Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa
File:                     1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa (raw, json)
Hash identifier:          ehZnw4sf09LxeS3SnNi15QcKG6dfWmSREizEjG/NwHU=
Subject key identifier:   3A:40:A8:D9:ED:55:32:4D:A2:43:85:9E:E8:AB:05:20:BF:AD:DB:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80CBECF440F7E77E179300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        74.110.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:cb:ec:f4:40:f7:e7:7e:17:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=6c816f53-e577-44f7-9b1c-42a4de852112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:97:8b:5d:e4:a4:fe:fd:64:38:d1:29:1d:60:
                    b3:c7:94:78:b9:29:fe:c1:ca:7d:2f:f4:9b:d2:43:
                    6f:8b:46:4a:92:a1:5d:d8:05:11:b2:e6:69:01:e3:
                    32:b3:9e:bd:1a:5c:b0:f1:c8:1e:31:f6:a4:c4:69:
                    1c:08:4f:6f:2f:04:0d:30:2f:ca:ab:10:e9:0c:a9:
                    21:39:8a:f5:9b:8a:e3:65:69:a0:9c:46:e0:9d:67:
                    14:58:f7:db:24:bb:56:d6:41:63:7d:9c:06:f1:40:
                    f5:05:67:67:58:0d:51:25:cf:a3:08:c1:c1:fe:f5:
                    19:e6:fd:c6:dc:1a:b7:7b:64:7d:0e:ab:2c:d1:ff:
                    0c:45:c7:af:18:ca:97:23:fe:55:28:95:10:b2:dc:
                    f0:e5:61:c6:f8:8a:4a:fc:42:03:31:35:03:ee:80:
                    f6:6e:3a:7f:74:44:57:e4:3c:37:d2:83:6e:14:3f:
                    60:a3:2d:1c:e4:57:9a:18:b5:4b:87:cf:fd:9c:82:
                    17:69:28:d2:99:0d:f0:99:83:92:de:aa:2e:3b:cf:
                    37:9e:72:1f:e1:91:b2:c0:83:e2:c9:d5:1e:b8:97:
                    5b:d4:5b:0c:ff:6a:d1:60:cf:cd:f6:c1:8e:08:f9:
                    c7:0a:9d:51:3e:7c:4d:84:4f:99:e7:96:da:a0:3d:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:A8:D9:ED:55:32:4D:A2:43:85:9E:E8:AB:05:20:BF:AD:DB:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.110.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:aa:1d:8d:46:1b:52:81:bb:64:e0:b4:e6:5e:85:36:31:
         d4:db:bc:b7:b3:15:81:c5:9e:6a:00:88:d0:8c:af:83:cd:0a:
         fc:11:75:e9:60:bf:71:09:8e:98:9d:1d:ae:e6:73:ed:e0:f4:
         58:f7:18:81:af:be:cf:14:7a:37:f4:0f:13:36:ed:81:0e:9a:
         1d:10:16:2b:e9:91:a0:2f:fd:a6:d2:ed:5f:72:ab:92:05:75:
         dc:b3:b5:ba:b9:fb:63:6a:e5:b6:00:95:23:e4:e0:29:37:98:
         be:72:9c:11:86:6f:38:a1:4a:a1:4c:ac:4e:98:20:85:29:2f:
         c4:32:ed:5d:13:6e:aa:e5:70:0c:6b:b4:41:fa:9f:de:5e:de:
         4d:81:75:5b:db:ca:aa:0d:f4:12:4f:bc:40:45:20:5a:57:22:
         c3:95:97:2c:a5:af:3e:3f:31:9c:49:4c:31:62:dd:fc:61:d7:
         31:55:61:a7:65:9e:0e:0c:80:e5:d5:2d:6b:9c:0a:1d:b2:cc:
         df:15:65:6b:a2:10:05:6d:05:31:10:82:ed:b6:2a:87:f7:8c:
         f3:08:74:57:7c:50:9a:a8:36:15:2e:b7:d3:fe:c3:26:6b:98:
         64:90:93:7d:0d:e5:58:eb:d6:3e:de:a1:4f:54:08:e9:14:45:
         78:7d:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:14 2024 by rpki-client on console-ams.rpki-client.org