Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
File:                     d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa (raw, json)
Hash identifier:          Gfuc1oFU+V/VPJ6i+JlEm/TaVn3DsHbLkiyzk6ICq8w=
Subject key identifier:   1A:45:57:2D:CE:87:ED:F9:EA:3A:CF:8F:07:05:B6:16:BB:60:B2:84
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F432858486695B6CB38A8C8CA7DD56780
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        74.120.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:b6:cb:38:a8:c8:ca:7d:d5:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=8b1577cb-7af2-4bbe-9b34-c76b983c63f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:9d:59:b2:7d:95:61:c3:4f:ab:c5:73:96:
                    7b:3b:b7:7d:82:09:13:c9:74:5d:b5:c2:29:2b:f0:
                    0f:0c:3e:07:f4:c3:c2:66:f3:c2:93:ac:cf:21:3f:
                    64:40:41:8c:56:c7:57:11:59:7f:f3:21:cc:ad:f1:
                    2a:f6:9e:59:4a:a6:10:70:9a:ba:7b:1d:62:26:18:
                    c2:a8:af:d7:c9:38:32:73:ae:45:7a:43:38:a5:da:
                    e4:a8:1a:53:71:29:dc:72:61:08:00:20:88:58:88:
                    f4:e0:d4:f4:a8:10:cc:ee:2f:bd:c7:8f:b6:32:f5:
                    0a:c3:76:6f:cf:80:17:7b:f5:0b:b3:52:18:01:06:
                    aa:8b:eb:cc:0a:76:1a:82:e8:bb:9d:bf:59:15:e5:
                    16:ee:88:b3:47:b9:20:8a:cd:c9:99:37:ec:ba:c9:
                    a3:35:cf:b5:d9:a7:f6:09:31:f5:24:a1:d1:e4:27:
                    cd:28:c0:75:d1:8e:f8:b2:c2:ac:32:35:a7:02:71:
                    2f:1a:34:d9:7d:6b:d9:58:f9:23:45:65:84:2b:a0:
                    5a:ba:47:7d:f8:c1:61:4f:e1:9d:54:ee:85:cf:3c:
                    74:7e:87:0b:49:77:7e:74:69:3c:c2:38:bf:09:b8:
                    ee:06:78:5c:ed:9b:5e:33:de:c0:d1:e8:ed:b6:af:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:57:2D:CE:87:ED:F9:EA:3A:CF:8F:07:05:B6:16:BB:60:B2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:f4:71:3c:10:02:7b:cf:40:b6:59:5f:91:f2:fa:93:9a:
         e0:40:b5:d1:69:0e:7e:af:f6:2d:e0:36:09:b3:e0:b7:ab:f6:
         82:4c:9e:d0:34:a9:fa:4c:9e:b8:e8:20:27:e7:aa:65:b0:9c:
         f0:3e:fe:ec:c2:f5:b0:f4:7d:0d:0a:22:9d:ba:7c:c0:6e:e1:
         b7:7d:47:a4:b2:55:e5:0c:fd:8e:41:33:1e:27:85:2c:c9:27:
         f7:93:b9:57:3a:67:c5:c9:8e:4c:1d:5a:d6:50:56:07:52:a5:
         0f:87:c6:78:5a:93:82:2a:32:15:0e:28:f7:5b:b4:1d:31:3c:
         d4:dc:64:45:6c:a1:b3:8d:cc:ef:6e:73:6d:c6:f6:0e:58:77:
         46:9e:e3:aa:e9:be:32:1c:0b:7d:ab:b1:98:2b:ef:6a:8b:65:
         46:25:f1:68:29:e3:8f:05:8a:87:10:e9:18:a0:a8:32:af:02:
         a1:34:35:e7:f6:15:c3:3d:3d:64:12:03:bb:b7:05:d4:f4:02:
         57:3a:46:dc:e7:83:45:03:a9:79:62:38:9c:a8:00:d7:70:58:
         fc:14:ef:86:ea:8f:52:8a:b4:96:44:35:8f:e5:84:a0:77:4f:
         59:52:29:5b:5f:c5:7e:86:61:33:5f:7f:62:50:4f:ae:b8:90:
         7a:9f:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:53 2025 by rpki-client