Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/665fa618-1458-347b-b305-79846e753d31.roa
File:                     665fa618-1458-347b-b305-79846e753d31.roa (raw, json)
Hash identifier:          v7JsYXgjJkT/gDlljxrt3IIcOTXBIiFkcizlXS4AP0s=
Subject key identifier:   2B:EE:09:3F:EC:7E:08:D2:23:E3:C3:C1:04:7E:D6:7D:33:31:7F:FA
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F432858480EA5110FB4A8A478FF729320
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/665fa618-1458-347b-b305-79846e753d31.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     26132
IP address blocks:        74.113.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:11:0f:b4:a8:a4:78:ff:72:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=e21e7972-66d2-4079-a588-19e27136f33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:02:e9:1f:3e:91:37:cf:de:e9:ec:91:c6:
                    b7:3c:9a:10:d1:59:6c:69:f6:4c:58:22:dc:10:d9:
                    22:93:06:ef:50:ab:e3:7a:34:85:66:6a:59:59:05:
                    da:a3:59:a7:96:a9:93:ff:15:00:6b:c9:fc:94:a3:
                    5e:05:a3:d1:83:e8:47:b4:74:eb:6e:7e:3a:a5:79:
                    08:2d:43:82:d0:1b:d2:71:9b:01:e0:44:e3:04:ad:
                    a8:0a:52:ba:8f:bb:aa:3b:00:1a:7c:03:43:53:9b:
                    89:2b:70:49:6c:03:7a:cc:c4:c6:d1:0c:9c:73:ce:
                    5c:ba:dc:6c:19:b8:a3:9d:14:9a:4e:36:62:27:9a:
                    0e:46:f1:00:0c:86:5d:d6:5a:70:9c:be:34:52:38:
                    89:56:16:52:7e:b2:fa:56:f2:f3:b7:62:5d:92:ce:
                    a2:ae:0b:00:b6:71:9f:b7:e9:7c:96:54:66:d1:80:
                    b3:32:e8:84:4a:17:b3:15:9e:33:65:2a:a7:32:45:
                    d4:75:93:d3:53:03:45:a5:51:80:2a:ec:8b:fb:44:
                    b0:ce:1b:ec:15:d0:d5:ea:81:64:3f:88:49:21:e3:
                    a0:0f:8f:08:8b:0e:24:5d:4f:31:59:11:c4:50:58:
                    8a:88:12:2b:69:c8:ed:66:53:d2:67:a1:43:d3:0f:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EE:09:3F:EC:7E:08:D2:23:E3:C3:C1:04:7E:D6:7D:33:31:7F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/665fa618-1458-347b-b305-79846e753d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:86:84:ac:f7:f0:04:cc:7e:86:0d:8f:6f:20:dc:46:80:
         7b:70:4f:48:d3:fd:ab:0d:a5:db:d8:0d:76:bc:3e:57:df:92:
         aa:6d:41:eb:21:5a:1c:9a:5f:8e:e2:8a:10:92:cf:1c:84:fd:
         d8:1c:18:5b:80:13:0e:60:bb:22:87:4c:5e:48:01:33:5f:10:
         39:f1:3e:4b:fb:18:75:ab:43:d1:f6:d7:af:e6:b0:2e:8c:e7:
         bc:09:ae:dd:bc:c9:02:33:d8:b4:fb:02:a0:c2:77:3e:ff:06:
         0f:9e:60:17:61:e6:2c:82:f8:02:d4:0e:eb:c1:31:b8:61:73:
         ac:36:01:fc:a9:63:2c:dc:8b:2a:9b:5e:9e:07:a9:e3:04:a2:
         51:c9:ab:cd:25:15:48:65:17:c5:bb:71:46:a2:f3:e0:e4:1e:
         02:47:0e:c5:b0:50:cc:66:8c:35:e3:6c:9b:25:24:ac:84:44:
         ce:ac:ee:82:1d:c9:45:4d:a9:a0:4d:07:05:bf:d6:0b:e4:bd:
         f4:af:78:dd:08:43:c2:9c:d3:62:34:9b:80:42:45:6f:0c:0a:
         33:ea:23:92:c2:f8:ae:0e:8a:e7:a2:e6:f6:d5:1a:10:67:1b:
         09:3c:d5:b8:5f:da:a7:a9:f6:86:08:40:de:27:5c:61:df:61:
         da:68:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:34 2025 by rpki-client