Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa
File:                     8bd691ab-32da-3d38-8979-813d9a45a73c.roa (raw, json)
Hash identifier:          7ENG/Fcn1O49CA+JYWlFOE/bEkTwuF1LXEcFULmUppc=
Subject key identifier:   21:0D:B7:39:F9:40:36:49:00:86:79:2A:84:7D:AB:22:3D:1F:2A:C8
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584849456A5A73EB5937E6D309C0
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     399122
IP address blocks:        74.123.98.0/24 maxlen: 24
                          2602:fcd5:1a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:6a:5a:73:eb:59:37:e6:d3:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=76cbd37c-7e6b-47ff-bfca-117adbded34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:fc:70:17:e3:b7:13:86:d8:b6:1a:ed:a8:
                    1d:dc:c2:26:17:df:84:a7:4e:97:5a:18:41:cd:58:
                    18:a5:83:aa:b4:ef:0a:61:9a:96:f0:20:1e:91:72:
                    a8:30:c6:4f:bf:6d:ec:a1:17:98:2e:a6:75:6d:c0:
                    c4:5b:60:36:a8:14:40:da:c2:26:85:26:2c:67:a7:
                    ea:4d:20:4a:ea:54:d5:f5:5e:94:3a:9a:1b:93:3a:
                    30:4b:c7:7e:75:f4:cf:20:08:38:ad:cd:bf:fd:6c:
                    f7:f7:14:f1:ab:ad:e1:f1:86:3b:08:31:67:db:d9:
                    92:6b:9d:78:96:e4:4e:e5:21:39:79:ed:48:0d:30:
                    25:f9:0d:a0:ec:5c:fd:46:02:05:2e:17:c8:c9:11:
                    7b:a0:fa:98:34:8e:ef:52:5b:cd:69:49:08:28:05:
                    c7:8e:66:06:d0:b3:72:8b:0a:4f:83:e4:c8:fc:ef:
                    c4:23:99:b6:d3:9d:ea:20:e0:1b:49:16:1f:86:98:
                    c8:15:89:c9:06:e7:94:ef:04:66:8f:d0:66:ad:49:
                    83:ab:ba:1e:04:68:ff:93:ab:a7:57:2e:96:71:4f:
                    35:e8:b0:85:8f:d4:17:35:72:f7:4c:4b:7e:8e:d0:
                    40:51:84:34:de:31:e7:ac:2f:6d:36:92:35:c1:56:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:B7:39:F9:40:36:49:00:86:79:2A:84:7D:AB:22:3D:1F:2A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.98.0/24
                IPv6:
                  2602:fcd5:1a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:28:5c:99:2e:f0:5f:5d:15:03:1e:59:e6:4a:ca:41:56:
         2e:b9:98:ab:80:3a:89:17:68:69:5b:0d:29:31:76:a1:27:7c:
         9a:1b:5e:e5:32:58:a5:63:0b:e3:51:91:c0:98:af:5c:3f:3e:
         e3:39:06:40:6b:ef:8e:0f:38:71:c9:f2:33:cc:3c:d9:f7:dd:
         07:42:fa:0f:ce:30:bd:d9:55:1c:88:67:f8:cf:e7:4a:63:f8:
         95:e1:8c:15:d2:25:a4:bb:8f:5f:2e:c7:4d:11:bb:64:fa:d9:
         c1:dd:d1:ce:25:12:30:be:60:e3:0c:5e:d4:95:8f:d5:b8:47:
         8e:dd:8f:38:9f:7b:12:fa:99:06:14:57:70:b9:26:9e:1b:71:
         09:86:08:cd:08:b5:dc:29:83:2a:6e:91:ca:08:40:c1:30:7a:
         af:66:7d:36:2a:cc:05:22:81:ee:b3:bf:b7:62:51:39:4b:4b:
         88:9c:35:9d:ee:09:7f:8c:15:8e:b9:4c:a5:4f:9f:50:ee:04:
         fb:1a:7f:0b:72:22:78:8f:46:6e:66:88:ae:6d:b9:41:58:e9:
         b4:e5:17:e6:ee:2e:f5:d9:ee:02:24:98:9b:84:6b:a1:9b:f2:
         d4:78:9a:c3:a4:43:7b:56:34:e3:67:f7:b3:7d:c9:c0:33:39:
         98:6a:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:54 2025 by rpki-client