Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/dce03a6b-6f22-336b-8539-f8c44117534e.roa
File:                     dce03a6b-6f22-336b-8539-f8c44117534e.roa (raw, json)
Hash identifier:          4fCp13eBifRFiOQ6bw8mzeP0UoF2Y2Co4HqqhHkiLcg=
Subject key identifier:   5B:37:FC:BA:41:FA:52:C2:E5:22:BB:45:57:76:50:31:AA:DF:58:D1
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F4328584511B58EF31FF0B8D58FDD6A00
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/dce03a6b-6f22-336b-8539-f8c44117534e.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        74.117.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:8e:f3:1f:f0:b8:d5:8f:dd:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=b9f5da1d-73eb-44d3-a937-f37cb42588c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:c4:18:83:2d:93:cb:52:b6:dc:ae:4c:80:
                    b2:23:dd:8f:4f:66:d8:8e:69:ca:4c:dc:40:f5:90:
                    bc:2b:df:ec:89:d6:a9:68:c9:b8:17:ec:05:98:94:
                    9c:c4:82:a3:6e:cb:b1:4a:86:3e:8f:c8:f9:55:07:
                    7c:fc:1b:b8:80:d7:ab:05:96:3d:b6:d4:c8:71:cf:
                    1d:da:79:24:00:1b:c8:88:ff:f1:3b:72:70:c8:d8:
                    69:14:10:b1:dd:b4:36:7b:87:ec:73:93:cf:f1:56:
                    64:69:33:b3:d2:29:12:22:c1:03:ff:d8:f0:6b:ad:
                    57:5f:4d:8f:f5:9c:d8:22:de:09:58:a4:38:99:d5:
                    9a:a5:2a:1d:df:fe:fe:5f:86:a2:22:5b:51:a1:e7:
                    48:ca:db:8e:e9:28:1a:3e:1d:86:b3:0c:6e:5a:6f:
                    87:fc:d8:fa:4a:72:6b:73:b8:ad:8c:95:b6:7a:de:
                    54:71:9c:7f:05:4c:2c:5e:61:a1:44:46:b9:48:3e:
                    9b:0c:32:69:0e:cd:23:af:30:6d:9d:3e:d8:b0:0f:
                    fc:ac:53:c8:1c:24:cf:25:e7:2f:a7:14:f8:77:9e:
                    c9:b3:ae:4a:6c:54:93:ab:ae:70:f9:46:57:81:a4:
                    b8:5a:ce:e5:e7:51:a7:96:d5:02:3f:17:33:97:97:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:37:FC:BA:41:FA:52:C2:E5:22:BB:45:57:76:50:31:AA:DF:58:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/dce03a6b-6f22-336b-8539-f8c44117534e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:a9:89:68:c2:12:7a:e7:6a:48:39:37:97:db:fd:df:46:
         8d:87:05:c5:71:0b:48:65:93:e2:a4:2e:0d:85:2d:59:56:51:
         46:53:7d:dc:7b:8b:57:8d:d6:56:14:27:42:3b:fa:47:98:95:
         a2:98:80:87:d3:06:6c:45:f5:5b:1a:e1:3d:2b:fa:a7:b3:0a:
         da:13:1a:f3:9b:5b:bc:58:29:81:0e:5f:c2:83:90:5a:52:6f:
         7c:60:2b:fd:14:16:d4:76:6c:55:a8:6d:f1:49:48:4c:44:c1:
         0f:e9:d1:99:e0:95:90:80:b7:1d:21:b7:a4:62:e1:65:bf:7d:
         4f:09:97:59:d3:7d:7f:d7:83:85:c0:df:a4:bc:e2:f2:e5:60:
         c9:1b:25:a6:71:d1:3a:ae:88:e2:f9:4d:b7:f7:60:9f:32:fa:
         af:e2:95:51:64:0d:99:9c:4f:1f:45:eb:da:4c:52:92:53:fd:
         8f:88:ab:64:db:49:34:90:9a:62:27:64:1d:6f:44:36:58:a6:
         16:89:56:b9:1b:b3:e3:4c:34:f0:6a:bc:73:b6:c1:07:3a:eb:
         a5:16:06:d3:e8:2a:49:99:94:ec:92:ed:09:0b:48:f3:93:76:
         17:ae:c9:8d:df:a7:55:05:ca:a2:4f:e3:dd:4c:e3:2a:46:ef:
         93:fc:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:04:01 2024 by rpki-client on console-fra.rpki-client.org