Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/521b5e3d-4fcc-3095-994a-2ec543b8fe3a.roa
File:                     521b5e3d-4fcc-3095-994a-2ec543b8fe3a.roa (raw, json)
Hash identifier:          0QMsRmgRM7Ef22Xh7aC7/CgHYR9ea54MLZOmxxARQUU=
Subject key identifier:   9C:B3:EC:CE:5E:0D:BB:C7:71:CA:77:63:84:3B:10:4B:27:9D:BB:FF
Certificate issuer:       /CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e
Certificate serial:       010D0C9F43285847C1DF5EC7DE464809A350C880
Authority key identifier: 93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/521b5e3d-4fcc-3095-994a-2ec543b8fe3a.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     29900
IP address blocks:        74.51.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5e:c7:de:46:48:09:a3:50:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=3d2a2111-9d9c-44cf-9293-ffe0dfeae9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:d5:33:41:91:bf:a9:cb:3f:8f:35:fc:db:
                    7f:93:c4:7f:b0:99:9a:64:6c:b2:4f:53:9c:a1:03:
                    ee:fa:1d:fd:77:c7:2d:0b:9f:47:97:1c:48:aa:50:
                    2f:10:a3:44:c3:24:1d:97:9f:76:94:a7:c4:d4:8a:
                    65:1f:ea:bb:26:46:f5:43:a2:17:ce:45:76:02:5d:
                    0b:38:44:8f:4b:d7:47:17:23:4b:3c:fb:d8:6d:b7:
                    95:54:cb:98:4e:cb:72:8f:f5:1e:1e:85:67:36:e2:
                    bd:3c:a8:bb:b0:eb:a6:5d:df:97:ce:4d:9e:5b:24:
                    9e:db:4c:5b:1a:de:0c:49:35:63:32:1e:32:a5:23:
                    a3:4e:48:9e:a6:95:76:54:c0:4d:dd:60:c9:82:21:
                    c0:ca:f1:38:22:c4:03:c4:00:29:33:2a:67:d3:0d:
                    09:72:b9:02:43:ba:08:a6:75:d3:77:85:2e:8d:fc:
                    29:45:62:34:08:45:69:5a:b0:26:c0:3a:4f:2b:15:
                    c7:56:d3:bc:11:a5:6f:39:94:c6:8f:25:42:97:6f:
                    61:57:6d:3a:53:a8:9f:94:d4:c7:2b:2e:56:bf:b8:
                    55:c4:e9:2f:ce:78:d8:ee:00:6b:cf:08:48:7d:68:
                    89:9e:b9:eb:4f:58:be:aa:c3:4c:34:af:35:eb:c5:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:EC:CE:5E:0D:BB:C7:71:CA:77:63:84:3B:10:4B:27:9D:BB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/521b5e3d-4fcc-3095-994a-2ec543b8fe3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl

            X509v3 Authority Key Identifier:
                keyid:93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:81:c9:44:2f:38:b6:8c:81:d5:00:61:27:8a:9e:f3:96:7d:
         49:0e:57:5d:29:e2:62:26:46:8c:70:51:b5:ec:bc:8d:57:4f:
         82:51:02:f0:c5:e4:ba:6d:7e:12:07:ba:3c:e5:8f:43:b4:20:
         e8:8d:d1:72:2c:52:67:1a:7b:64:cd:f3:8f:50:6a:d3:bd:51:
         21:0c:1e:79:ae:f4:d2:6e:75:6e:53:3d:e3:56:68:c5:f5:66:
         2a:1d:5c:3a:78:7d:c6:52:10:eb:a6:63:2d:54:ce:11:22:f1:
         48:4b:62:26:b9:35:ba:e9:d6:91:73:3a:69:68:46:ce:49:bf:
         e5:3a:69:1a:d5:18:59:da:2e:e1:f6:8d:3d:d1:af:bf:d8:ec:
         45:25:c2:30:7b:d0:40:c2:b3:6a:7d:15:af:46:4b:ec:b8:34:
         ce:04:0a:0b:56:43:e3:78:a7:7a:8e:e1:aa:5d:1f:15:d6:0c:
         df:d6:50:cb:22:ea:03:0a:5b:bc:dc:6d:2e:8b:c7:1d:90:17:
         3a:6d:d5:28:a9:90:ad:2b:b7:87:a9:4b:4c:48:a6:21:64:7b:
         3c:c6:18:02:0c:c1:85:67:95:e7:04:20:ac:fa:a6:f4:9e:15:
         1c:10:a1:5e:c8:35:c3:41:93:c5:9f:ff:b5:25:ec:61:8c:03:
         be:a3:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:22 2024 by rpki-client on console-ams.rpki-client.org