Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6856d949-c419-3645-8674-1f3bb304c2b7.roa
File:                     6856d949-c419-3645-8674-1f3bb304c2b7.roa (raw, json)
Hash identifier:          WFTqgdrFTyNAQrmovpP7reMPbLnOuFFUn8/0kL1aD4w=
Subject key identifier:   FE:7C:D7:D4:DD:0A:70:24:21:C4:86:A4:8A:E4:A5:17:8D:5D:D7:40
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847B1016B1CFB80B3B94FE0F0C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6856d949-c419-3645-8674-1f3bb304c2b7.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397219
IP address blocks:        204.74.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:6b:1c:fb:80:b3:b9:4f:e0:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=29b53274-c4e2-4cea-a691-7631d0fbe4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:67:28:69:e5:9b:40:a5:b4:87:6f:fb:2b:
                    d0:86:58:79:35:0d:5b:9a:e0:00:80:e6:1b:bf:39:
                    57:25:b6:1c:c0:f6:1a:4c:ba:52:cd:25:10:39:fc:
                    5d:ef:01:70:a9:55:25:de:e7:c1:6d:8a:3d:fa:a6:
                    ed:62:8c:7d:2d:1a:35:c7:6a:a4:e2:d9:5f:6a:01:
                    ce:e0:02:0b:1e:93:6d:76:18:37:48:d5:e4:c5:03:
                    f8:32:25:83:af:4e:50:1d:57:d4:59:bd:40:6c:e4:
                    1c:e6:ad:4d:96:4d:2b:d5:09:ef:fe:32:14:30:70:
                    09:07:ff:71:59:9d:ee:cc:df:57:c0:eb:25:03:a1:
                    1a:24:d1:50:55:95:d9:54:dc:5f:31:f5:c2:b6:fa:
                    63:dd:ac:a7:f4:a2:87:44:79:62:26:e2:4f:f4:dc:
                    9b:c7:03:49:13:2e:75:8a:3c:5e:cc:e1:e8:0e:ed:
                    f7:60:ae:0e:7a:ae:98:bd:06:26:c5:d4:47:81:ae:
                    0f:37:2c:b7:aa:1c:f4:e3:c5:17:20:46:f5:46:b1:
                    57:db:bc:61:3c:dc:1f:f3:46:7a:e4:a1:60:37:ca:
                    75:4e:f7:ab:e7:66:06:1b:88:e8:58:f2:81:72:e8:
                    1e:59:c5:49:aa:be:10:f3:52:6c:c2:47:a4:fd:64:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:D7:D4:DD:0A:70:24:21:C4:86:A4:8A:E4:A5:17:8D:5D:D7:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6856d949-c419-3645-8674-1f3bb304c2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:2f:d8:88:e9:25:73:45:c8:11:09:12:fa:0b:6a:03:1d:
         c6:14:58:a5:7d:be:24:a0:45:f4:bb:c1:ef:62:11:ed:77:5a:
         12:ab:14:5b:fc:58:06:1e:f7:f9:4e:3b:0a:ba:20:81:6b:30:
         a4:1e:3e:00:f2:e2:cb:40:8e:e7:7e:7a:a1:26:4e:a2:16:2a:
         8b:a1:7e:71:d8:5e:2c:5b:08:ec:37:38:74:2d:93:dd:55:c8:
         d1:ae:6e:aa:94:10:04:ad:04:ed:2c:21:fd:38:10:43:8f:2b:
         27:25:d5:46:a3:cc:a2:89:5d:91:f7:68:47:07:bc:8e:a2:be:
         40:65:d5:80:68:6a:cc:3d:7e:22:7b:a5:e8:e4:9f:d5:fd:da:
         78:fa:cb:b0:8b:c2:32:4d:23:1f:b7:c5:ca:3d:7e:18:23:fa:
         22:7d:b3:fd:f3:32:b5:f9:9b:2e:ab:ac:09:5e:84:b8:95:df:
         84:4d:d9:95:c8:04:e2:33:8d:dc:21:e5:e0:bc:99:c7:1e:cb:
         21:e3:91:89:6f:50:f5:c1:30:60:13:ec:9f:d3:b0:34:29:54:
         8e:9d:9c:f4:76:b7:00:d7:8e:ea:3d:ff:7b:6a:45:7a:94:44:
         b9:b6:64:3f:8b:41:57:67:bf:42:5e:f5:38:e3:32:a7:86:d1:
         e0:a1:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:57 2024 by rpki-client on console-ams.rpki-client.org