Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa
File:                     1aaec51b-2152-3168-9852-cba07d173eb3.roa (raw, json)
Hash identifier:          gRifYxpkBlO5Hiaih/E+DWx3UrDv2JP9taa8iUxJGJw=
Subject key identifier:   1B:64:87:D9:65:71:BF:C2:05:68:69:D2:F7:93:33:05:09:B7:5A:72
Certificate issuer:       /CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
Certificate serial:       010D0C9F432858456C531D1F5EBC05BE086C8700
Authority key identifier: 4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        74.112.134.0/24 maxlen: 24
                          74.112.133.0/24 maxlen: 24
                          74.112.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1d:1f:5e:bc:05:be:08:6c:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=f0166bc1-e02e-4286-bec0-4b694faf2414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:54:95:2a:90:ce:84:9f:41:0b:27:63:9e:
                    15:5b:e4:88:ba:3c:16:57:4b:3c:a5:a1:94:08:fe:
                    71:c6:7e:78:0c:a1:43:10:81:93:8f:df:e8:4e:6f:
                    64:15:7b:fa:f3:a6:90:d8:28:65:1c:7b:3e:13:52:
                    7e:08:1a:a1:1e:49:80:40:6b:f5:c0:53:fd:2b:2e:
                    4f:15:af:20:67:ec:60:f7:8a:6a:eb:73:c8:e8:51:
                    f7:f3:df:66:7a:50:38:a0:b0:52:d6:30:ff:7d:00:
                    6a:9d:59:a0:71:1f:a5:07:76:a3:59:d0:46:97:e6:
                    40:69:56:da:72:c6:b8:59:7f:a9:c4:fc:b8:40:17:
                    e2:43:b6:04:f9:20:ff:9d:e2:a0:8a:54:ee:a4:1b:
                    78:22:71:87:eb:db:92:fa:0e:fd:da:cd:97:28:c5:
                    c2:21:91:1e:1f:7a:20:8b:23:e7:f6:19:c4:35:6b:
                    cb:01:4d:e1:46:36:1c:fe:12:71:df:ae:b2:c7:c0:
                    c5:42:ea:f4:90:a5:87:5b:ff:3e:dc:fe:76:26:9a:
                    7f:7d:ff:da:b2:aa:35:2c:4f:23:f6:2a:80:b8:32:
                    45:6b:81:8b:55:99:dc:7f:91:ad:a0:d3:04:15:bb:
                    5a:5b:b5:d2:8f:ef:46:18:f1:9d:4c:d6:0e:fe:ef:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:64:87:D9:65:71:BF:C2:05:68:69:D2:F7:93:33:05:09:B7:5A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.132.0-74.112.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fa:19:35:2c:b0:75:a3:55:1d:38:8a:a6:e9:3f:c0:50:f5:
         82:d8:3c:ce:ca:c7:68:fb:93:7b:fc:d7:ab:34:41:ac:a3:ae:
         c7:f9:43:e8:d7:23:8e:83:26:6d:92:7e:ea:92:42:54:2e:2f:
         60:ab:a2:ca:a0:dd:68:28:b4:ae:75:ef:55:11:a4:cd:b7:08:
         8a:83:fd:7f:f2:61:03:73:9f:f9:b7:2a:5e:2f:e3:1f:d3:9b:
         57:b0:10:9e:ad:f3:d6:a1:b6:db:b4:1e:fb:a3:c2:0a:05:e1:
         80:52:7f:87:5a:78:85:db:27:c3:73:66:16:70:31:84:a6:3f:
         2a:02:4e:98:de:aa:bc:b9:a8:85:de:fc:12:57:69:59:86:6d:
         ef:a6:61:af:c0:f8:77:50:9e:76:bb:dc:2f:ed:54:ef:49:f9:
         b4:b1:80:33:25:86:7f:e7:72:96:01:c6:ea:ec:0f:90:d5:cc:
         f4:26:47:a1:c2:64:32:d0:0b:37:69:20:2b:af:34:b2:f7:3f:
         8b:ce:a3:85:90:37:18:9b:19:d9:9e:43:6e:0d:c5:42:08:68:
         7b:1a:f8:c3:43:89:0f:b1:30:cf:db:e5:36:ff:44:65:d1:10:
         cd:4d:04:d3:de:11:f9:73:f6:f4:03:cb:41:9b:6c:4f:69:76:
         ea:53:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:10 2024 by rpki-client on console-ams.rpki-client.org