Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/848e6944-547f-31e0-92c6-cbcd94b8c02d.roa
File:                     848e6944-547f-31e0-92c6-cbcd94b8c02d.roa (raw, json)
Hash identifier:          sNBWWRtuw6N/fSGSrEgRM5G6LL8JngtmgwDQ95qz3R0=
Subject key identifier:   FF:6B:27:92:29:35:13:93:59:3F:15:B8:27:45:D4:E5:63:21:AC:2E
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F43285847C1DF5869C37A3F6844D50800
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/848e6944-547f-31e0-92c6-cbcd94b8c02d.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     21559
IP address blocks:        74.119.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:58:69:c3:7a:3f:68:44:d5:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=c0454cab-b47f-4ec3-82e8-2cfb1d86126b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:a8:44:77:74:f9:01:0f:fe:8d:6b:19:ee:
                    68:f4:ce:8e:40:52:92:c0:d8:2c:12:25:53:ad:e7:
                    fe:6d:e8:3c:dc:d4:74:22:48:ef:dd:05:e5:08:4a:
                    f7:7b:a2:2c:e9:84:56:2c:73:6e:1c:bb:ca:f3:97:
                    85:35:29:a1:09:da:d7:3c:40:89:cf:30:ef:72:42:
                    70:48:d4:a9:8c:9f:26:29:42:8d:e1:db:ee:87:c8:
                    b6:b7:a5:88:b2:2f:bb:61:35:ae:da:3e:08:3f:18:
                    93:e7:8d:cf:3b:7d:01:5b:48:ae:04:0d:ae:ba:91:
                    76:05:bf:4c:3a:a7:79:37:03:21:2b:44:ce:24:3d:
                    e2:a6:af:99:43:52:5c:c2:87:cc:d1:7f:a0:af:6f:
                    10:42:65:3b:70:07:df:6c:7e:f5:2d:61:1e:4f:13:
                    7e:5a:1d:d0:a8:f6:1e:09:f6:a7:b1:03:01:97:31:
                    b3:a0:5c:ef:1d:39:cb:cd:63:b3:4f:ab:45:df:44:
                    a6:b7:ad:10:a9:55:6f:8d:ee:09:1d:0e:cc:a9:b5:
                    6c:3d:f2:ea:f3:9a:f5:3c:64:42:4c:68:f7:2d:99:
                    ca:f5:b7:96:9a:ae:b4:dc:af:72:82:c1:9a:e5:18:
                    3d:21:5f:5e:d5:ad:57:3c:b6:eb:41:f2:e1:74:ec:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6B:27:92:29:35:13:93:59:3F:15:B8:27:45:D4:E5:63:21:AC:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/848e6944-547f-31e0-92c6-cbcd94b8c02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:f2:42:fd:a5:7b:2a:ba:a6:c4:f7:5d:6d:33:5d:be:35:
         2d:b6:df:11:4a:18:7e:60:07:cb:26:90:83:36:c3:63:69:3a:
         4b:49:be:0e:5a:b7:e2:2a:09:e1:ac:78:f9:bd:b5:18:99:9f:
         35:e3:7a:16:7d:af:a4:02:29:aa:60:c5:9c:99:c1:05:f8:1d:
         52:0c:c6:d2:ca:16:33:78:eb:34:a9:cb:fc:3e:3d:c4:38:c3:
         cf:b6:71:a8:d5:3e:28:20:16:71:0e:19:4b:3d:ef:6a:a2:ad:
         3e:0e:58:41:2c:61:43:83:d7:6f:c5:6b:49:79:64:2f:3c:78:
         50:b2:b1:b8:49:f2:c4:7a:8d:94:19:89:e4:53:0b:16:13:30:
         10:5c:88:31:ca:b5:04:75:94:38:5a:4c:b0:51:92:e7:29:1e:
         56:d0:ca:77:db:54:d4:1b:b4:41:91:d7:1c:f3:f2:0c:b1:df:
         80:b8:a2:7f:7d:b6:76:c3:95:7e:2b:1f:8e:45:ad:11:4c:79:
         0d:d8:33:e7:b9:e9:53:06:1c:c7:6d:14:1f:05:17:7b:05:cd:
         46:19:7d:ad:d5:c6:d9:c3:6c:e8:31:d9:9f:0d:2b:42:f7:e1:
         be:2f:ed:38:a1:22:2a:73:70:12:e0:e5:0b:bd:64:1a:19:37:
         6f:e6:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:19 2024 by rpki-client on console-fra.rpki-client.org