Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa
File:                     d708040c-ac45-37b8-b457-55cee02af123.roa (raw, json)
Hash identifier:          jSAZWbVCidzxiQa1u9Fr9jf4j+5ZDp5grv6gtO45YeY=
Subject key identifier:   99:BF:96:E2:28:C2:1C:8B:A1:27:B0:D5:47:F1:33:FF:8C:A5:44:78
Certificate issuer:       /CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c
Certificate serial:       010D0C9F432858457FDDDB65E3C77133EF35F180
Authority key identifier: 38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     31898
IP address blocks:        74.81.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:db:65:e3:c7:71:33:ef:35:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=9608828c-3f09-436f-92ee-3fae068e26d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:d7:53:1c:7e:5e:ec:0f:98:e3:da:a0:2e:
                    15:29:92:9a:e9:da:56:ec:95:20:4f:53:6f:f6:0f:
                    e7:80:fe:4f:33:c3:3c:53:b7:62:16:61:76:c6:1a:
                    fa:26:e0:8a:cf:81:93:96:2a:16:01:55:b9:d3:b5:
                    4c:72:1d:3e:bd:69:5b:bb:0b:f5:a4:b4:a7:0f:43:
                    fb:bc:24:11:dd:ff:03:ce:d7:ba:76:7e:a1:84:a5:
                    59:9e:01:9b:98:38:12:dc:7c:af:c5:bb:61:58:00:
                    83:79:d2:d1:b5:ab:f1:6d:61:90:8d:d5:c2:67:a9:
                    3b:61:44:20:59:d2:83:45:a8:91:6f:47:e4:d8:2b:
                    4d:ce:a9:3a:70:11:02:dc:25:f5:54:6f:fc:f8:ff:
                    6f:b0:d4:dc:ba:ae:e8:f3:71:b8:b8:9f:f0:1f:f5:
                    9a:bb:7d:fc:ba:ff:f5:fe:9b:98:c8:07:b0:67:d1:
                    29:35:a0:96:0e:97:60:db:d0:a1:4a:df:46:c6:15:
                    13:7a:aa:44:34:03:a3:4d:b4:a2:9a:fc:06:47:2b:
                    26:de:bf:24:07:95:4d:35:d9:e8:44:c7:c8:46:dc:
                    34:9a:42:ba:57:74:d7:04:ed:d6:12:91:45:09:09:
                    54:cf:94:9e:cc:b7:0c:a2:35:3d:13:c6:84:f5:33:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:96:E2:28:C2:1C:8B:A1:27:B0:D5:47:F1:33:FF:8C:A5:44:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl

            X509v3 Authority Key Identifier:
                keyid:38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:ea:a4:1d:fe:54:4c:b5:40:54:3c:f6:58:6b:53:4a:21:
         a7:b5:47:7b:67:d3:8d:29:bf:c5:02:49:55:dd:c9:c5:48:e8:
         76:d8:58:2a:5f:3c:fd:d7:20:cb:75:c3:92:04:ae:ee:60:b3:
         18:77:50:d2:f3:32:dd:8f:70:0d:29:67:1a:3c:88:3f:63:a7:
         36:fc:f1:00:b4:db:43:a9:10:19:a5:9a:97:95:a1:b4:36:23:
         86:5e:07:3a:f7:6a:48:9a:f0:e2:fc:38:34:2f:b0:1d:b7:89:
         ee:5d:b1:8e:a1:3c:ea:4b:c0:c2:90:77:6d:dc:79:60:5a:4f:
         4f:35:5e:a4:b3:8e:b3:6d:c7:67:51:23:ad:6c:31:0a:89:ae:
         e2:bf:0b:4d:85:86:a7:ab:36:86:be:86:af:ab:63:44:df:5f:
         bc:4e:88:22:c3:73:2e:e6:50:ff:4a:c7:5b:89:87:24:da:c8:
         c4:7a:02:18:90:63:86:34:47:a6:00:dc:52:56:7e:bc:d0:31:
         23:66:55:ee:0c:cf:45:f9:6f:05:13:1f:53:d1:24:ad:f1:6e:
         8e:fd:66:0c:92:bf:64:5c:53:99:73:4d:38:63:ac:2b:93:ce:
         3e:0e:40:36:2b:47:cd:59:61:cb:99:07:f3:23:81:aa:8d:e0:
         9f:5a:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:31 2024 by rpki-client on console-ams.rpki-client.org