Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf78a91f-9717-3a67-bde3-49f9bdf85459.roa
File:                     bf78a91f-9717-3a67-bde3-49f9bdf85459.roa (raw, json)
Hash identifier:          hvmhTp1qI/wqj/29Mf33IgWlKGNV+Ck8EYTxsgqJ60k=
Subject key identifier:   0F:D4:60:8F:69:87:A4:9B:4F:6B:76:6F:B9:62:E1:2E:DA:14:A0:25
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847802649294308CCC2886379C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf78a91f-9717-3a67-bde3-49f9bdf85459.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     399153
IP address blocks:        204.74.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:49:29:43:08:cc:c2:88:63:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=b826025f-2fdb-47ab-aa60-2f36db5b8419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:35:73:37:08:64:cd:17:35:df:57:27:ee:
                    ca:78:34:24:53:b2:bb:45:c7:5a:f7:ae:b6:50:76:
                    4f:4d:42:5b:07:d2:ce:06:e5:75:f8:71:ee:ac:dc:
                    ee:64:54:dc:23:d9:ed:29:94:d6:df:b6:83:1c:f7:
                    b7:df:d1:6e:d3:7c:03:2b:fc:5f:2c:e8:1d:46:cd:
                    0b:26:87:3d:8c:0e:75:5e:7c:52:85:8e:d0:17:b1:
                    f9:ad:55:8d:a5:e1:e3:ab:db:82:e7:b4:6e:86:7e:
                    f3:c3:e0:3e:bf:3b:49:bd:dc:7e:eb:4c:bb:a6:f1:
                    26:6c:a6:00:fd:c6:45:f6:5b:b0:1b:f4:48:4e:01:
                    74:1f:3d:d2:5d:bb:bc:ee:39:14:a8:71:6b:71:c6:
                    e3:39:3f:40:c2:49:fb:8a:52:30:e9:ff:08:02:d8:
                    d7:83:ea:55:a6:3b:a9:d6:8b:97:6d:03:e3:be:c4:
                    59:1d:24:f5:9d:c8:56:a8:c3:5b:1c:3d:08:68:de:
                    64:cb:05:8d:07:16:66:28:58:13:b4:81:cf:9e:75:
                    15:2d:9d:6f:6e:88:0a:bd:5f:b6:d2:45:b7:cd:7f:
                    8f:69:fb:31:69:77:ef:96:5c:22:08:35:8f:d4:65:
                    75:71:6e:a4:16:93:e4:40:13:6d:8c:99:6e:49:0c:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D4:60:8F:69:87:A4:9B:4F:6B:76:6F:B9:62:E1:2E:DA:14:A0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf78a91f-9717-3a67-bde3-49f9bdf85459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:00:8f:71:e4:be:df:d8:ef:22:43:e3:4f:2f:60:86:12:
         a8:a4:d8:68:e4:f7:34:28:88:21:d8:84:53:08:4e:48:c2:2f:
         9b:d5:07:0d:47:d6:63:51:08:23:93:be:19:58:d1:ce:5e:fd:
         d8:3c:bf:99:a9:db:66:c7:ca:f8:53:cc:e6:6b:d9:13:ab:87:
         b8:e2:3f:d5:e0:ed:c2:91:1c:71:ab:cf:3d:f3:5d:90:61:e2:
         f0:40:45:db:aa:3b:07:bf:3a:ce:e8:6d:9f:2e:93:c4:de:dc:
         a5:6c:ac:5c:8d:d3:b8:6f:43:6b:da:56:35:76:36:d3:19:4a:
         c4:9d:93:31:96:87:b0:d8:56:2e:58:e7:4d:33:3f:f4:f3:25:
         53:2a:b0:4f:5e:65:0f:eb:2b:19:8a:df:b7:36:d6:a0:a5:a9:
         42:b6:65:42:f2:34:49:ac:02:08:59:a6:39:a4:9b:00:f3:b9:
         f4:a6:98:55:86:c6:eb:b8:16:6f:5e:a4:10:c2:29:03:c2:88:
         45:9d:b5:80:61:47:ce:68:14:4e:3a:a3:31:84:fb:5a:94:70:
         dc:e3:a9:ad:c5:18:32:32:1c:c3:0d:32:01:4e:0a:1f:21:43:
         23:58:2d:5e:3e:30:37:ca:fe:2f:84:0d:0d:52:33:66:d5:4f:
         88:f4:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:36 2024 by rpki-client on console-fra.rpki-client.org