Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/04b9269e-944f-3711-a63b-59cf216d5d0e.roa
File:                     04b9269e-944f-3711-a63b-59cf216d5d0e.roa (raw, json)
Hash identifier:          pquAhB7LtIyEefZ5nfPYvEbGkxtA4ANAzXYFmZTbYzg=
Subject key identifier:   CC:F1:B2:B8:29:FA:10:9C:7E:AA:6A:85:07:85:F7:7E:61:3B:99:16
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F432858476FA0A83B47F9A1EE9103B880
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/04b9269e-944f-3711-a63b-59cf216d5d0e.roa
Signing time:             Sat 05 Oct 2024 02:58:23 +0000
ROA not before:           Sat 05 Oct 2024 02:58:23 +0000
ROA not after:            Fri 03 Jan 2025 03:58:23 +0000
asID:                     396982
IP address blocks:        162.138.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:a0:a8:3b:47:f9:a1:ee:91:03:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Oct  5 02:58:23 2024 GMT
            Not After : Jan  3 03:58:23 2025 GMT
        Subject: CN=7dca2d66-49bc-440d-b33c-5546912d3dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:61:26:4c:f6:12:e4:63:69:89:33:88:83:
                    94:5b:47:9d:db:d6:8c:d8:54:4e:dd:e1:b5:8e:08:
                    6d:04:cf:7a:7f:c1:c7:15:62:22:23:11:33:b9:2f:
                    2d:f7:2a:a2:a7:02:27:e6:bf:cb:e1:79:c2:1e:52:
                    0c:3a:78:ee:3b:89:e3:e4:7d:49:d4:8f:2f:5a:fc:
                    ef:bd:1b:c5:92:24:71:69:5a:38:2a:7e:5f:e6:53:
                    e7:a8:6a:43:5f:46:78:c0:24:d9:93:9d:00:f1:fc:
                    8f:37:43:6e:9c:25:b0:4a:c9:30:5c:dc:a2:5b:3c:
                    b7:5c:03:9e:cd:e1:67:ee:31:40:b3:0f:3f:82:fd:
                    2c:4f:63:bc:44:0d:bf:bc:ba:82:00:34:68:c8:9f:
                    bf:17:8e:dd:ba:01:6c:9c:09:79:da:78:37:29:aa:
                    65:fc:f6:1f:33:21:ca:2e:c6:87:17:a5:b4:26:0a:
                    66:bc:47:8e:a9:6b:d6:35:a8:55:31:70:01:40:f2:
                    a0:01:4b:46:ca:b3:60:fa:2a:88:41:51:cd:91:33:
                    a9:a2:c6:90:81:c8:42:76:1c:61:08:f7:16:db:06:
                    a6:8b:36:7e:c4:f8:06:ec:c4:f8:c5:2d:f1:6e:93:
                    51:3a:8a:8e:a4:26:13:3b:c6:b5:df:22:3b:d8:a7:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F1:B2:B8:29:FA:10:9C:7E:AA:6A:85:07:85:F7:7E:61:3B:99:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/04b9269e-944f-3711-a63b-59cf216d5d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:4c:10:70:8a:06:3f:e6:36:bc:9f:7b:ed:67:cd:6e:89:
         2c:d7:07:78:5a:28:f2:32:bd:c3:bb:28:56:a6:6d:32:3f:17:
         07:78:0f:5b:37:63:e3:4b:99:1c:f4:fb:a6:43:60:28:9c:08:
         a6:3a:a6:17:92:35:5a:0a:76:6a:d0:36:fe:11:38:1a:b2:c0:
         01:83:d5:09:45:c1:ee:db:55:89:9b:9c:3d:05:b7:c4:62:3b:
         b2:5b:10:5c:26:0d:98:7e:ac:87:19:c8:5e:ac:57:38:52:b6:
         73:08:6e:13:54:b5:d2:a8:e4:9d:4d:25:be:39:e2:31:fa:0b:
         21:4c:3f:33:6c:f4:21:02:26:f6:7e:80:fb:f0:a4:8d:ae:2a:
         40:78:29:ec:44:66:a9:c2:ba:d4:f4:64:0b:be:50:6d:36:a7:
         22:ef:b1:81:0c:d1:72:5b:68:1e:2f:90:ad:80:d7:99:c5:0a:
         0c:1f:34:48:55:ac:db:ef:7a:3d:e8:6c:25:b2:f6:8e:31:ad:
         7c:10:84:49:f7:9f:cf:7b:0e:2e:69:a0:49:f6:49:70:d8:17:
         32:10:d6:4f:4c:c4:b0:84:97:c0:f4:ef:8e:76:19:4e:aa:d2:
         d5:05:f6:e3:b8:cb:53:f3:64:97:5a:04:d1:e5:6f:6b:5f:2a:
         11:3f:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:53 2024 by rpki-client on console-fra.rpki-client.org