Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa
File:                     e17ead58-d2cf-3332-b67c-3bb252f105c7.roa (raw, json)
Hash identifier:          EYDtcZK1ZKDlxXCwT9aC6JMtRAyMEps96UROEKaDgcs=
Subject key identifier:   FA:CB:6D:E5:78:27:94:A3:C5:D8:01:40:BD:38:F3:81:1F:D8:0D:A4
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F432858474420B902357BF5F3B9505C80
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     6142
IP address blocks:        74.85.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b9:02:35:7b:f5:f3:b9:50:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=19cf033b-29d0-4a9c-a32c-35b9aea257bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:2a:3b:f3:bd:b9:fe:64:f9:b2:c2:cf:f8:
                    a4:d9:ab:6d:7e:0f:6f:18:a7:40:6b:4a:14:5b:bb:
                    26:72:d4:39:06:3b:96:1f:13:05:c0:b9:c7:50:d0:
                    a7:db:b1:df:d4:fe:4c:70:e5:dc:26:a3:d3:33:5f:
                    33:49:9d:5f:a6:1f:93:29:80:aa:3f:72:b4:08:f5:
                    07:d1:e6:c6:61:59:53:38:7d:fe:20:9a:93:37:42:
                    e8:0c:d9:e9:85:b5:15:72:db:6f:0b:5e:0b:ea:5f:
                    1e:39:99:f3:c6:cb:b3:9c:ca:9f:9f:be:e4:e1:3b:
                    57:e7:50:5f:5c:1d:4a:c2:3e:9b:40:ea:0d:9f:a0:
                    8b:13:4b:de:16:ed:24:54:1b:94:99:3a:3f:82:64:
                    c5:23:24:58:be:91:d5:dc:0c:ec:e2:07:50:74:f0:
                    d0:c6:0b:cb:65:c2:fd:0d:bf:02:e6:b3:32:55:4b:
                    23:20:18:e5:2b:26:8a:49:ef:e8:38:d0:4a:6e:c0:
                    96:bc:da:d2:35:2c:2b:0a:e0:82:94:78:21:ea:eb:
                    e0:69:1a:75:4e:c5:ce:92:63:9a:21:54:b3:c6:cd:
                    a3:de:84:89:38:f1:74:f0:b0:7e:e9:37:7b:f9:53:
                    47:6d:ee:c1:b1:26:e5:a3:15:60:99:9c:a2:b8:11:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:6D:E5:78:27:94:A3:C5:D8:01:40:BD:38:F3:81:1F:D8:0D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:07:0c:37:e2:d4:aa:2f:fd:f8:95:f8:03:90:b2:19:0d:b5:
         d2:c9:a2:a4:0d:d0:50:56:16:c3:a8:2f:5f:a3:a4:8a:aa:ae:
         9d:26:3f:46:88:9a:5a:fd:31:c5:19:06:d2:0d:9b:f3:cc:82:
         7e:0d:d5:05:07:01:eb:43:dd:7f:65:eb:18:bb:25:ef:7a:1d:
         39:85:2c:a3:d1:61:d0:fe:50:8e:b6:e4:8a:46:61:8c:c6:94:
         ea:a1:18:b7:2f:52:f4:6f:94:04:5c:83:56:5b:63:80:03:ad:
         15:a3:45:50:df:f3:91:92:6a:46:94:03:9e:4f:ba:21:77:e0:
         ed:a0:ba:05:26:aa:cf:f9:e0:b3:d9:f6:e4:32:40:8c:6d:cc:
         80:a6:8d:41:f0:68:78:6f:be:34:e1:80:cb:ca:11:1c:b7:97:
         ac:eb:25:dd:57:5a:57:ed:c2:95:ff:cb:d5:84:c0:90:92:f7:
         cf:c0:ec:4e:50:70:65:58:13:d3:c1:c3:71:25:83:4e:e0:a3:
         d7:e2:40:53:29:c2:6c:58:66:3e:3d:07:68:22:7b:7a:95:0c:
         41:70:00:64:af:ad:f3:59:05:a0:8d:29:ac:19:55:5b:b0:45:
         d0:a7:e5:1d:3e:01:cc:e3:29:ca:7c:6a:b0:de:4c:29:6b:7e:
         8c:36:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org