Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c87ec449-ad8a-3be7-a257-5f067a83cbb4.roa
File:                     c87ec449-ad8a-3be7-a257-5f067a83cbb4.roa (raw, json)
Hash identifier:          ZbPoEuKUFF/qSdHeHJUSPjFK+wFkoDnT3ZK/NO9Ob0o=
Subject key identifier:   62:45:D2:83:31:04:EF:E0:B4:5A:9D:E5:82:9F:58:76:82:04:68:35
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F67E9874BCA8C581AF340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c87ec449-ad8a-3be7-a257-5f067a83cbb4.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397232
IP address blocks:        204.74.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:67:e9:87:4b:ca:8c:58:1a:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=483cd848-aeb1-4993-8af9-8dc21be831d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:4d:e9:93:b1:22:10:30:07:40:14:9d:db:
                    3f:d9:00:c1:7a:da:ca:31:46:0f:0c:cb:a3:ee:db:
                    97:1e:ce:4d:7a:12:30:1f:20:8f:40:b4:ce:b8:ec:
                    e9:e1:04:3f:f3:60:cf:b4:2c:fc:e2:46:4e:ab:5c:
                    8a:68:ba:b1:3b:c1:15:10:fa:55:3f:7f:e7:c9:c9:
                    29:52:15:11:5d:dc:f4:fe:db:c8:3e:89:ea:f5:42:
                    83:f6:81:9a:23:75:7d:11:d6:3b:03:70:9c:8d:46:
                    e9:ed:07:c3:34:c7:24:d4:7d:a2:b7:a9:fa:9b:17:
                    97:e1:89:de:72:48:ef:e2:fe:ed:2f:50:0a:a4:e0:
                    80:69:9d:ed:86:a1:e8:e8:38:4c:09:bb:1d:84:b9:
                    94:b9:e9:8f:55:97:49:91:7c:fc:95:c9:c8:51:57:
                    58:82:3f:ef:89:27:1a:20:5f:4a:d0:8b:54:6a:b8:
                    63:4b:e5:1a:c3:c9:0d:6a:4c:62:e2:32:96:af:ef:
                    88:f0:9c:0c:15:e4:60:ac:bb:e8:fc:ee:ad:5c:d9:
                    c9:40:8b:75:4e:52:0c:19:c8:c8:16:96:35:53:b5:
                    ad:0b:12:fb:db:27:9a:1a:5b:e9:23:6b:48:b9:f9:
                    f0:16:ef:32:24:47:38:50:d2:83:14:e6:61:a2:e6:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:D2:83:31:04:EF:E0:B4:5A:9D:E5:82:9F:58:76:82:04:68:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c87ec449-ad8a-3be7-a257-5f067a83cbb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:88:48:24:42:a8:ec:5f:2a:d1:ce:7e:4d:63:d7:f4:61:
         09:41:91:09:8b:24:9f:bf:3e:be:6f:72:e2:7c:e5:f7:45:9e:
         14:ac:59:01:71:df:ba:13:36:8e:9c:fd:6d:11:08:05:d5:5e:
         ab:4d:44:00:f2:03:b4:5c:9d:94:b3:fa:01:43:2c:7e:5b:2d:
         73:ac:d9:78:30:cf:be:b2:a0:aa:45:be:89:35:aa:0f:f0:7e:
         07:8b:f5:d7:10:2c:c4:9a:af:c0:ec:f9:fd:62:86:7b:e9:f5:
         14:e1:b4:7c:51:3e:c8:69:f5:9b:47:55:92:92:9f:bd:a7:8d:
         da:60:df:3a:b4:da:6a:65:e4:af:97:60:af:d0:7d:98:fa:d4:
         7f:15:71:3b:a4:13:75:ae:76:5b:bd:06:b8:b9:94:be:51:ba:
         34:71:ce:2e:66:8f:2c:48:cc:2b:59:20:e1:00:0f:1a:f7:0e:
         f5:da:4b:50:34:39:f1:0e:cb:20:bb:b6:9a:ce:93:0f:9c:54:
         fc:71:0b:57:f3:e1:4b:30:7b:ec:cb:a4:98:90:dd:bd:48:c9:
         cb:f7:4b:8c:c7:59:e7:10:bb:b3:fc:09:2e:c9:47:b8:67:b2:
         2f:e8:b2:1e:a1:aa:83:9d:a2:39:52:22:8b:a5:95:1a:97:b4:
         6d:32:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:40 2024 by rpki-client on console-fra.rpki-client.org