Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa
File:                     ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa (raw, json)
Hash identifier:          vQUofXJORVB+MjQz6hzl1uVjI6Xc9BEqQWNYqQyDyLk=
Subject key identifier:   49:09:66:CA:9C:2E:20:41:8B:E1:A2:9A:14:12:B7:06:9D:3D:FA:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D77532A1CB54DDE3F080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        74.102.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d7:75:32:a1:cb:54:dd:e3:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=9cbd7dd2-521b-45b8-ae2f-d46f16342c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:91:52:f1:de:3c:62:9f:92:2d:ef:f7:18:
                    c7:f4:04:e8:65:34:59:ef:f6:f8:50:15:ee:dd:68:
                    9d:52:e9:5c:c4:cf:e5:3c:c5:8f:0c:34:6f:9d:31:
                    5a:dd:b2:bd:3a:27:e9:95:3f:9b:d2:74:6b:12:08:
                    73:e8:09:af:40:70:8c:12:1c:97:0c:95:a6:ef:35:
                    01:0d:d2:8d:9d:2c:46:33:00:df:b2:a6:5e:45:0c:
                    c3:dd:37:80:68:2c:70:0e:ab:fd:58:78:e7:62:b3:
                    2a:4f:3a:0c:4f:c0:9f:d7:b4:4e:04:a5:66:a8:ab:
                    57:8a:fa:6f:3f:86:c4:00:0d:cb:bb:cd:fa:ce:39:
                    8e:0d:ba:6f:97:2d:cd:c5:a8:03:b3:0d:5d:a9:5a:
                    64:59:01:04:eb:90:2e:d4:b8:f9:27:cd:68:a4:dd:
                    f8:0d:d1:6a:48:a8:35:d9:29:8e:9d:a9:17:8f:b3:
                    37:fc:67:a8:ca:66:6a:9e:7e:02:74:25:e4:85:bf:
                    1e:db:a7:de:bb:4d:02:65:0e:71:0c:6c:32:9f:e5:
                    57:f7:ec:74:23:3e:6a:96:5e:62:fa:92:e7:0a:e6:
                    c9:df:99:60:36:26:34:04:4f:5f:74:a7:4c:84:49:
                    5d:5f:47:03:a9:70:85:de:dd:3b:91:56:dc:f1:d6:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:09:66:CA:9C:2E:20:41:8B:E1:A2:9A:14:12:B7:06:9D:3D:FA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:94:49:26:1f:cf:06:51:75:91:7a:d9:b9:f5:dc:f2:23:06:
         e0:86:54:c6:25:11:58:87:12:27:53:6c:cf:ff:e1:d4:44:a3:
         8d:47:85:8e:5c:ff:53:35:06:02:fb:e4:63:bc:5c:f4:74:10:
         11:0b:39:a6:04:a1:f9:46:c7:41:b3:5b:d5:ac:df:33:ca:fd:
         43:4d:5f:6a:5a:17:db:10:d6:d0:cd:ef:91:2f:05:84:42:fa:
         fc:83:cf:86:06:49:93:c8:23:3d:81:ed:bf:56:83:4e:a7:2c:
         61:a5:e5:c6:fd:ca:bf:16:56:fa:9a:9a:3c:e0:bc:d4:95:73:
         96:3e:65:62:e5:85:4e:e5:ba:71:6e:50:09:68:e6:07:0d:09:
         de:9a:4b:ca:50:40:70:78:4b:71:05:87:cf:88:56:5e:95:d3:
         0d:c8:29:8f:ba:78:cf:0d:9d:ab:3c:5b:5f:ac:57:f4:0c:64:
         31:f4:92:a5:e8:cd:e8:97:98:34:de:0d:3a:e1:84:f0:a2:25:
         ed:22:e6:dc:72:0f:4a:af:ef:6b:3a:ab:c0:f1:8f:0e:6f:f2:
         f0:45:db:8a:b3:52:cb:aa:4f:55:e9:38:72:9d:af:50:25:9a:
         e3:5a:ca:7a:b0:e9:c1:a1:64:8f:7a:e1:cf:ec:90:8f:8e:2b:
         ae:8d:31:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:50 2024 by rpki-client on console-fra.rpki-client.org