Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/72573332-8ecf-3df1-bff2-26796f3ec00b.roa
File:                     72573332-8ecf-3df1-bff2-26796f3ec00b.roa (raw, json)
Hash identifier:          tuRxCbtTdmctgpxBJsAqe1McKBeUoxHtvIDcgzPJyUU=
Subject key identifier:   43:53:99:AD:F2:83:6E:A7:FF:EE:08:FA:88:74:E9:39:C0:CD:70:2B
Certificate issuer:       /CN=7e3be480-7f34-440b-9382-84a56fb763cc
Certificate serial:       010D0C9F4328584742BB4819CB9727B4168DF600
Authority key identifier: FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/72573332-8ecf-3df1-bff2-26796f3ec00b.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     398699
IP address blocks:        74.117.120.0/24 maxlen: 24
                          74.117.121.0/24 maxlen: 24
                          104.156.40.0/24 maxlen: 24
                          104.156.41.0/24 maxlen: 24
                          170.76.240.0/24 maxlen: 24
                          216.9.168.0/24 maxlen: 24
                          216.9.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:48:19:cb:97:27:b4:16:8d:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3be480-7f34-440b-9382-84a56fb763cc
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=7c75af8b-387e-4fb4-b5bf-828f71cd76c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:04:62:c4:5b:c4:cb:e0:95:57:e2:14:98:
                    37:36:b2:c5:c0:d5:50:1b:7e:d9:5a:af:4b:2c:d8:
                    f6:53:dc:fd:58:21:5e:0f:6a:c6:2e:f9:4c:38:36:
                    fd:6e:e1:c4:a5:ed:00:21:10:af:2e:e0:3b:3b:a9:
                    91:ec:0a:a1:f8:95:4f:8a:bc:d4:6e:0d:2d:56:d3:
                    cd:9a:1a:10:6d:44:69:95:24:19:ca:54:d9:96:62:
                    ab:0c:78:17:9c:c1:6e:e7:42:c5:5b:c9:cb:db:af:
                    f0:5e:01:22:21:d9:36:86:f2:e3:d0:6e:fd:85:db:
                    3d:0f:13:a0:1b:a0:de:9c:51:29:a8:08:69:31:87:
                    87:b4:2d:8e:61:a3:c2:4d:5f:de:e4:ca:24:77:73:
                    a8:8e:56:15:54:4e:42:65:ee:fb:f3:43:54:1d:53:
                    00:7d:07:43:5d:7b:0c:e7:9d:f9:c1:b8:12:a5:aa:
                    6b:7c:19:6e:93:4b:fa:ce:8f:1c:11:32:4b:c1:26:
                    60:68:88:74:e3:66:86:94:61:96:6e:ef:c2:4f:09:
                    38:d0:62:df:ea:d3:5a:ef:6e:64:36:35:69:08:5a:
                    a8:69:b2:27:ff:84:9c:f1:f1:43:43:12:19:73:11:
                    b4:c9:54:ab:d9:c7:57:4b:33:0e:ff:1a:7d:72:f6:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:53:99:AD:F2:83:6E:A7:FF:EE:08:FA:88:74:E9:39:C0:CD:70:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/72573332-8ecf-3df1-bff2-26796f3ec00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.120.0/23
                  104.156.40.0/23
                  170.76.240.0/24
                  216.9.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:ce:47:39:9a:03:64:c8:54:56:bb:ec:0e:88:ed:f4:0c:
         6a:19:1d:fe:2c:b0:90:af:28:c5:3f:84:88:53:34:69:f2:80:
         42:dc:95:34:84:de:db:bb:b2:88:9a:53:bc:cf:5e:58:68:11:
         08:84:29:af:90:e1:9c:44:58:93:b3:21:ff:56:35:fb:8c:23:
         5e:4c:ba:18:62:58:1b:39:a0:87:b6:d6:24:4d:30:d7:10:8c:
         a6:13:22:e5:92:49:c5:e1:9b:71:bd:7d:fe:b7:ab:f6:51:fa:
         51:db:68:56:f6:e7:23:32:2b:b4:df:03:73:52:d8:84:31:a9:
         98:34:37:69:6b:d4:6c:3a:24:f3:f2:51:41:cb:36:ca:bf:eb:
         ff:c1:70:60:ec:4b:98:80:bd:05:10:0b:29:2b:16:c4:92:53:
         eb:7c:21:e2:c4:b5:72:c2:94:9e:1e:35:65:59:87:79:8b:44:
         b6:f3:96:4b:00:7a:c4:d5:e2:2c:07:50:6d:f7:af:c6:64:c3:
         82:19:74:bb:b9:71:2d:7d:28:46:2e:1d:09:90:ae:db:07:d8:
         d7:56:32:42:3b:2d:be:3d:43:68:5f:36:2e:c4:d4:2b:4d:b1:
         7a:88:ba:49:1b:12:60:6b:bf:10:9c:8f:3a:5a:4f:2d:4e:a3:
         5e:1e:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:05 2024 by rpki-client on console-fra.rpki-client.org