Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa
File:                     9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa (raw, json)
Hash identifier:          g/6DFgQjjlnfjaw2H+OoLfiirF6mS417y1S2x6+8A+Y=
Subject key identifier:   62:DF:EE:0F:86:4D:49:7D:24:82:FD:FA:BE:99:92:E6:71:9A:E7:FA
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858477EC113F081486FDE15508BC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     26407
IP address blocks:        74.85.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:13:f0:81:48:6f:de:15:50:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=09de435f-2b5f-4043-8471-66518055e416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:c0:96:2a:94:44:ca:28:b2:cf:ae:33:d4:
                    fa:47:97:93:59:22:ba:d3:e7:c6:4a:c7:75:1e:9b:
                    68:27:15:bd:60:fc:72:e9:8b:38:b3:0e:e0:90:da:
                    a8:7b:9b:df:0b:a3:e5:0c:2d:7b:95:db:1e:09:03:
                    71:88:70:a2:41:54:75:d2:ba:26:ae:52:83:a7:b0:
                    79:25:1b:23:3e:4d:fc:59:37:59:9b:bf:b9:1f:10:
                    3a:0a:42:bc:11:41:3b:f7:ef:e0:c0:22:ae:bf:1e:
                    a4:bf:5c:18:38:76:b0:85:1f:d6:c0:2b:67:fb:06:
                    3d:d4:a3:83:4f:e9:8a:88:9b:c6:a0:47:a3:fd:c8:
                    9c:ee:21:4f:5c:36:49:1a:c6:2d:00:64:e5:d1:db:
                    e4:a0:e3:c4:84:41:9a:82:74:04:a3:87:1a:3a:d9:
                    6b:45:d8:bc:09:56:86:fe:8f:6f:d7:87:23:26:c6:
                    60:3b:13:8e:a5:de:aa:2b:e2:5c:94:52:7d:f6:41:
                    0c:5f:bb:41:99:9a:1e:6c:83:d6:f1:3d:22:17:f1:
                    aa:78:43:81:19:94:dd:4d:97:b6:24:7d:9d:77:77:
                    2b:c9:85:37:36:5d:8d:45:ec:17:92:dc:3a:17:6d:
                    83:86:56:fd:9d:ec:6a:e8:3a:d7:f8:97:6b:bb:bf:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DF:EE:0F:86:4D:49:7D:24:82:FD:FA:BE:99:92:E6:71:9A:E7:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:f3:ce:3c:c2:6a:88:0d:52:ce:78:09:06:54:6b:36:f1:
         04:65:b4:20:4d:b5:45:7d:de:09:14:b9:5d:27:d8:06:6e:91:
         07:9d:82:1e:c2:8a:ab:41:9c:16:d3:2b:c0:ff:b4:90:b7:4c:
         dd:9a:e2:43:c0:36:e0:47:49:8b:c4:2f:2b:43:a4:32:cd:75:
         fb:9d:df:2e:4c:10:00:06:4c:1c:61:5c:2e:ce:70:cc:61:e7:
         1c:46:e8:c9:e9:47:7d:53:56:12:e2:98:dc:a1:6b:de:d7:03:
         0e:93:70:9f:f8:2d:13:43:46:52:98:5a:72:6f:84:9a:3a:6f:
         74:7b:09:7f:cd:44:48:48:63:3e:b2:98:1c:76:54:8d:36:7e:
         b7:dc:3b:13:19:99:7a:11:d8:72:1f:70:01:41:8a:ee:17:39:
         79:ce:da:d2:74:a2:b5:63:70:09:21:e4:cd:ef:c5:32:42:d3:
         ce:ee:70:92:ad:49:74:c0:5e:00:30:35:dd:11:09:e7:21:da:
         fe:96:81:75:ca:9c:d0:c2:b4:2f:51:69:1c:8d:07:95:f8:4d:
         46:c2:ce:69:40:56:a9:1b:f9:53:39:12:b6:12:b1:7f:0c:e5:
         ea:18:3d:5f:5d:05:c7:fa:78:65:a4:3e:2c:bf:20:8b:12:b2:
         8a:e9:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:26 2024 by rpki-client on console-ams.rpki-client.org