Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/40bdd84a-b4e9-3fbb-842a-4ccfaaea85fe.roa
File:                     40bdd84a-b4e9-3fbb-842a-4ccfaaea85fe.roa (raw, json)
Hash identifier:          hMHzUYII517VIeMvGQiX3SiKVDX0BxalnudcUEIuV9U=
Subject key identifier:   49:EE:34:04:0A:F0:93:AF:30:AD:07:68:12:DF:2C:77:50:12:AD:3A
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285847994672623D46F58D4EAFA540
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/40bdd84a-b4e9-3fbb-842a-4ccfaaea85fe.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     16509
IP address blocks:        74.115.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:72:62:3d:46:f5:8d:4e:af:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=ec4fd95e-6c20-43e1-bc76-7a6d8a226641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:10:9b:8c:61:10:67:ab:ae:29:c5:46:b0:
                    d5:cc:81:e1:76:08:42:5d:2f:a5:88:6b:5c:27:b5:
                    9d:ea:b2:d9:16:2b:14:bb:f9:34:6a:42:9b:13:1c:
                    28:97:b1:84:c5:94:0b:25:35:09:74:2a:21:27:0c:
                    a3:b2:d1:66:51:01:47:52:bd:b0:54:e2:51:1a:3d:
                    1f:3b:aa:cf:3d:5b:69:50:60:67:fc:87:f5:bb:6b:
                    f8:bc:4e:03:98:c3:b6:98:9f:78:82:91:e0:ae:d5:
                    98:bb:64:a4:91:1c:0c:0f:74:84:98:b9:9e:dd:c7:
                    08:c1:16:f4:30:19:d1:43:2a:f9:f1:d3:35:a4:4d:
                    3a:8b:15:c9:1d:63:b2:5c:12:53:0c:ea:54:bf:3d:
                    a7:10:19:26:f3:c8:b9:e0:d1:08:ac:97:56:0b:3a:
                    fb:0a:a5:80:4b:5e:6d:94:28:ad:8f:ab:e4:9c:2a:
                    43:e5:d7:63:41:7f:4b:7d:1e:e9:f1:4b:5f:b9:a2:
                    f0:dd:5e:0d:1b:12:16:dd:8b:39:5f:d7:20:e2:37:
                    63:6a:b4:a9:f4:94:02:52:2b:cd:b5:9e:53:f6:e6:
                    0f:55:43:bf:83:6c:45:da:44:bf:26:65:d2:ee:24:
                    33:7a:f9:eb:27:90:72:9e:bc:2a:25:0a:7b:37:e2:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EE:34:04:0A:F0:93:AF:30:AD:07:68:12:DF:2C:77:50:12:AD:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/40bdd84a-b4e9-3fbb-842a-4ccfaaea85fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:40:d5:83:c7:b4:3d:e6:94:31:6d:b3:ea:b4:4b:9f:4c:
         e7:59:01:a7:ed:31:60:ef:ef:16:ec:f2:ea:ce:a0:5a:cd:21:
         3c:e0:43:41:84:d8:d8:14:4a:4f:83:e4:90:ef:85:20:a4:53:
         c9:04:da:1b:f2:cb:87:be:66:27:68:29:0a:f9:cb:20:e8:83:
         1f:1f:17:55:ee:6a:34:20:f8:80:8c:ab:0e:09:3f:81:df:1b:
         a2:d8:f4:8f:6e:62:01:b3:1d:6e:d8:69:cd:e1:ad:e8:0e:e8:
         4b:e8:b9:6e:69:87:c3:d9:30:78:c9:76:02:ed:51:20:84:5a:
         ac:22:a2:bb:f7:2f:cc:74:9d:f9:84:31:40:a8:f4:f7:32:40:
         4d:89:be:b6:86:5c:f8:1c:54:55:a6:0f:51:b2:73:b3:e1:9b:
         9c:97:2a:7d:ca:47:06:80:80:44:ec:a2:f5:61:48:9c:3e:7e:
         d2:15:17:69:2e:be:db:df:d4:2f:57:db:ed:40:38:a0:d2:cd:
         da:33:88:f6:72:2a:b8:61:38:88:4e:0c:99:25:84:4b:da:74:
         5d:fa:2d:65:15:6b:f2:a4:d3:c0:a9:37:60:5d:d0:4c:bd:fb:
         93:29:56:59:36:1d:5a:94:ba:7c:c0:9b:fd:c4:f5:94:0c:5e:
         fd:da:34:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:15 2024 by rpki-client on console-fra.rpki-client.org