Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa
File:                     797dab8c-04a6-391b-ae3b-355157435b76.roa (raw, json)
Hash identifier:          mwaYoL3mT1S8bWcTkMnsVeWzZyIsIit8Q102efBiGCk=
Subject key identifier:   38:68:E2:50:01:38:B1:AA:66:04:C7:A5:E2:AF:1F:75:A2:E5:1F:83
Certificate issuer:       /CN=27856758-5ea9-463e-969e-eb2a87a469d5
Certificate serial:       010D0C9F43285847299B19759270AEABE6DD6280
Authority key identifier: B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     64233
IP address blocks:        74.121.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:19:75:92:70:ae:ab:e6:dd:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27856758-5ea9-463e-969e-eb2a87a469d5
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=014ff694-b451-4c64-9f02-ba1113e93a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:d4:eb:e7:c6:a8:e8:96:ee:27:c7:8c:29:
                    64:66:40:e9:65:d1:26:c5:16:13:1f:47:f7:af:b2:
                    08:4e:98:86:8e:76:c1:46:21:e4:47:e4:94:1a:85:
                    ab:8c:4d:f0:e3:7f:54:63:d1:53:f7:64:ee:49:7a:
                    5c:a2:6f:18:00:8b:a5:bf:f3:88:e8:7d:24:d8:ad:
                    ec:3e:a9:1a:4f:56:34:62:cc:8b:1f:7f:ec:56:c6:
                    4f:3f:ea:2b:ee:cd:67:c6:bd:19:13:db:d9:36:1e:
                    f6:b3:d7:61:e8:30:16:52:14:a6:63:c8:3b:fd:84:
                    a9:28:e9:3f:a9:3c:5f:34:90:15:4e:bf:1b:a4:c7:
                    4d:ff:9e:3b:d9:1a:f1:01:8b:78:ef:36:b8:32:2c:
                    70:af:f1:8f:b6:5d:50:65:08:ab:69:0d:f5:7d:a4:
                    d8:78:0c:57:6d:c6:a3:ec:8b:51:cf:02:90:b1:26:
                    77:3f:0f:b8:96:f9:75:02:e1:4e:4e:cc:3f:52:59:
                    56:9f:3d:7e:4e:51:30:72:78:97:02:65:4c:e2:7c:
                    88:62:b0:ac:5d:99:59:fc:1a:4c:79:30:83:c7:3a:
                    0a:fa:5a:a6:31:6d:8f:61:41:92:13:18:f3:dc:85:
                    cf:9d:a9:91:36:ef:96:9f:12:e7:17:74:89:55:64:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:68:E2:50:01:38:B1:AA:66:04:C7:A5:E2:AF:1F:75:A2:E5:1F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:c1:19:27:93:cb:90:63:39:9c:71:57:31:92:b2:4d:f5:c7:
         56:b5:e0:30:58:d9:e1:16:df:69:b9:ff:f0:99:76:0e:e6:f0:
         3e:ee:14:35:21:d4:2d:6d:ef:b3:ce:13:08:58:d5:5c:a7:8e:
         3a:70:de:0b:c5:be:8e:18:6f:67:b2:70:14:8c:e9:67:90:57:
         80:bd:c0:8b:85:9b:67:a5:71:87:af:43:ca:ca:57:14:86:90:
         90:61:3b:ec:16:34:18:93:19:a9:bc:47:63:47:04:9d:22:be:
         eb:80:18:84:61:22:48:b1:0d:69:08:ae:eb:22:60:12:6f:d5:
         7a:17:60:f2:58:82:dc:db:48:ff:20:9b:a6:41:c3:4f:3d:ca:
         8e:ec:06:a5:33:cb:3e:03:88:b6:7b:e4:66:f6:76:70:57:7e:
         f4:ca:44:8b:83:07:a8:81:79:b1:7d:ee:ca:29:08:7e:fd:47:
         a3:0e:16:d4:f2:46:f2:3d:10:76:3d:22:c6:78:ac:c4:bf:ef:
         1f:87:d9:dd:f9:8c:eb:a2:af:57:37:9d:f6:18:fb:10:11:86:
         02:4e:1f:50:e9:2e:06:a3:82:ba:76:22:aa:90:b1:50:2c:0d:
         e6:a0:14:79:dd:b4:9f:20:a5:dd:d7:76:eb:1c:fc:9c:cf:9e:
         74:e5:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:09 2024 by rpki-client on console-ams.rpki-client.org