Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fa34d52-943a-3d31-9506-241103603a68.roa
File:                     4fa34d52-943a-3d31-9506-241103603a68.roa (raw, json)
Hash identifier:          SXHplXa+aMVSeus9lBYMGuWB9rNssTZalkUc/pyH7dU=
Subject key identifier:   6B:B9:2A:9A:1E:62:46:69:76:4B:80:4D:29:65:2B:AA:01:48:8F:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE9C44033289AE3854D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fa34d52-943a-3d31-9506-241103603a68.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        74.104.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e9:c4:40:33:28:9a:e3:85:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=82b14941-070d-44ab-973a-1444dcdf8302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:7b:87:88:73:c5:a8:60:6e:e5:65:2c:5b:
                    69:12:77:1e:df:2b:54:cf:52:b3:c4:ca:4f:27:8a:
                    5a:90:0c:e3:29:27:1a:d3:30:89:b1:fb:5e:bf:c0:
                    10:16:18:b5:c8:03:28:d4:34:e9:f3:52:ac:75:a7:
                    d8:a1:27:01:fc:5d:1c:d9:5f:01:19:92:34:3c:3c:
                    5d:1c:1d:db:dc:4e:ad:67:b3:f9:39:ce:64:ba:e1:
                    b3:27:44:ea:3a:13:2d:87:58:53:0a:5d:c0:0f:8f:
                    72:f2:10:53:36:7e:36:69:e0:f9:41:5e:5f:4a:97:
                    d9:4e:e5:06:64:dd:3c:52:6a:2f:ec:8c:f6:e2:10:
                    6d:05:08:64:0b:5b:09:d7:61:c6:11:1b:64:40:25:
                    43:4c:72:2c:38:aa:44:b1:a8:48:eb:d1:34:af:03:
                    77:1d:6b:ea:56:aa:78:97:5e:f7:9b:dd:5a:e5:c6:
                    08:30:1d:64:89:92:be:e2:cb:e6:3c:b6:f3:c1:44:
                    03:9d:5e:5f:df:3d:1b:21:35:22:31:db:47:96:f9:
                    ef:a3:bb:ee:f5:78:93:65:60:c0:ef:1c:a7:74:d5:
                    f9:4b:17:7b:22:17:06:65:ec:74:3a:1f:02:51:38:
                    e7:14:51:a0:d0:32:ab:b7:b3:3e:47:d7:69:75:12:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B9:2A:9A:1E:62:46:69:76:4B:80:4D:29:65:2B:AA:01:48:8F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fa34d52-943a-3d31-9506-241103603a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:3f:66:02:72:74:86:f1:66:31:52:e2:f6:8f:f8:77:50:
         77:01:b0:97:b1:4a:f2:be:af:39:e5:d7:0d:bb:9b:5b:48:0e:
         6b:1d:27:93:f7:e4:1a:27:86:d3:47:3b:53:e1:fb:19:38:9b:
         ed:6d:46:f2:00:1c:e6:20:8e:09:84:d0:c6:b8:e4:ee:dd:bf:
         0a:5e:b8:f1:b7:b1:e4:a5:72:0d:d3:94:ad:e5:e6:41:0f:b7:
         ac:63:77:20:23:ba:15:72:c1:45:2d:c0:83:88:c8:a3:64:02:
         95:f7:d1:2f:db:a5:95:f7:69:73:c9:ba:62:37:7e:2d:1c:ca:
         79:81:88:3a:5e:73:cd:9e:86:9a:c1:fd:04:1c:c1:07:27:0d:
         b0:4a:52:da:bb:cd:0b:f9:e6:c4:52:95:f3:32:f1:b7:87:5a:
         04:fc:f8:e9:48:12:08:bf:7a:99:22:a5:cb:c8:bb:50:6e:39:
         fb:81:5b:c2:47:5d:1e:66:34:45:4a:97:3f:3e:29:43:38:c5:
         3b:09:1a:d1:c2:4d:98:ff:8c:ec:32:cc:43:9b:d9:f8:01:87:
         b7:67:83:fb:2b:fd:2c:e9:3a:3e:c2:a8:7e:ac:b4:69:23:8c:
         e8:53:e0:6f:2d:a2:3a:59:51:d3:7c:e9:cc:43:04:87:c3:4a:
         e9:d1:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:35:53 2024 by rpki-client on console-fra.rpki-client.org