Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa
File:                     b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa (raw, json)
Hash identifier:          9tizodV0f1uBau3rnshQErYiz4ntPle+KLQKGafhWl0=
Subject key identifier:   7E:4E:99:92:B6:A6:69:BC:2A:7B:92:39:AC:B4:BD:A2:17:DE:DE:8C
Certificate issuer:       /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
Certificate serial:       010D0C9F43285845A428B22D4DD7B477CF751640
Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     26395
IP address blocks:        74.51.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b2:2d:4d:d7:b4:77:cf:75:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=d9c8e742-477f-4fe9-be77-ce965ce228f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:93:6e:b4:92:87:25:25:18:b6:69:93:20:
                    d1:63:2f:3c:3c:fa:94:bb:8b:af:2d:41:e1:2a:c2:
                    51:5a:bb:56:fc:46:cb:b0:cb:a9:7d:aa:43:13:2a:
                    7b:3e:3d:9e:09:97:be:f2:4a:3a:3a:83:7e:d1:32:
                    ee:e7:32:e6:0c:a0:c9:72:dd:ac:ad:d9:8f:9a:57:
                    ae:3e:2e:f7:3c:fa:3b:91:31:82:47:57:27:74:b9:
                    4e:88:0e:5e:74:0b:0b:e7:12:77:ac:39:60:7e:b1:
                    54:88:2c:72:0d:13:d2:f4:cc:a4:f0:89:2c:5b:25:
                    23:e1:b5:f8:c9:52:a0:f5:cd:f7:0c:09:c0:c0:63:
                    18:fb:cf:48:ed:3f:b3:3a:c3:b9:a9:8b:2c:83:6e:
                    3c:da:46:e0:33:4b:87:da:35:3d:00:b7:21:35:9f:
                    82:d5:56:0e:ec:ec:60:dd:c6:af:b1:89:25:c7:9c:
                    2b:f0:86:f4:e1:a7:9e:7e:77:3f:00:3d:de:25:21:
                    6c:c5:e9:cf:72:b3:b6:13:38:c4:4d:17:ea:6a:6a:
                    c3:a5:79:1e:c3:00:48:5b:ad:17:26:ef:21:67:2d:
                    36:6f:fd:01:b0:b6:1a:8f:99:7c:e0:b1:df:1e:a7:
                    c4:d5:53:cb:3a:cf:4d:a2:ba:b0:76:67:7c:40:c4:
                    7e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4E:99:92:B6:A6:69:BC:2A:7B:92:39:AC:B4:BD:A2:17:DE:DE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl

            X509v3 Authority Key Identifier:
                keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:be:80:6a:5e:c0:2f:0f:e9:b5:55:66:e4:35:fb:ba:e9:9d:
         7e:10:b3:f1:59:63:54:85:8a:19:e4:26:59:9a:0a:e9:8c:10:
         a3:c5:15:2f:95:09:2a:42:be:76:90:40:cd:7d:a3:43:12:f7:
         3a:d2:1f:f4:c1:09:87:8d:89:07:e3:62:68:2d:a7:be:94:5f:
         f7:4f:7d:b7:89:5b:5e:21:8f:20:ff:ba:84:72:9a:52:ce:e1:
         dc:79:27:1f:ec:64:2f:45:59:8b:02:27:d0:d2:ec:26:a4:7b:
         bd:92:af:94:86:61:c0:5f:c3:0a:4d:1e:3a:5a:d6:86:ab:d1:
         fc:14:ad:0d:77:56:8a:40:0d:a9:dd:34:73:00:ff:3c:b3:49:
         75:51:54:37:55:83:32:31:40:6e:36:c6:f6:11:cb:ce:f4:bf:
         d9:4d:c4:b9:ec:9a:fb:aa:6a:12:fc:5c:7b:08:ac:48:e5:b0:
         bd:ab:cf:31:c7:16:b4:2a:b5:28:0f:de:96:56:6e:25:24:d8:
         08:31:28:17:45:1c:ae:0c:e3:ec:f2:8f:91:90:53:b0:de:be:
         b4:91:ce:b4:d4:de:09:5f:ac:43:69:e0:92:25:f1:cf:74:54:
         cd:3b:af:34:dc:5d:0a:1d:8a:9c:77:6a:c2:6d:0d:9e:ab:c3:
         20:d7:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:01 2024 by rpki-client on console-fra.rpki-client.org