Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd8d2a68-1cf6-3694-a712-bb63f2034995.roa
File:                     fd8d2a68-1cf6-3694-a712-bb63f2034995.roa (raw, json)
Hash identifier:          v42Je7DJF76MjfdIXWNn95YRpeiH2tITe4AWnT88wmc=
Subject key identifier:   93:F9:95:CE:29:81:0F:6D:BF:46:12:A9:43:43:1F:15:1F:D4:F3:F4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA1ED6F4F2E980B2EFE3C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd8d2a68-1cf6-3694-a712-bb63f2034995.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397241
IP address blocks:        204.74.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:1e:d6:f4:f2:e9:80:b2:ef:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=80fb2f13-e962-493f-afa1-02de4a1d4991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:14:2c:45:56:95:ac:e8:6e:e8:d6:f0:71:
                    71:a7:5c:e3:ed:31:fa:77:7c:0f:f1:1d:96:81:bc:
                    f8:75:89:bc:08:9a:e3:6b:34:43:aa:e2:25:00:0a:
                    85:6b:93:ab:0d:23:84:b9:79:e4:a7:8d:f5:73:09:
                    5f:fe:5d:d0:9f:ec:ef:29:17:af:4b:11:35:82:cb:
                    19:92:e3:55:e3:b1:d5:44:c2:e8:f9:0f:f6:5c:c9:
                    87:07:16:28:d2:a3:d7:fa:f9:d3:16:71:17:61:3b:
                    d0:04:4e:d1:89:7d:1c:cf:ab:6d:0f:81:c2:5c:07:
                    2c:60:f8:0e:83:d1:ff:85:2d:13:40:2b:15:48:e1:
                    14:8b:03:1b:ca:ff:41:25:2a:2f:3e:a0:88:11:38:
                    ff:f9:16:cd:66:66:b6:14:92:c4:f5:15:71:7e:70:
                    a2:4a:44:09:5e:bc:d0:51:b1:a9:44:2d:e8:cf:bf:
                    7e:7c:ef:3f:ce:b4:4b:bc:92:a7:a6:c8:a2:7e:63:
                    e8:44:0b:94:17:07:46:f2:51:2d:4d:7a:a8:24:95:
                    b7:32:8b:52:74:2f:f6:ef:e7:16:68:30:f0:32:c4:
                    c3:69:61:69:8a:57:91:83:4d:1e:cb:c1:4d:88:b9:
                    c1:93:21:1f:3d:49:2d:5f:5f:83:5c:6e:ab:ef:77:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F9:95:CE:29:81:0F:6D:BF:46:12:A9:43:43:1F:15:1F:D4:F3:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd8d2a68-1cf6-3694-a712-bb63f2034995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:80:28:59:d3:81:36:ea:af:00:1a:a5:7d:c9:a0:3c:30:
         6c:03:d2:95:4f:d1:c5:10:7d:d1:d2:ee:a3:97:98:86:86:89:
         1c:bb:cc:db:64:3c:6d:1e:04:eb:e8:4e:7a:a5:dc:a8:66:8b:
         a7:22:cc:d1:fd:77:a4:90:0b:ff:15:32:66:d6:50:ef:37:5c:
         f9:7b:b9:66:24:e7:30:2c:dc:78:54:fa:88:6d:1f:0c:fc:5a:
         80:1b:59:2a:bc:33:c6:38:e9:7c:8c:b1:63:8a:0a:1a:ff:1f:
         91:94:a2:9f:f9:61:9f:d9:fe:45:b7:80:b4:4a:c9:fa:9a:65:
         00:66:36:89:1e:ef:bb:91:ce:43:fc:b0:ef:bc:d2:3c:58:74:
         68:a7:67:d8:1a:95:c6:6d:a6:13:17:c4:d2:b7:67:92:35:f9:
         2c:57:d9:6e:fc:09:95:1b:b8:38:cf:b8:17:5f:53:fb:49:63:
         ca:19:89:fc:45:79:75:ed:30:98:09:93:bd:dc:38:57:b1:50:
         62:88:25:e9:24:7c:14:bc:14:29:1d:b7:54:b9:d7:64:e7:07:
         c3:16:77:19:39:0c:d9:b3:4b:21:1b:77:1f:70:9a:55:97:6b:
         de:40:4c:d2:3d:63:a1:2d:51:2c:2d:c2:6d:03:78:5b:20:93:
         33:fc:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:21 2024 by rpki-client on console-fra.rpki-client.org