Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2917fa7-808b-3a1c-a5d5-2efd4105c7ee.roa
File:                     e2917fa7-808b-3a1c-a5d5-2efd4105c7ee.roa (raw, json)
Hash identifier:          zTS/I6iTEYWSsC4+y60QulyiezNMb0ZchFIap7mCcA4=
Subject key identifier:   12:BB:8F:F6:2A:96:8D:35:BF:A5:C6:09:23:14:B9:1E:95:5E:C5:C3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF0329A54659D25BF6CE180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2917fa7-808b-3a1c-a5d5-2efd4105c7ee.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397220
IP address blocks:        204.74.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:32:9a:54:65:9d:25:bf:6c:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=77cddad1-6e5d-4e4e-a3b8-a0e97548aa8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:e9:57:8d:ca:05:0e:24:5c:a8:f0:0d:99:
                    35:c7:27:49:ce:83:fc:d6:e0:4a:fa:f5:7c:06:0d:
                    ea:1c:62:64:a1:8c:f4:85:53:85:0d:d4:f8:cc:c9:
                    79:4b:e9:9f:7f:89:de:7d:02:ae:2f:89:21:99:f9:
                    6f:3c:7c:dc:68:60:90:42:37:b2:eb:d6:30:3d:39:
                    a9:63:f0:eb:a3:61:14:c0:de:7d:7a:33:ab:45:76:
                    fd:a6:fe:23:50:24:87:ab:cc:95:64:85:96:1b:32:
                    40:c8:86:28:d9:0e:6b:d3:44:2b:40:03:c6:4b:7e:
                    8e:ca:1a:e3:60:13:53:1e:98:f5:06:6c:90:32:c9:
                    08:bb:75:8e:f9:df:2e:a4:82:9e:a7:91:13:69:29:
                    43:fb:26:d3:bf:e4:7a:f0:f4:a0:3c:87:76:0b:15:
                    a3:43:c4:1b:ae:b4:46:88:86:63:cf:8e:70:2f:54:
                    d5:60:59:40:de:ea:b7:64:ae:77:04:fe:da:a8:81:
                    96:3e:42:2f:e6:52:f7:b1:77:79:e6:09:75:97:48:
                    61:23:39:73:73:4f:91:9f:8e:96:a4:2f:8c:7c:8f:
                    12:a9:da:1c:09:9c:dc:32:3a:7f:fd:87:78:2c:4d:
                    e1:30:95:07:83:9a:55:e1:62:cc:94:e2:8f:b3:da:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BB:8F:F6:2A:96:8D:35:BF:A5:C6:09:23:14:B9:1E:95:5E:C5:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2917fa7-808b-3a1c-a5d5-2efd4105c7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:02:a6:39:a5:91:4e:6c:e3:d1:6c:96:38:f7:76:7d:7c:
         99:ec:44:69:f6:03:c9:88:84:f5:ef:52:80:10:0a:5c:b9:ce:
         93:7b:3c:d5:6e:31:46:5f:fd:9f:a5:be:da:e8:68:a7:7c:2f:
         e4:d5:a5:38:4f:7e:90:6b:8a:3c:09:bc:da:78:00:49:a2:2f:
         78:cc:6c:27:34:ea:d9:a6:79:dd:f9:d6:e6:7c:56:8f:ff:40:
         5f:e5:6a:c0:f7:c4:ce:fa:3b:c3:8f:24:a2:5f:7e:fe:a7:5f:
         e9:ec:68:ee:57:5f:25:29:49:ad:1a:7d:18:fd:82:bf:f6:95:
         fe:ce:04:15:b5:bc:2c:5d:d3:63:db:0b:7e:5b:31:df:be:20:
         cd:51:6d:f9:8f:1f:2a:c9:54:33:a1:49:9e:8b:87:dd:5b:c7:
         d3:54:3b:92:72:d7:c8:6f:ab:a2:cd:36:a1:73:0b:11:f2:df:
         3d:c0:5b:06:ba:00:aa:30:3e:56:db:65:13:da:29:77:29:f3:
         ca:68:53:d6:41:72:45:61:63:a9:7a:18:4a:31:94:18:bd:61:
         ce:2d:2b:4b:40:88:21:66:fb:aa:e4:54:1d:38:69:de:a4:c9:
         8f:d9:c1:c5:b3:77:54:d7:ee:07:45:41:3d:17:42:84:36:8f:
         3d:cf:24:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:26 2024 by rpki-client on console-ams.rpki-client.org