Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
File:                     2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa (raw, json)
Hash identifier:          GwMIXiXCMUc58arPrAwjwAL0neDn6iXPsuY5iLb8iek=
Subject key identifier:   15:45:87:BC:6F:27:5C:67:1F:65:F4:F2:48:9D:2E:9A:20:7F:C0:6D
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584787213483CFF8E2E3C47B4380
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     6142
IP address blocks:        74.85.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:34:83:cf:f8:e2:e3:c4:7b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=406baa3d-2e6f-4752-aeb3-5b85f69cd937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:9b:77:0a:14:90:ad:82:4e:95:1a:23:4a:
                    ae:9c:f8:d7:42:7a:0f:7a:ae:17:5c:8e:46:c9:bd:
                    9e:31:bf:30:77:f5:0d:41:4a:f4:75:46:82:86:fa:
                    cd:6d:bf:9b:5c:20:68:d3:af:48:39:47:df:32:8e:
                    8f:aa:27:c2:75:3d:bc:3d:e1:52:c1:6a:06:a9:e6:
                    08:86:a0:e5:fd:63:69:0c:0f:ee:40:3b:f3:77:53:
                    3b:47:ce:c9:66:97:90:eb:3b:5d:66:f7:e7:8d:01:
                    2b:04:2d:f6:47:40:a8:ec:ad:b7:b0:05:4d:28:ef:
                    3f:c4:f0:b2:5d:7c:af:67:31:23:84:01:7c:84:b5:
                    83:fa:a2:14:a2:fa:86:dc:6c:ac:08:67:db:5d:2c:
                    b5:01:35:f8:19:45:53:d4:03:2b:22:6a:ec:b8:4d:
                    5c:24:66:29:09:c2:29:77:63:25:37:a3:b1:19:7b:
                    ed:45:16:87:28:ac:76:1e:b5:1d:8a:2e:ed:1d:43:
                    ac:07:fa:a7:cd:b1:d1:73:26:ef:af:f3:be:68:dc:
                    31:99:f1:c0:34:07:cc:63:02:c9:80:69:62:51:ac:
                    bd:ac:ad:6d:d8:6f:e8:7a:77:3c:10:03:5a:05:4a:
                    d0:37:4c:a3:25:6f:db:2a:f7:5d:df:18:47:68:dc:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:87:BC:6F:27:5C:67:1F:65:F4:F2:48:9D:2E:9A:20:7F:C0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:bb:57:78:3f:44:04:7a:c3:73:dd:aa:d8:5b:c4:56:cc:
         b6:4e:4d:93:9b:68:8e:3f:3b:e6:1a:1e:ea:de:39:76:43:34:
         16:5f:c0:3b:0f:6c:87:1a:82:5e:b6:75:82:39:cd:82:c1:d8:
         46:a9:61:c6:97:6f:47:bf:77:91:da:bd:12:7e:4f:08:5f:e9:
         8a:8f:99:5d:f4:db:b0:3d:23:ee:38:b0:90:18:bc:79:15:61:
         95:43:9d:a5:56:c3:f9:c0:fa:3f:f7:38:34:9f:6b:24:00:28:
         8d:ae:91:73:95:99:e0:47:ee:0f:f8:d0:a0:c4:03:7e:07:ab:
         a8:26:26:ab:b4:46:c4:df:29:a7:59:57:62:ac:8c:23:d1:28:
         5b:51:0e:28:69:5c:72:c3:8a:76:46:0f:14:96:58:44:bc:3b:
         05:7e:82:4e:7f:1b:f9:5f:9f:77:4d:3d:2c:a9:16:c5:25:2c:
         c1:62:25:31:48:34:2a:df:e4:b7:e5:f9:af:33:38:d4:b6:67:
         4d:4b:3b:f3:c1:5d:2b:6f:53:35:3c:69:5d:a0:c7:68:7e:ec:
         ed:dc:6b:56:99:3a:33:da:6d:8d:f2:fa:17:18:32:82:b9:34:
         fa:91:51:be:30:fd:f1:a1:b7:ca:13:65:14:c2:e1:58:31:b0:
         b2:cd:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:39 2024 by rpki-client on console-fra.rpki-client.org