Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa
File:                     ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa (raw, json)
Hash identifier:          7bdoq6AW0q12N6klCpN4HSfoyMGATBrhy+p2jX+KmVg=
Subject key identifier:   A4:AD:65:CE:69:EF:38:71:40:D8:25:0B:44:38:5B:14:51:42:C1:05
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA3121A1DFA89D042A1A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397219
IP address blocks:        204.74.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:31:21:a1:df:a8:9d:04:2a:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=959e7da5-2149-4f41-b55f-a2cf1731973d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:12:6e:ad:02:93:36:d7:1d:49:8a:d1:6e:
                    7f:1d:b7:af:a4:63:89:2b:ef:d1:d9:37:a3:f2:a0:
                    a5:09:a9:d3:d4:da:91:ff:03:fc:f6:a5:76:ac:2a:
                    34:08:8b:46:82:a1:4a:3c:8e:20:7d:cc:f5:ab:85:
                    75:c4:85:dc:a3:fb:88:f3:fd:89:f6:b7:14:0a:5b:
                    01:20:ef:e0:d5:d0:39:a3:e1:16:6f:bf:c8:64:2d:
                    ac:41:08:ce:a0:7d:1f:5f:69:e4:26:85:94:24:9d:
                    26:b4:2a:18:c4:90:fe:70:60:58:c9:60:6d:cc:2d:
                    53:c8:a1:ee:18:0e:7e:cf:f7:e9:34:48:58:23:6b:
                    aa:a9:51:fa:65:69:fb:21:80:10:97:62:1d:1b:94:
                    cb:e1:3c:dd:e2:59:b9:f8:43:1b:83:b2:23:2e:9a:
                    8f:8a:7f:ea:2c:bd:2a:bc:c8:53:2e:3c:e5:b6:10:
                    34:70:a7:2f:d7:41:72:f2:7b:ba:fb:de:89:31:6d:
                    bd:05:fa:b8:d7:37:f6:1c:97:65:36:6d:e9:3c:f1:
                    dc:88:95:61:3c:26:ab:fc:ad:9d:03:33:06:4b:c6:
                    7a:6c:41:94:50:68:df:d6:cf:ec:80:94:20:78:39:
                    53:de:40:e1:45:79:0f:5c:88:98:05:59:24:b8:aa:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AD:65:CE:69:EF:38:71:40:D8:25:0B:44:38:5B:14:51:42:C1:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b3:fb:aa:22:2b:de:c9:46:1e:4d:ba:10:4e:ac:ad:f5:6f:
         6f:d4:da:7f:a2:57:f6:98:03:55:2d:e9:2b:ed:f7:3d:08:eb:
         57:d9:4c:3c:aa:4b:fb:21:08:4f:8b:0b:cb:49:79:fd:3d:25:
         21:13:cc:03:11:2a:17:bb:33:5e:a7:41:ed:09:eb:db:a8:91:
         50:ff:cd:37:44:e4:13:99:e7:29:d5:b5:fc:2d:31:6c:a8:46:
         d7:9c:bf:9e:e0:3e:57:a5:58:d2:aa:72:75:fd:07:af:fb:8e:
         d1:44:52:7c:c6:71:ff:cf:cb:04:53:8e:4a:3d:29:7c:3e:14:
         53:71:7f:a9:6c:6b:af:74:67:ac:6a:5e:69:74:ac:f1:14:95:
         57:ed:88:66:59:b9:f2:88:c5:e5:a5:60:0f:7b:1b:ef:1e:34:
         50:7b:de:fd:1b:43:51:e3:eb:d1:b8:a6:d2:42:10:f6:da:3d:
         a0:7f:2c:a1:76:eb:f8:c0:0a:7b:66:54:c2:7b:f9:22:3f:4f:
         fe:fd:9a:49:6d:42:d0:78:b5:b9:96:98:1f:1c:dd:36:d3:9e:
         89:74:44:b5:95:82:e6:cb:ec:8a:55:ef:d5:67:03:cc:8b:9b:
         a4:23:a1:af:16:df:7a:aa:be:c2:eb:63:8c:2c:0d:85:85:39:
         bd:55:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:42 2024 by rpki-client on console-fra.rpki-client.org