Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/195b0bab-7a91-3f7e-abea-db7942bdc197.roa
File:                     195b0bab-7a91-3f7e-abea-db7942bdc197.roa (raw, json)
Hash identifier:          BxuAihlox2WOTIIBiOrsajPW3n0Wcd0W3rMqSE6T4gg=
Subject key identifier:   9C:F8:0B:B9:4A:A2:B6:FB:DD:64:D3:70:5D:8E:97:9F:71:8D:60:DF
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285844F8955FD93CD4E59FD2EFD000
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/195b0bab-7a91-3f7e-abea-db7942bdc197.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     395649
IP address blocks:        74.113.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:5f:d9:3c:d4:e5:9f:d2:ef:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=6542fd81-358c-426a-8407-224cad4a9776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:23:0b:06:fe:ed:78:f8:79:85:c5:85:66:17:
                    6e:a8:50:a9:e6:fd:8a:3c:c9:bf:ec:19:b0:c7:48:
                    df:be:1f:12:6b:46:6f:aa:e5:4a:0d:c8:36:47:f9:
                    74:42:03:20:cb:3c:6b:c9:b9:50:e8:5c:7a:16:a6:
                    a0:71:11:63:5c:fe:ad:a4:25:09:02:f7:06:31:48:
                    83:77:32:be:37:62:a9:ee:4c:42:9f:5b:d8:72:83:
                    bc:4f:bb:6e:0d:36:38:48:95:0e:9d:f5:f2:20:bc:
                    ec:a5:c0:23:c5:f6:a8:ca:ff:1d:85:13:f7:97:58:
                    28:0b:d7:b6:c9:0c:af:a3:89:31:f2:d8:d2:e6:89:
                    31:78:75:cd:de:aa:0a:7b:87:24:32:06:fb:49:db:
                    0a:e2:fc:85:f5:76:03:73:fe:29:e5:fe:2d:f8:ea:
                    3e:c8:49:cd:48:d6:00:51:06:1f:b5:06:1a:80:0f:
                    b7:8b:b2:d6:9f:89:a1:0a:e9:37:1f:68:fe:93:23:
                    e8:19:4f:ab:c0:71:7c:ae:6d:2c:cb:1e:24:7d:fb:
                    c2:28:ef:68:49:3b:74:fc:ba:23:2a:02:36:26:1b:
                    16:f3:95:9c:80:45:7e:70:72:08:3e:8e:27:92:9f:
                    82:c7:cc:7e:91:32:c3:a6:1b:52:0a:dd:c7:a2:88:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:0B:B9:4A:A2:B6:FB:DD:64:D3:70:5D:8E:97:9F:71:8D:60:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/195b0bab-7a91-3f7e-abea-db7942bdc197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:a9:f3:10:36:3c:f6:c3:de:f8:c5:62:b2:a6:19:5b:d0:
         45:c9:fb:29:91:6c:f9:50:fe:55:c9:73:c2:0d:b3:3f:78:af:
         d6:6e:a0:5c:71:1f:32:fc:e1:29:2b:f8:18:a1:f9:32:91:23:
         49:34:2b:90:c2:5e:ab:bd:f1:85:b2:ed:79:5f:45:e8:6b:3a:
         0c:e0:09:05:6d:71:db:90:47:b5:bb:48:fc:96:26:c3:e6:f0:
         1d:9c:62:a0:76:5a:75:19:01:72:80:40:3d:34:4b:cb:44:86:
         61:64:81:0c:01:db:cb:3c:80:24:0f:a6:2a:c1:25:4c:93:38:
         21:08:39:a8:8b:0f:52:81:43:1a:64:ad:d2:82:5c:cb:61:ff:
         5a:c6:17:86:37:18:8f:42:9c:28:54:07:6b:de:e5:43:dd:32:
         d9:3e:24:a0:04:ec:b9:9e:2f:53:a0:52:85:bd:17:cf:bc:a7:
         b0:d9:56:de:88:9a:e6:fe:03:21:a2:28:aa:8e:3b:8c:16:ef:
         c9:9c:90:12:dc:ac:40:85:e3:7a:ae:e0:a5:09:9e:25:0c:2f:
         a1:09:b7:e7:df:d6:03:3c:c8:c9:72:85:d5:ea:85:b7:8c:0f:
         f5:79:6c:aa:81:2f:38:05:36:f5:e6:25:93:12:3c:f3:d2:32:
         5c:11:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:07:07 2024 by rpki-client on console-fra.rpki-client.org