
                    fd:01:45:ff:43:82:cd:90:ed:ee:ea:12:19:27:6c:
                    96:6b:d9:ba:11:2f:38:c1:bd:78:7c:72:94:69:13:
                    a7:6c:31:25:0b:95:0f:a3:0e:60:b9:a9:0b:7b:f9:
                    5b:1f:42:4e:00:29:ad:5e:2a:d1:11:57:e9:f6:7c:
                    5c:58:f2:d5:53:b2:b5:f3:b9:ab:79:f7:9a:2c:f9:
                    bd:9f:fc:8a:b6:fe:31:d2:8f:02:56:6c:ca:d1:d3:
                    27:57:2a:0e:ff:28:97:0f:5f:1c:70:e6:6e:c0:5e:
                    ef:75:f7:46:88:2d:ba:40:37:4d:24:74:e9:4f:cc:
                    32:03:d4:22:1c:6a:07:04:0e:7d:01:65:9f:7b:8b:
                    1e:58:81:da:39:d6:bc:e2:91:8b:5f:e8:2f:81:b7:
                    01:4f:8a:31:cf:17:58:38:02:0d:46:89:7e:83:83:
                    b8:d0:b2:5e:e9:2a:05:07:ef:2c:5a:62:87:84:f8:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:E3:BD:8F:06:6B:6F:01:24:9F:4B:6A:86:61:B5:9C:31:33:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/68a03cb3-ec1f-3e15-8899-81d0c7e71e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:b3:76:5f:da:94:c2:89:8c:7e:ae:c4:f4:09:c3:83:a2:
         ba:23:74:50:ae:8f:69:d8:12:41:ca:26:9a:53:e5:de:57:0c:
         26:a2:c6:b1:b6:7c:0f:50:77:4d:c0:52:50:43:5c:a2:1f:4c:
         6e:ca:fe:23:ef:65:c4:8f:1b:9e:cb:63:f2:f7:a5:24:1c:72:
         50:e9:e7:93:5c:40:61:1e:34:f4:ab:52:19:cc:e7:7f:e6:17:
         24:85:3c:49:21:da:86:68:2f:73:05:e0:3d:ed:00:62:97:23:
         07:20:60:e3:46:63:38:30:e2:3a:81:77:b4:14:71:d1:6a:4c:
         3f:f1:e5:6c:ac:61:e7:a4:ca:54:ca:b0:17:d1:21:78:d0:fa:
         85:38:52:84:58:80:e2:f6:9a:8e:bf:3d:58:6c:25:d6:7d:ce:
         7b:68:b0:09:19:ea:33:0f:07:ec:90:04:74:27:06:64:7e:78:
         d5:85:52:e8:06:54:42:5e:3f:02:e1:e0:0f:83:ee:94:ae:1f:
         8a:01:1d:6e:ac:5d:da:cc:8d:6e:f5:e8:a0:39:8f:69:31:ac:
         f3:fa:5f:b3:7b:bb:7a:fa:0f:f4:12:13:96:e0:24:53:2c:75:
         52:b3:33:c7:a3:d2:6d:d7:30:0c:63:80:fa:cd:98:79:2f:bb:
         09:87:17:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org