Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa
File:                     27d77674-40cc-356c-878d-4dbe9170f65c.roa (raw, json)
Hash identifier:          BgePvgDPwWc6m8QBnLjeTXzTx4NEyUjvHZvQcGWwM2k=
Subject key identifier:   3B:1F:4E:B4:7A:40:51:8A:C9:A4:2B:9B:F2:E1:23:34:CB:50:37:BA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B3C6FC0A52B44A48DF000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     36103
IP address blocks:        74.82.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:3c:6f:c0:a5:2b:44:a4:8d:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4b138da1-c95a-49bc-827b-fdc9a2634eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:6a:bf:45:62:03:98:76:53:55:9a:8a:62:
                    96:9b:32:67:f3:4e:83:ee:f6:f8:76:0e:2c:8f:eb:
                    09:7f:aa:14:03:85:ee:ce:7f:44:d5:d8:61:61:ca:
                    aa:92:5b:27:7c:ef:26:b6:74:c6:3f:3e:28:fb:a5:
                    3e:bf:ec:d0:92:b4:f1:0f:9e:f4:24:49:eb:f4:81:
                    27:ab:aa:27:3c:ad:00:4b:4d:d1:53:cd:b3:63:e4:
                    b6:ea:f4:09:79:5d:66:73:67:8b:9b:81:7c:84:5a:
                    d8:8e:89:ae:f4:42:18:5b:77:00:eb:c9:b9:f7:f6:
                    fd:b6:b3:98:d2:6c:3f:7e:59:01:0a:d7:e4:c4:5a:
                    70:5e:d4:90:3e:ff:76:42:4e:cf:ec:0d:d7:a4:f3:
                    41:5c:43:ac:31:63:80:21:61:31:d5:8e:56:94:a4:
                    87:90:0a:32:3c:a7:6c:b7:e2:1e:2b:3e:2d:57:82:
                    fd:71:bc:95:b9:b7:5c:a5:eb:54:b8:f0:0d:c5:2a:
                    db:7b:34:a6:46:26:77:cf:41:f1:94:e0:c6:65:44:
                    d7:08:d3:1c:a4:d0:ef:63:04:7f:63:2b:13:cb:3c:
                    3e:b8:49:ee:b7:ae:dd:da:d9:48:88:0c:3d:63:27:
                    0b:d6:7e:ae:63:e3:c0:d7:4a:2e:04:b1:95:ff:b1:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:4E:B4:7A:40:51:8A:C9:A4:2B:9B:F2:E1:23:34:CB:50:37:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0f:04:95:9f:56:8e:f8:1d:f0:b6:e7:04:1d:2b:0f:b8:4d:
         8e:8d:e3:40:a1:e7:55:7e:7c:69:49:51:2e:ea:23:35:c4:f7:
         db:a0:f6:b2:f4:54:d4:84:d2:6f:aa:ba:12:90:1d:42:67:49:
         82:3e:a8:14:84:27:e9:1c:2a:a3:5a:e5:38:27:71:82:e6:98:
         c9:bb:64:b6:d9:17:4b:71:7e:10:39:a6:6b:5f:e3:63:d3:e9:
         22:74:f9:75:09:1d:87:59:e0:78:84:37:11:69:ce:0e:f6:b5:
         c3:52:4f:41:f7:a6:8e:3b:f9:da:7b:8e:6d:f4:e0:4c:8d:25:
         17:3b:b5:40:96:d8:13:db:bd:3f:a7:a6:bd:c2:98:b7:27:8b:
         c5:d2:26:ae:21:18:ba:6e:7d:97:98:d1:67:27:4b:50:b8:68:
         57:5d:34:14:fa:60:23:69:5b:48:5f:2a:5a:75:5b:55:47:cc:
         ca:87:03:f7:e9:a0:a5:5e:cc:cb:e7:68:83:69:d2:ef:37:41:
         aa:a3:ce:5b:3d:34:6b:ed:1b:96:50:aa:17:8a:22:50:cf:57:
         9b:8f:81:52:f3:6d:03:d4:a8:d1:08:a7:33:8d:67:06:2e:2e:
         04:ee:1d:00:57:f2:76:2c:ea:74:c7:56:9d:2a:85:bb:72:3c:
         b4:2b:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org