Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d86514b6-8eb8-37ea-9210-59c9e8322b83.roa
File:                     d86514b6-8eb8-37ea-9210-59c9e8322b83.roa (raw, json)
Hash identifier:          hkwZYg2bZcfo8qmyHhLdGq/khxPkIpypBp++im8V2Nc=
Subject key identifier:   66:E0:3D:10:35:E6:96:3E:05:E4:07:94:74:2C:4F:3F:EF:E5:46:69
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F7CC06CFA776C5A35140
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d86514b6-8eb8-37ea-9210-59c9e8322b83.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        174.81.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f7:cc:06:cf:a7:76:c5:a3:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=d7db351c-2c8f-4323-853d-7ad811cbc4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4c:0c:01:99:07:ad:af:09:02:5c:cd:91:eb:
                    9c:04:6c:01:6c:48:72:07:f9:e0:4b:6b:9a:3a:f5:
                    05:fd:41:4e:43:48:dd:12:09:cb:19:47:56:a8:0c:
                    6d:5e:be:a3:5e:1e:c0:36:a6:bf:9c:ea:67:5e:30:
                    d3:df:45:2b:c1:3b:41:d2:5d:be:0a:d5:e4:94:47:
                    d4:35:f3:2e:3f:62:24:60:da:a8:99:b8:e2:d1:3f:
                    a7:7e:df:79:18:22:81:62:2d:97:07:01:f4:33:63:
                    27:f1:f6:46:ad:76:7f:70:8c:cf:64:e8:25:fc:0d:
                    a4:2f:8d:92:4f:59:f3:68:7b:d6:ff:4c:ed:84:7f:
                    a6:12:89:af:29:c5:b8:22:24:c0:67:2a:03:fb:d8:
                    b4:82:fe:9b:34:ca:f5:40:4a:4f:12:6e:67:ba:76:
                    25:0b:f6:fc:9e:fa:d0:bc:9b:c2:57:d3:9b:fc:4b:
                    02:57:74:e9:e4:34:b2:92:63:8b:2a:4a:2d:33:ac:
                    6a:57:b1:a1:3a:16:8c:2a:9c:22:c4:40:9a:84:43:
                    88:76:c3:12:53:da:cc:f6:00:d8:7e:93:cd:1e:57:
                    c9:b9:cb:0c:c5:06:87:fb:ac:4f:79:f4:5c:eb:dc:
                    c5:77:4c:66:35:80:9f:86:53:ee:ca:f6:88:93:2f:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:3D:10:35:E6:96:3E:05:E4:07:94:74:2C:4F:3F:EF:E5:46:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d86514b6-8eb8-37ea-9210-59c9e8322b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.81.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:72:42:bb:b8:de:2d:a5:ec:90:14:1c:e4:97:84:37:67:50:
         41:7b:6c:18:f9:4e:ee:56:0a:88:4b:1a:50:47:07:eb:65:1c:
         aa:4c:a3:0e:f4:77:b3:bc:fd:dc:d3:59:29:a9:5a:3d:5d:99:
         c7:56:62:f8:b4:ca:3d:d6:50:29:03:95:85:0f:1b:2b:a6:4c:
         0f:a5:b6:bb:b3:d7:91:43:58:eb:4e:dd:58:b8:5d:b2:d1:39:
         81:ad:b1:7e:c3:f1:9e:56:69:17:af:62:f1:57:74:e6:33:d5:
         a1:c5:3b:6e:c0:da:84:1d:b1:10:f9:5a:c2:d7:9e:d7:af:f6:
         f5:38:01:bf:9b:cb:90:59:05:68:53:dd:87:2f:ae:8b:42:a7:
         88:b0:9b:d3:87:c3:e0:a1:e1:22:5f:59:ca:19:d5:ed:e2:b8:
         3b:56:e8:81:80:5d:6b:6e:5f:70:58:6e:7c:4c:6a:d8:c1:35:
         c8:d3:a9:8e:6d:36:4a:32:46:0c:9a:00:34:f3:66:a3:93:2c:
         41:74:60:60:39:5d:f7:fa:8a:df:30:e8:e4:c2:63:7e:42:73:
         73:30:a0:97:7c:f3:52:62:21:16:1e:9e:de:78:fb:ef:91:bf:
         de:3d:43:36:6f:f9:89:23:5d:ce:e2:e5:95:74:57:fe:8c:87:
         2e:f9:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org