Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3ca243d9-e310-3dbe-9585-ad2db61082b2.roa
File:                     3ca243d9-e310-3dbe-9585-ad2db61082b2.roa (raw, json)
Hash identifier:          emgwtF3GhAXZY7+iNNqRXZvtbFVAUyRLTZthOAYOvwU=
Subject key identifier:   26:1B:8F:A6:26:BD:FA:89:A1:5E:23:56:DD:29:76:FE:67:0A:2C:8F
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285845B38375129E94B047CD7236C0
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3ca243d9-e310-3dbe-9585-ad2db61082b2.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     6079
IP address blocks:        204.74.8.0/23 maxlen: 24
                          204.74.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:75:12:9e:94:b0:47:cd:72:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=055af2c0-dda7-4bb0-9163-7a591db93345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:e0:06:13:79:21:0e:02:d0:23:7e:6f:78:
                    17:22:a5:2f:31:de:fa:2e:d8:d6:28:ca:60:48:e0:
                    e4:2c:04:83:e0:8b:d5:64:eb:c7:48:f2:0e:19:62:
                    15:c1:9a:06:fa:d1:06:2f:12:15:f2:02:80:5f:4f:
                    22:31:ac:e9:2a:90:35:fc:7b:24:bf:92:1c:8a:46:
                    66:cd:54:3b:d3:38:46:a2:60:cc:04:7c:3a:3b:44:
                    e5:22:bb:09:9b:1b:62:0b:60:04:51:59:47:df:9f:
                    42:32:a9:22:c3:4e:35:af:b4:e0:9d:3e:6a:e4:4a:
                    92:c2:9e:36:51:fc:3e:f1:ea:a2:17:e5:64:d9:76:
                    3d:b7:62:99:4e:68:7a:a5:46:15:b5:73:31:5f:25:
                    e4:df:8b:13:c1:38:a4:ff:ad:5c:85:63:6e:41:0e:
                    e5:fb:45:8c:f6:db:97:3a:01:7c:d8:95:ed:4a:4a:
                    cf:ed:03:ad:fa:94:d7:55:9d:0f:dc:26:32:05:5e:
                    2a:3a:69:75:b5:a2:23:e4:ed:d7:38:60:62:f1:72:
                    41:3c:df:ad:7e:a3:2a:1d:8d:12:13:af:1a:1f:65:
                    62:8e:e3:36:76:17:ae:6c:84:56:58:3d:17:db:a5:
                    d0:06:35:fe:b0:f0:e3:f8:76:d1:31:a5:23:39:7b:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:8F:A6:26:BD:FA:89:A1:5E:23:56:DD:29:76:FE:67:0A:2C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3ca243d9-e310-3dbe-9585-ad2db61082b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.0.0-204.74.9.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:d2:95:ee:87:62:af:7f:ee:27:19:15:8f:84:b2:eb:3a:
         50:93:a7:b3:b2:72:f8:cd:3b:3a:5b:2a:0f:38:8b:f5:f8:9e:
         32:ef:cb:c2:00:c8:37:d6:71:a2:7b:44:ed:1b:91:d9:cb:09:
         ce:aa:06:36:82:42:f9:18:ce:b6:78:31:2a:36:b9:ce:9a:b8:
         aa:c3:2a:f5:4b:0d:a6:ed:77:32:c6:c9:ab:1b:07:6b:67:00:
         e5:cf:25:08:76:bd:4f:03:41:d7:46:35:27:a3:71:b5:ca:9a:
         c2:55:be:0c:6f:f1:5f:d5:5b:03:78:5a:3e:56:bf:66:00:59:
         f7:7f:61:49:68:4a:26:30:76:e8:24:1c:73:54:d6:36:e0:2e:
         07:fd:c2:25:eb:45:f2:3b:35:ad:e2:9a:11:83:79:fa:48:96:
         9e:ae:97:b1:5b:bd:79:0d:9a:3f:22:f4:42:50:d5:c9:3c:63:
         87:f8:bf:fd:c3:0e:1c:b9:06:8c:0b:1b:5b:b8:03:85:d2:a7:
         e2:f9:ac:e8:bf:12:00:fb:5e:b6:76:73:bc:3a:1c:b6:53:7e:
         09:3b:7d:52:f8:e4:22:8b:1e:e6:1b:b1:f5:d5:1c:46:2e:90:
         4c:29:f8:cf:ce:ad:f0:ee:bb:8a:95:bb:44:c5:f4:9e:73:3b:
         ab:d4:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 21:39:06 2024 by rpki-client on console-fra.rpki-client.org