Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e88bcd87-eda0-3ec2-bfd1-c311d17e45e0.roa
File:                     e88bcd87-eda0-3ec2-bfd1-c311d17e45e0.roa (raw, json)
Hash identifier:          CDsW8Tr7oc6vwRY5QbCR/8/UoB8KrDOXnYlm4oXnW5o=
Subject key identifier:   7A:0D:19:3F:96:EB:CA:F7:74:DB:E6:ED:76:F6:E6:E4:B4:0D:9D:32
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285845A9BE130712D5648130095E00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e88bcd87-eda0-3ec2-bfd1-c311d17e45e0.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     32526
IP address blocks:        74.113.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:13:07:12:d5:64:81:30:09:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=d3117235-52a1-428b-a8e7-268c1f0283c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:de:1e:35:ee:d6:d6:db:e9:02:9e:09:7f:
                    4f:b7:e0:67:f8:96:6d:49:c7:cb:51:32:74:c9:9f:
                    8c:81:da:8c:ca:90:56:53:29:8a:77:d5:f2:43:e6:
                    a3:f5:57:7e:81:47:be:f0:73:3e:3a:e3:a7:10:98:
                    d6:bc:d8:fe:e2:45:a2:99:ad:1e:39:fb:cd:a8:49:
                    7b:33:e1:bd:bd:3b:8f:37:a8:2f:d6:ed:3d:5f:19:
                    f9:97:47:e4:57:1e:0a:ed:36:f2:40:b7:37:e3:6b:
                    92:63:31:cd:9f:da:7b:55:62:7b:6a:40:15:26:8a:
                    03:5f:70:d6:98:34:fe:d7:1b:79:07:2e:7b:3e:1d:
                    8f:87:cf:1e:c0:a9:8e:0d:3e:11:15:6c:61:91:ee:
                    b0:fd:c6:d7:ad:a9:01:9e:5f:2d:a8:d1:6f:72:91:
                    2f:a8:9e:2a:0d:4d:e2:f2:c7:7c:13:db:81:c0:d7:
                    fd:65:a7:30:dc:5b:d7:ca:96:66:24:d2:c8:ed:30:
                    ae:26:61:b9:7e:ff:e0:24:b5:5d:b8:d2:57:5d:a3:
                    63:d6:12:b7:e2:8a:82:25:ea:d9:c2:36:20:94:1e:
                    29:e5:fc:f3:94:5a:56:c1:50:a8:de:81:65:2e:01:
                    e9:46:79:57:cd:7b:67:84:76:c0:46:e3:1b:a1:4e:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:19:3F:96:EB:CA:F7:74:DB:E6:ED:76:F6:E6:E4:B4:0D:9D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e88bcd87-eda0-3ec2-bfd1-c311d17e45e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:c4:73:00:01:67:c2:26:b9:8a:f7:b1:e7:a6:d9:85:48:
         0e:4e:84:b1:dc:80:fa:03:14:fc:24:50:76:ee:a5:49:54:57:
         4d:3c:5e:23:e4:43:d2:ac:48:ee:7e:ca:33:ec:db:e1:ae:86:
         8b:ec:c7:06:e1:82:31:a2:97:b3:12:1f:d0:95:7b:b7:78:ef:
         0e:a8:5a:c9:34:18:7e:a7:2e:64:60:49:3a:32:cb:b9:78:74:
         f7:eb:88:85:e2:94:06:85:59:34:43:77:f8:22:05:39:2f:30:
         61:66:74:96:70:0f:2d:05:19:be:3a:89:3a:00:f7:3d:e0:19:
         45:43:ca:c9:26:c8:c9:54:e2:c6:dc:ba:92:43:9e:dc:f7:cd:
         78:b9:3d:94:72:57:71:ef:39:8e:5d:46:ab:31:8a:97:7a:a7:
         00:f7:bb:22:e8:23:bd:9f:fd:31:dd:69:5b:0c:74:63:ac:48:
         ed:cb:ed:97:ea:3d:d6:b1:5b:43:11:86:b4:c0:5b:68:e0:82:
         c4:5a:f5:d8:88:0a:da:6f:2e:f8:32:90:fa:86:e1:39:d6:13:
         91:43:72:52:8b:42:02:55:34:72:30:e2:b7:67:09:4f:56:d6:
         49:d0:90:e9:f1:9d:0f:00:d0:5c:cf:c3:47:f5:de:28:73:6c:
         75:c8:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:16:46 2024 by rpki-client on console-ams.rpki-client.org