Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/a6460052-5de3-3c91-9d36-794d06b46d69.roa
File:                     a6460052-5de3-3c91-9d36-794d06b46d69.roa (raw, json)
Hash identifier:          fy7JSsP5WidSMKWnwbelNVk105m5pbyIyrX2dWX/Ukg=
Subject key identifier:   C6:C3:05:7D:E4:56:C0:19:ED:51:66:CD:FB:38:5F:D3:A4:9B:0D:83
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F4328584511B58F0477896BF8C80B7080
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/a6460052-5de3-3c91-9d36-794d06b46d69.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        74.117.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:8f:04:77:89:6b:f8:c8:0b:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=94013c4b-730c-43c7-8e7a-20d86a10d016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9a:dd:8b:a4:aa:60:f3:14:88:07:fc:c4:64:
                    9e:8c:17:d6:2b:e8:6e:2e:a9:a6:fe:53:c5:7f:4d:
                    64:b6:71:a4:50:ad:3c:f8:42:c2:4a:45:50:2c:69:
                    60:b1:14:21:f1:ee:32:b9:72:ee:40:56:4c:0e:b9:
                    0f:4c:71:d4:4f:d2:32:d6:7a:7e:04:65:a2:82:ea:
                    be:a5:cc:33:e8:64:be:09:23:8b:fe:62:e6:cd:ae:
                    73:ec:80:ed:72:06:6d:56:6e:b0:ed:8f:a9:c1:ef:
                    23:f3:56:37:fa:60:32:26:e5:d6:8d:50:5a:7d:ab:
                    f3:63:9b:69:15:6b:40:2e:c0:8e:d6:ee:14:47:68:
                    88:7f:da:d4:ef:ed:5a:d8:58:b4:12:cb:17:a8:d4:
                    27:7e:8d:1e:d6:28:26:34:1c:26:bd:06:10:e1:ab:
                    16:e5:4c:f9:b3:ec:7a:04:d4:e0:da:b9:ad:a8:04:
                    84:88:44:64:7f:80:d1:b7:a6:fe:94:f2:98:72:32:
                    39:9e:4d:db:1a:8b:19:ca:ea:e5:01:cc:bb:7f:a3:
                    05:b2:69:72:88:97:6e:d5:a8:06:78:9e:44:c7:65:
                    7d:6f:2c:25:77:d7:46:52:89:80:ee:10:6c:4b:3e:
                    88:c5:43:12:2a:b6:0c:96:eb:df:ef:a1:b0:d4:7f:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C3:05:7D:E4:56:C0:19:ED:51:66:CD:FB:38:5F:D3:A4:9B:0D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/a6460052-5de3-3c91-9d36-794d06b46d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:23:b8:b7:3b:77:af:85:b1:83:1e:59:07:81:00:8a:37:
         c9:5e:f7:06:a7:b3:af:a4:2b:6f:29:26:01:0a:d9:74:a6:c3:
         85:fa:9d:81:ac:61:98:5b:b7:00:a3:ae:bf:73:f1:0e:3f:63:
         bc:76:8b:ee:bb:67:7d:cf:ab:8f:9f:51:53:0c:32:c0:73:c2:
         67:76:c2:be:00:43:01:d0:db:ea:60:ae:85:67:a0:a6:79:65:
         1c:b0:57:6a:c1:2a:30:16:2c:cc:be:db:64:51:21:93:dd:81:
         76:86:6c:21:bc:ae:50:b3:a4:61:45:5a:ca:80:da:d9:91:e9:
         b8:45:ef:62:2b:b3:38:d7:b3:af:4f:f7:70:ec:5f:48:fa:7b:
         ff:07:ed:20:19:b0:b8:aa:f1:c1:8d:12:c9:9e:70:67:05:6f:
         a3:af:d4:3e:88:1f:71:27:ef:fb:a6:5d:de:01:5d:aa:c8:e2:
         eb:43:a7:09:69:dc:6c:7d:17:78:0c:af:e0:d7:1f:af:3a:95:
         5d:5f:01:52:86:b4:3e:52:e7:f6:05:91:c1:6e:04:98:15:fd:
         76:a5:11:3d:0f:1f:70:f5:f3:ce:c7:3d:8f:50:96:a6:15:e6:
         28:46:1c:44:8f:a1:d5:47:3f:f5:2e:44:73:87:01:5c:7f:cb:
         eb:8c:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:42 2024 by rpki-client on console-ams.rpki-client.org