Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/4a07c06f-1fda-384f-aa77-9ee9dfeb1f2c.roa
File:                     4a07c06f-1fda-384f-aa77-9ee9dfeb1f2c.roa (raw, json)
Hash identifier:          y4W2yT0ULreN8u1mHLvXS5WwkyNLV0+k17HGo67U2ks=
Subject key identifier:   3E:79:AF:CF:AE:98:5C:98:B8:33:82:27:61:CD:95:97:75:18:87:A1
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F432858451050296EA19A7E82B5A00CE0
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/4a07c06f-1fda-384f-aa77-9ee9dfeb1f2c.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        74.117.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:29:6e:a1:9a:7e:82:b5:a0:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=f8502d5e-4d50-414d-a044-a88093bfd42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:ee:be:98:09:77:1b:5f:a6:85:3d:63:51:
                    f4:8f:d9:d5:bb:49:65:2c:e5:5f:36:01:81:c6:48:
                    1b:a9:ec:b2:47:ef:86:60:2d:d9:ab:71:c6:3c:5f:
                    b4:21:13:7d:65:20:65:7d:47:07:01:32:4d:1b:d1:
                    00:f7:dc:33:49:a2:7c:b0:19:1e:3d:63:ca:96:9b:
                    cd:ff:01:75:11:56:de:90:dc:50:ad:77:72:df:e7:
                    91:ea:c2:fb:3c:20:d0:04:e1:ae:3f:13:5d:ce:05:
                    cf:79:91:1d:e0:12:b6:a0:34:27:4a:e6:32:61:ab:
                    71:df:4b:7a:82:e5:5a:d5:0e:fe:45:13:3e:4a:36:
                    80:32:45:a6:fa:4d:eb:12:88:84:20:9d:2a:68:2c:
                    8d:b8:c8:33:95:b8:69:63:4f:0c:8f:21:59:7b:69:
                    0f:8b:f0:f2:ce:6c:ce:36:7d:6d:98:01:d9:2f:5c:
                    50:61:67:3f:ef:66:62:ca:3b:24:97:78:c0:6e:01:
                    eb:3d:b7:55:08:49:65:a4:22:de:a4:3e:f5:42:61:
                    b9:47:53:70:29:fb:b8:22:0f:6e:74:9b:d7:20:49:
                    87:ce:74:94:38:25:ce:63:46:d2:4a:ae:5a:67:cf:
                    0d:ef:0d:d6:c1:04:36:01:24:f5:39:c2:1d:54:b1:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:79:AF:CF:AE:98:5C:98:B8:33:82:27:61:CD:95:97:75:18:87:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/4a07c06f-1fda-384f-aa77-9ee9dfeb1f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:67:de:06:96:d6:06:b3:35:e3:1a:ea:5a:7c:4f:a6:33:c1:
         84:00:a1:f9:50:91:41:85:77:a3:ab:d9:f2:a4:1f:6f:47:d8:
         32:4d:7e:99:7f:33:34:9d:a1:b5:d0:8a:41:64:a8:b9:2d:a3:
         e1:06:73:47:8c:1b:fa:b5:69:78:fa:f4:6a:5f:a4:57:1b:e4:
         0a:f9:3e:9a:65:a5:e3:27:eb:96:cb:6d:64:39:d1:80:7c:57:
         99:cc:0a:6e:89:59:99:fe:4e:8b:3a:d8:7f:87:76:50:be:8e:
         9d:48:4a:e4:d6:cf:ec:c8:90:e4:55:44:eb:45:ad:a7:2f:4d:
         2d:26:53:07:4e:fd:59:67:e8:04:cd:ee:2c:05:75:bd:79:1f:
         f5:65:80:a0:14:79:67:bd:7d:e4:73:6f:b6:5d:4c:d4:70:13:
         da:df:6c:33:5f:c6:39:8d:6c:2b:b3:32:f8:d8:a5:a7:52:9d:
         4b:87:61:54:67:3f:13:ae:42:eb:8e:ed:a1:4e:b9:9d:24:7b:
         82:76:74:ed:78:bf:21:f2:36:23:32:ed:38:dd:77:24:be:23:
         3e:23:ef:30:af:bc:4d:4f:27:da:cc:f0:28:de:92:e0:27:2a:
         43:79:0b:c4:46:af:37:6a:ab:ad:63:69:8a:82:69:fe:17:de:
         d0:b6:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:07 2024 by rpki-client on console-fra.rpki-client.org