Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/dae5a6d9-48b0-322c-9bed-82b3d5d8157e.roa
File:                     dae5a6d9-48b0-322c-9bed-82b3d5d8157e.roa (raw, json)
Hash identifier:          sHOZqaNpcIMcn+qj0ugh0eu8rr+cMBjLLXCPFEPdCuo=
Subject key identifier:   C4:DB:65:26:81:28:2E:F2:11:62:51:2F:B2:75:19:0F:F7:18:84:56
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F43285847C85FFA180760CE6346806B40
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/dae5a6d9-48b0-322c-9bed-82b3d5d8157e.roa
Signing time:             Tue 05 Nov 2024 21:55:00 +0000
ROA not before:           Tue 05 Nov 2024 21:55:00 +0000
ROA not after:            Mon 03 Feb 2025 21:55:00 +0000
asID:                     8075
IP address blocks:        74.117.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:5f:fa:18:07:60:ce:63:46:80:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Nov  5 21:55:00 2024 GMT
            Not After : Feb  3 21:55:00 2025 GMT
        Subject: CN=60cbe31a-7bcc-4f19-ab3a-55aa13ac9648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:57:d5:79:ed:ca:b4:97:2e:68:e5:66:cb:
                    27:7c:12:33:14:a0:98:6f:c7:17:db:0d:93:0e:3d:
                    5e:b1:72:76:b1:6d:39:86:8b:c7:26:fe:aa:18:8c:
                    7a:10:00:70:61:de:33:f9:37:57:df:c0:7c:52:2e:
                    34:41:c0:9b:81:70:e0:f1:a8:95:d0:ed:94:73:61:
                    ec:99:9f:61:7a:77:ce:2d:86:73:17:21:21:4d:9a:
                    5e:0a:79:7e:b6:0f:1d:f7:a0:1d:b2:f5:da:ba:30:
                    97:3e:66:aa:48:bb:06:b0:3d:90:61:7d:bb:1c:9e:
                    20:75:4c:45:a4:59:b9:56:d5:1f:28:a9:e2:f0:26:
                    6d:59:20:de:e0:d5:96:6f:15:b1:7b:63:cf:4a:73:
                    18:48:d1:9f:0d:c9:b3:75:8c:d5:b2:ee:ac:65:22:
                    6d:b8:c4:a6:ef:b4:1a:b3:b0:a1:1b:d2:ac:3e:3e:
                    0b:ed:71:9a:c2:f5:41:2c:ab:b5:ed:22:c6:ca:24:
                    c7:1b:2c:0c:93:41:07:48:6b:f6:4d:5a:8d:95:9a:
                    fe:09:40:92:f9:37:aa:64:c6:f6:cb:0b:ed:0d:4d:
                    17:f2:2c:87:00:9f:2f:7d:d1:05:85:17:b3:df:a8:
                    15:69:e3:fe:5b:5d:01:e2:a0:9e:cc:d9:40:d0:3f:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DB:65:26:81:28:2E:F2:11:62:51:2F:B2:75:19:0F:F7:18:84:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/dae5a6d9-48b0-322c-9bed-82b3d5d8157e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:8e:a7:b2:9e:5b:cf:78:68:d6:0f:8a:de:58:f1:51:b7:
         5b:2a:cf:ca:7c:42:a7:ef:ae:4c:26:ca:b7:51:13:ee:ea:cd:
         1d:f2:bd:14:76:42:c9:ed:d6:2f:36:b2:76:94:97:ec:01:61:
         8c:83:99:e4:c0:fe:59:62:5c:9c:79:b3:13:d9:47:7c:41:b0:
         f0:6d:ff:94:2f:9f:86:53:96:8c:1a:be:f5:db:b5:30:40:bd:
         42:4f:a8:a3:97:4f:d2:18:a9:7b:22:7b:64:d1:61:ce:58:28:
         9c:31:4b:69:5f:04:2e:1d:48:16:68:3c:6c:cd:37:37:23:45:
         7a:e0:cf:a6:bd:63:f0:71:e8:11:fb:ed:e6:a8:b9:11:72:e3:
         a7:3f:74:93:f9:bb:84:50:65:a9:03:a3:c5:94:e8:ce:35:e1:
         c9:6f:9c:c6:4a:d4:cd:34:c5:99:c8:b3:b8:cc:d8:d4:2a:45:
         86:af:c2:83:92:62:b0:0b:de:37:62:ae:81:3b:0a:0f:4a:bb:
         64:e2:23:7f:b3:5c:6a:78:47:00:cf:d4:e5:c4:88:78:0b:60:
         2e:82:f6:f7:d0:b7:cf:a3:5a:f2:3d:df:0a:2d:1d:0e:b7:f8:
         89:d8:7a:e0:e5:e1:a9:b5:9d:c0:c5:3d:49:aa:9b:39:c6:38:
         6b:ff:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org