Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa
File:                     e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa (raw, json)
Hash identifier:          +z7EviyA2IKAJLes3AWvrE76bu5wBHYJCj2N/jRBkWQ=
Subject key identifier:   D0:DE:AD:4C:29:38:56:86:F3:74:DD:8F:34:87:F5:E1:10:AF:FA:F2
Certificate issuer:       /CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
Certificate serial:       010D0C9F432858477BF665F991B03D54E4489400
Authority key identifier: 07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     8075
IP address blocks:        74.200.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:65:f9:91:b0:3d:54:e4:48:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=094e9145-8669-4b32-94ba-e51a65e257bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:4c:8b:34:e0:c2:d8:2a:86:28:df:2b:e8:
                    87:68:20:ce:e7:51:12:48:7f:fe:45:8c:ce:9f:6e:
                    79:67:5f:d4:7c:ca:83:98:60:d2:53:f0:bb:ef:ff:
                    bc:7c:57:a1:c3:73:c6:46:1a:51:bd:45:e9:44:3c:
                    71:4f:0a:71:0e:cc:3e:ab:99:eb:08:7d:63:be:0d:
                    25:31:bf:2f:4e:bd:2b:13:84:36:7f:0e:41:14:8b:
                    23:44:79:79:b8:19:6e:43:b5:b4:20:83:fd:0a:8c:
                    f5:97:3d:20:46:22:94:39:82:f4:ec:1c:aa:4e:09:
                    b0:3f:f1:4e:74:c0:94:51:dd:94:5d:28:06:1c:fb:
                    14:b4:1a:89:17:d8:74:be:7d:cf:e6:41:c5:90:10:
                    57:d0:eb:5c:e0:67:80:57:e0:71:93:78:6c:97:4a:
                    78:c6:a3:fd:d1:3e:a0:7e:b1:82:2d:be:d3:d3:d7:
                    97:df:dd:04:5d:7e:c4:b5:47:a7:23:23:f1:fa:14:
                    be:95:65:c6:3d:ea:3c:f1:0b:2f:28:9e:87:b3:5c:
                    af:16:0f:59:15:7d:6d:e9:e2:da:b3:14:57:33:d2:
                    d4:2c:00:95:42:1a:83:e0:b8:3a:be:19:3d:34:20:
                    5d:24:28:97:a5:c6:cc:96:c4:bd:1f:d0:f3:ff:ad:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DE:AD:4C:29:38:56:86:F3:74:DD:8F:34:87:F5:E1:10:AF:FA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.200.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:85:54:4f:8d:ae:47:02:5b:21:29:cc:77:16:8f:a1:bd:87:
         5d:f5:fb:51:08:df:43:ee:97:07:26:28:c4:04:66:fd:d4:f4:
         54:dd:3f:55:0f:b1:75:57:75:57:9a:1f:f4:e5:cb:b3:15:19:
         4d:08:cb:af:92:5d:38:99:ba:23:57:39:f6:79:2d:61:19:ee:
         0c:3e:42:c8:f6:eb:07:ea:56:f6:56:bf:c2:30:64:a7:e1:c2:
         9a:da:ab:94:de:64:7a:cf:83:53:4f:ab:11:c8:c8:a2:43:37:
         01:85:69:7f:45:03:89:5d:aa:93:59:a5:b9:78:4b:42:c1:d4:
         d3:fc:96:3f:4b:67:c4:40:3c:30:1a:b5:fa:c1:5a:29:f8:7a:
         97:80:80:87:83:b7:bf:0f:b2:3d:54:64:ad:5c:96:fe:32:0e:
         a7:2e:74:8e:27:2d:4f:1a:64:35:ba:9c:d4:69:1f:38:84:13:
         c6:8d:cc:9b:5e:09:67:c5:b3:3a:6a:5c:39:3a:16:40:d2:7f:
         03:0f:0d:85:0a:04:6c:46:f7:8e:2b:64:e7:34:67:2a:de:d4:
         45:63:83:df:3a:a6:1a:e3:9b:b5:6d:59:f5:a3:3d:0a:e9:ea:
         7e:5a:64:a4:cf:58:27:f0:42:59:43:96:ec:c5:72:5e:3f:18:
         a1:f3:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org