Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b702939-0aaa-3247-a577-b2257dd57f8a.roa
File:                     7b702939-0aaa-3247-a577-b2257dd57f8a.roa (raw, json)
Hash identifier:          bukbCFz+2u8HU2GNVlD04/qy1wcy0O8sHPWWMVE24UY=
Subject key identifier:   A4:BE:B8:74:78:E1:BA:A3:12:A0:22:BE:C6:27:B6:DA:3A:22:33:B8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E9655F8D3D40F1F98F5F2520
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b702939-0aaa-3247-a577-b2257dd57f8a.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397222
IP address blocks:        204.74.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:5f:8d:3d:40:f1:f9:8f:5f:25:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=61cb7c2f-4bf9-4a14-8c7b-44762b844279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7f:39:b5:01:52:1a:5e:f4:1f:dd:04:63:bc:
                    c9:a3:e4:2c:2c:b4:9d:1f:62:9d:bc:be:58:f3:0a:
                    f5:5c:a8:3d:0c:94:ff:f0:85:2e:49:0f:cc:fe:76:
                    a8:0a:8f:02:1f:75:26:53:37:ab:bd:9b:b4:09:cc:
                    2f:84:b0:67:5e:a7:da:8d:f2:ae:a7:0c:ee:90:a3:
                    d9:46:7a:bc:69:3a:3a:09:4d:fa:a8:59:39:f8:d2:
                    d9:10:f3:e1:1a:6a:aa:7f:36:dd:c5:7c:e1:02:23:
                    16:7b:0a:51:9b:24:56:1f:97:dd:d2:6f:17:1b:8d:
                    63:ee:0a:23:ac:c6:33:ec:6a:be:f5:65:e9:e3:eb:
                    94:17:c7:2e:4d:5f:04:8c:f6:ac:34:ea:2b:89:65:
                    98:b3:8c:e9:26:19:05:b3:8d:fa:4e:e7:a2:8f:af:
                    ee:90:3e:6a:3f:13:7e:0b:25:28:44:e8:39:1d:04:
                    7c:ce:12:9f:72:49:c9:f1:6d:aa:56:d4:fa:62:bf:
                    88:55:2c:86:7b:d2:b6:9e:f4:05:40:01:cd:33:04:
                    6f:26:f3:54:8c:7e:17:69:ca:1f:c6:41:62:2f:e5:
                    77:41:ff:3d:25:17:8c:5d:ce:2e:d5:e5:51:90:cf:
                    f0:cf:f5:7c:cf:f0:f0:f9:26:0c:61:32:a8:ec:b4:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BE:B8:74:78:E1:BA:A3:12:A0:22:BE:C6:27:B6:DA:3A:22:33:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b702939-0aaa-3247-a577-b2257dd57f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:8e:5d:17:86:92:fe:a9:5f:97:0a:50:a3:25:b1:47:be:
         5a:41:a3:eb:ea:3b:1e:f2:0c:ea:b1:01:89:74:5f:56:fa:2b:
         9e:dd:eb:d1:1c:bd:fc:ce:6b:de:09:65:4d:ff:0b:15:55:81:
         43:06:2a:79:cc:f4:0d:75:eb:4a:a3:36:50:db:18:d9:2e:82:
         31:3e:b8:74:c2:40:c6:69:42:4b:81:5e:aa:53:ce:c6:b9:58:
         53:30:4c:d7:c0:a9:11:4f:36:6d:5c:80:c0:f6:50:4d:f1:dd:
         f5:ba:b9:4b:86:db:92:e3:32:63:18:d4:5c:23:59:c4:f3:77:
         3f:f5:cc:b7:b6:a3:5b:a7:a4:75:48:2c:43:09:cb:d6:c1:41:
         a1:38:08:19:0e:4d:29:05:9c:8a:a8:e8:99:c8:b6:b2:bf:9e:
         a5:f7:e4:f5:ac:b2:e2:6b:c3:6b:dd:11:2d:39:8d:44:91:e2:
         cb:3d:13:13:b5:bc:af:f4:fe:fc:b7:40:fd:41:1f:14:a5:af:
         17:b8:41:8f:4e:60:7a:9c:0b:88:d5:af:4e:2a:c2:f6:22:56:
         c9:f5:e9:1e:ec:52:34:4d:e3:27:2a:ef:ff:2c:a2:62:c6:b7:
         49:99:6a:74:25:f1:06:1d:52:1a:ff:6a:5e:6f:aa:fd:48:73:
         44:41:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:12 2024 by rpki-client on console-ams.rpki-client.org