Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0113d22e-4453-3059-9a9c-0b1c02e2f6cf.roa
File:                     0113d22e-4453-3059-9a9c-0b1c02e2f6cf.roa (raw, json)
Hash identifier:          rWBTxzLPbxsqF3KLUrOpyoGolHgqkwntYIw3vcZf8sk=
Subject key identifier:   9A:B0:BE:30:FA:4F:91:44:04:DD:97:C4:2C:B1:58:92:AE:0E:48:28
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA1FDA0FC9ED1905E21210
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0113d22e-4453-3059-9a9c-0b1c02e2f6cf.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397225
IP address blocks:        204.74.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:1f:da:0f:c9:ed:19:05:e2:12:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=47617551-91f2-4780-a4b7-e3d6bf0188e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:0f:32:ca:ef:01:35:38:60:e4:e1:c0:b6:
                    f6:7c:5f:cb:63:ba:ff:b0:3c:1f:74:0e:4e:74:dc:
                    76:85:e1:a3:54:7c:03:a6:33:fb:37:7f:01:bd:6f:
                    59:48:ca:1d:09:45:d2:8b:c5:d2:b5:fb:bf:cc:db:
                    d0:bb:17:78:b4:70:1c:9e:4b:5a:99:aa:09:9a:b6:
                    39:36:dc:0b:22:de:ac:b3:be:35:b3:2a:17:94:c0:
                    2f:8e:57:43:3f:d0:4b:85:05:04:3f:ae:96:e2:d2:
                    bf:a8:48:f2:98:ce:ac:ad:08:21:4f:f5:f3:58:de:
                    c5:de:45:1f:e9:2b:76:d2:be:21:59:23:1e:5a:63:
                    32:a7:11:a2:3a:43:35:87:4a:a3:a4:b6:cd:01:f6:
                    ad:1b:59:e7:08:89:ef:ea:30:e1:08:f7:07:d6:49:
                    8b:d9:4d:a6:f4:f3:6a:4e:e3:2a:af:28:88:b4:0f:
                    09:98:83:9f:f7:0a:b4:08:84:b3:bf:2f:1b:ab:33:
                    d5:a9:22:93:10:12:95:4d:5e:63:6b:f1:d7:64:65:
                    68:c7:67:3a:c0:07:64:a2:22:cd:b6:75:c9:19:75:
                    9e:58:b0:9c:e6:3e:da:dd:25:90:96:82:8b:4c:30:
                    d5:ee:e0:7b:80:ed:98:b6:d6:b7:90:18:29:2e:4c:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:BE:30:FA:4F:91:44:04:DD:97:C4:2C:B1:58:92:AE:0E:48:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0113d22e-4453-3059-9a9c-0b1c02e2f6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:27:43:cf:6f:b2:2d:b0:ab:b6:d2:d4:d9:53:77:fe:18:6a:
         92:0c:4c:58:8d:b3:2b:eb:e4:e4:8b:2c:65:f4:2c:5d:05:fb:
         91:41:58:6f:3e:53:c3:65:a0:74:aa:4b:6d:78:d9:39:a1:5f:
         df:70:87:cc:c7:a8:d3:77:33:0a:f5:35:fa:cd:3f:6a:9e:c2:
         be:d3:ad:d7:8c:df:3d:72:10:b3:3e:d3:dd:67:8e:86:34:e6:
         ae:28:1e:d5:a7:dd:47:f8:aa:21:4d:0c:b6:6e:10:b6:78:dc:
         8f:a8:c2:5e:4b:81:8a:96:0f:00:16:bf:38:14:f8:71:53:b6:
         1f:79:b1:11:a8:95:6b:e9:2b:63:fe:04:94:f7:b6:93:a7:7a:
         2b:4b:42:8c:94:d4:e2:ee:de:99:44:1f:86:98:bd:16:b6:35:
         af:10:64:57:cc:70:e5:04:60:3a:40:e3:09:1f:28:78:6f:e7:
         d9:67:35:b9:54:13:fc:bb:ba:8c:29:be:88:12:d9:07:ae:54:
         ed:f7:4f:0b:5b:59:fc:17:5d:ce:6d:a8:23:9c:38:e7:e5:93:
         c3:81:23:29:45:68:cb:06:3e:2d:bc:38:b4:2e:75:6a:7e:f5:
         81:45:b3:3e:f6:d2:aa:e1:e9:e4:49:9d:3f:4c:95:0a:12:8b:
         db:b0:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:55 2024 by rpki-client on console-fra.rpki-client.org