Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/796b4941-aa08-3956-8f46-1013460cc63e.roa
File:                     796b4941-aa08-3956-8f46-1013460cc63e.roa (raw, json)
Hash identifier:          GCaOtARPeSyrlvh5sDPHn64fTMoXchcyC8lX1OZNdKM=
Subject key identifier:   53:A5:F1:5C:C5:70:12:DA:4B:39:56:CA:6B:BF:AA:9C:B8:4D:EB:25
Certificate issuer:       /CN=9a177b81-3741-4833-baba-1629081ec54f
Certificate serial:       010D0C9F43285847299B23379393FF86E0F49280
Authority key identifier: B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/796b4941-aa08-3956-8f46-1013460cc63e.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     11187
IP address blocks:        208.74.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:23:37:93:93:ff:86:e0:f4:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a177b81-3741-4833-baba-1629081ec54f
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=69fc6766-92f2-42a7-8de1-b209e798a042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:5e:36:2b:f3:45:2b:a1:2b:76:ab:56:4d:
                    40:7e:a3:e6:4c:76:a6:1f:25:c6:94:5d:d0:83:62:
                    97:8d:37:90:77:5c:af:9f:9d:b9:15:55:ff:27:a0:
                    e0:3c:ff:e9:28:98:5d:9b:a7:33:e0:ed:f9:bc:aa:
                    8d:8d:4c:e1:3e:6c:49:2b:0d:a2:50:50:cd:77:59:
                    b7:bc:17:f1:7b:5f:9d:f9:19:ff:52:4d:4d:d2:78:
                    40:15:fa:be:e5:8f:59:7c:f6:49:42:50:3f:73:ac:
                    6c:ab:e2:27:73:a9:9c:05:a9:84:f3:61:a0:d2:73:
                    37:5c:6a:f2:f9:f0:a6:09:d0:ba:90:c0:46:3a:01:
                    22:fb:36:19:70:d9:1b:14:2e:3e:1d:ed:79:18:21:
                    2f:07:36:46:19:d3:87:21:16:06:95:23:82:7c:d1:
                    78:cd:e1:33:29:54:bd:b5:de:91:27:6b:50:9e:ff:
                    7f:d6:bf:4c:58:cf:b3:5b:1d:cc:0c:cb:ab:f5:ea:
                    fa:fb:e3:aa:ac:e3:42:68:08:a4:f2:88:26:99:03:
                    d9:bd:a4:65:a6:df:90:a6:a7:42:56:54:99:e2:e2:
                    bd:24:13:7e:8c:e1:92:8b:27:2f:91:a1:7e:5d:d1:
                    9f:6e:b5:00:dd:9c:50:e5:c9:bd:a6:fe:75:ad:2e:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A5:F1:5C:C5:70:12:DA:4B:39:56:CA:6B:BF:AA:9C:B8:4D:EB:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/796b4941-aa08-3956-8f46-1013460cc63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:91:bb:82:24:a3:a0:fa:78:8d:7e:ed:ea:ce:61:e3:19:c9:
         20:73:06:53:b1:aa:4a:56:2e:49:90:b2:dd:59:d8:e4:58:6c:
         62:fd:60:37:57:f2:ac:61:3a:db:3c:20:4a:39:cd:be:da:54:
         cf:db:75:a4:43:2d:24:12:e3:55:77:2d:6f:15:de:be:43:e8:
         27:04:28:09:59:4d:65:9e:77:9e:98:44:33:7c:c7:22:ff:b7:
         2e:38:24:e1:f7:59:29:ea:3c:86:1a:cb:da:69:da:61:3d:4b:
         17:63:56:14:bf:ad:09:82:91:94:b7:8a:33:af:15:29:9b:4b:
         c8:76:70:ac:67:00:dd:48:f2:d0:8c:f6:bf:c4:ba:59:a0:d6:
         4b:7f:64:24:94:47:b8:f8:9f:1c:af:0d:81:6a:de:11:d3:6e:
         03:f0:84:96:46:c2:40:25:f6:fb:b0:4c:19:82:4d:4c:11:89:
         81:de:a8:fb:89:f4:41:9e:82:31:f6:a2:0a:5c:fe:78:00:82:
         ad:d3:67:ba:f5:81:12:54:cd:72:aa:8c:9a:4c:82:9f:60:fe:
         90:86:41:83:39:1b:6a:a6:24:20:2f:a8:0c:5d:d8:07:5a:9e:
         4d:5d:65:45:5b:bc:4d:05:2c:cb:cf:ba:e9:d7:eb:f1:c5:00:
         fa:b3:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:37 2024 by rpki-client on console-fra.rpki-client.org