Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83b017a7-d238-3646-bfd8-324ad9ed4a22.roa
File:                     83b017a7-d238-3646-bfd8-324ad9ed4a22.roa (raw, json)
Hash identifier:          0QLDhfmghHWxYwqir9lWKaidWrPhz3bL7ZuOKnSd9bA=
Subject key identifier:   FD:6B:84:6A:3F:55:13:1E:B4:71:25:C9:70:04:CB:C3:F7:BD:B1:28
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858478026483B504E41B1ECEFDC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83b017a7-d238-3646-bfd8-324ad9ed4a22.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     399162
IP address blocks:        204.74.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:48:3b:50:4e:41:b1:ec:ef:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=d7099870-ac77-4a02-98b0-39dd9d977799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:5f:38:cf:23:a8:66:ad:8f:65:35:e4:b7:
                    04:45:1f:f9:f5:3f:ca:d6:0a:cd:c7:c3:e0:35:b0:
                    4f:d3:f7:d6:7e:50:3b:33:59:c2:52:65:90:9c:52:
                    7a:3b:db:87:16:f6:9e:54:7b:e7:b6:c2:58:3b:4a:
                    42:cb:7a:65:86:aa:a2:8c:38:2d:d6:e6:e8:45:c8:
                    94:a0:d3:a0:f3:b3:19:d5:72:81:15:3b:d3:c8:d7:
                    64:bb:3a:8c:30:ab:2e:74:5c:c3:98:1e:e7:30:fb:
                    cb:fb:21:9c:9a:f3:67:a3:bd:83:0c:d9:41:44:3d:
                    1c:97:c2:bd:10:3b:2c:8e:5c:46:86:93:a5:fc:c3:
                    83:c2:95:9e:ae:02:a8:a1:c0:f0:45:d8:d8:4d:86:
                    f5:fc:75:70:f7:f1:0f:43:22:5c:81:08:95:37:10:
                    4a:37:ed:20:1a:4c:6a:5d:75:42:ea:d1:52:c6:91:
                    b8:63:8a:3b:c9:4d:42:e0:d2:e1:72:fa:e6:0d:b2:
                    d5:a0:f2:d1:17:eb:53:16:2b:c5:4e:24:f7:f2:a9:
                    19:32:6a:34:51:46:73:22:01:97:c9:ef:6b:35:79:
                    ad:ee:56:72:61:04:41:dc:5b:64:e9:ba:c0:bf:f1:
                    2f:3c:ad:11:62:76:6c:18:40:30:b5:36:f2:a0:b9:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6B:84:6A:3F:55:13:1E:B4:71:25:C9:70:04:CB:C3:F7:BD:B1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83b017a7-d238-3646-bfd8-324ad9ed4a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:ba:c4:86:71:cf:d1:02:39:b5:ee:22:f9:59:3c:1f:1f:
         4d:e1:d6:40:af:06:c1:2a:e9:9d:fc:9f:9b:6a:31:44:df:85:
         6a:ba:fb:8d:d4:18:73:46:2f:92:34:61:db:ce:b1:f1:6a:10:
         23:d4:a5:33:ed:e4:26:cd:0e:4e:ba:cc:3b:91:86:59:a6:75:
         5a:ca:00:06:15:f6:3a:35:28:ff:c8:37:e0:f5:a8:02:7b:e8:
         4f:5d:de:18:73:a4:c6:67:6f:72:16:6d:24:e6:67:0e:30:24:
         78:2f:a3:04:8d:18:c5:1a:d1:3f:a2:87:7c:59:ba:ed:5b:12:
         5f:22:42:70:fb:dc:b5:3a:c9:33:4a:cc:d3:4d:94:bb:77:24:
         46:20:b1:98:62:3c:44:36:ed:a7:eb:2a:35:8e:41:c4:e5:6c:
         e9:1a:4d:f4:51:92:80:58:9c:0c:64:06:41:9f:86:e4:d7:39:
         b4:ab:fb:e1:f0:a8:71:3c:03:04:17:ba:5a:45:6a:d6:bd:8d:
         23:dd:20:06:3e:b0:16:a9:8f:a9:91:1f:1b:4b:9d:43:b2:a2:
         88:19:06:34:92:91:7a:ec:8d:c9:d3:a0:6a:dc:bc:d8:da:97:
         bf:19:ab:44:41:55:c7:0c:f1:ca:71:40:49:4f:6e:f8:ad:e6:
         5d:90:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:37 2024 by rpki-client on console-fra.rpki-client.org