Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
File:                     b5e19845-18ec-3998-b3f9-d75ca70625ef.roa (raw, json)
Hash identifier:          cAGA2QrUkIGmJjJo9gxJc/kRdBkM2116GTLz4OGfDmM=
Subject key identifier:   2A:7B:14:47:5F:C4:8C:F8:01:E2:1F:FA:D9:5E:68:C3:4F:BE:89:77
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F432858473A5B8B7D79413EBB53F61600
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     6939
IP address blocks:        74.114.88.0/22 maxlen: 24
                          158.51.60.0/22 maxlen: 24
                          208.80.4.0/22 maxlen: 24
                          2604:4f00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8b:7d:79:41:3e:bb:53:f6:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b4ca9a7a-eac6-41c9-b6f3-db77262a2630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:1f:b1:c3:28:7a:18:02:c8:10:40:c2:d0:
                    19:65:33:0e:f7:25:eb:db:5f:a7:9f:7e:85:37:4e:
                    79:8f:bf:e0:84:9d:d8:8b:f1:0e:ad:21:e6:e2:ed:
                    fc:2b:f8:13:c9:ac:93:04:70:70:1c:09:53:0a:0e:
                    19:98:d1:69:23:7b:32:cd:a6:df:64:b3:fe:9d:e4:
                    6b:20:ba:dc:af:42:b2:d1:8d:e9:fa:a4:9d:ec:46:
                    bb:2f:d4:69:21:4a:26:84:ff:f0:84:44:2d:c6:c4:
                    14:c0:aa:8e:52:94:da:34:1a:59:81:a5:4f:c3:e0:
                    92:52:24:9a:d2:b6:b5:5a:d2:16:73:30:69:26:31:
                    76:68:a3:60:ab:db:8d:be:66:a7:ec:48:5c:8a:da:
                    91:c1:87:fa:89:26:47:38:f4:59:7c:56:4d:0a:3f:
                    67:cd:36:df:e7:02:19:49:87:07:1f:99:de:7b:fc:
                    11:bc:d9:de:8a:fa:a0:d5:61:9d:7d:7a:11:c8:70:
                    02:f1:fa:57:5a:cd:8a:f1:42:7e:ec:8f:b6:33:12:
                    44:ab:cd:de:6c:c2:96:a6:d8:ee:f2:1a:93:e4:1f:
                    c8:4f:1b:f7:6d:99:27:0a:ff:36:b6:60:7f:d5:dc:
                    61:84:b5:3c:30:d6:e5:1d:5c:d5:ba:df:1c:f7:1d:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7B:14:47:5F:C4:8C:F8:01:E2:1F:FA:D9:5E:68:C3:4F:BE:89:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.88.0/22
                  158.51.60.0/22
                  208.80.4.0/22
                IPv6:
                  2604:4f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:90:65:ee:70:47:e2:3f:8c:37:27:70:c9:ff:c8:43:c9:d7:
         4e:52:f4:c2:88:9f:c1:56:93:6e:d7:31:ad:4c:7d:0a:0f:b5:
         c6:f3:d9:f9:56:32:c4:de:0c:64:57:6b:f4:2b:2e:08:0e:07:
         6a:65:8a:a5:4f:1b:36:61:c6:2d:e7:49:6c:d7:0f:53:d0:a1:
         16:7a:b6:e8:24:7c:7e:10:54:59:35:0a:ac:7d:2f:c9:a7:63:
         01:d8:85:1b:d4:8d:d7:77:16:bd:5b:32:e9:1a:b8:52:c9:ee:
         08:79:ea:7f:ed:7b:f2:6c:fb:1d:12:9a:a7:5d:6a:27:9e:af:
         9a:c4:87:dc:f8:88:b3:37:40:e3:f8:29:5b:46:9c:3b:e3:53:
         7c:c0:f3:97:40:65:39:8c:0b:5b:14:d0:fa:ed:77:f0:f5:32:
         7d:8f:35:a1:b5:43:d8:51:0d:ac:53:99:4d:d5:3b:66:80:88:
         a5:95:e2:59:0e:32:ce:8e:8a:c7:0b:d9:cd:9f:d7:15:67:18:
         7c:1a:66:f2:33:89:d3:19:ad:d0:6e:93:fa:30:ba:d0:c0:6c:
         b9:ab:74:53:ab:fc:35:e6:db:24:07:d0:ec:ee:66:bb:a5:cb:
         ab:a5:29:ac:52:f0:bd:1d:25:2d:ea:7f:c2:e7:6e:17:19:ed:
         68:47:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:30 2024 by rpki-client on console-ams.rpki-client.org