Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa
File:                     8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa (raw, json)
Hash identifier:          VbSGnOGZEcx1k2M6i7iGP5HNEQyiLjmTSrdsZLgUX7M=
Subject key identifier:   04:F8:09:EE:0A:C2:1C:44:42:33:85:42:88:F5:E1:30:DB:9C:15:C4
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584797E13D6EE22FE8FE9480EBC0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        74.121.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3d:6e:e2:2f:e8:fe:94:80:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=a533ddef-57d1-4edd-ac14-96cd3ab34e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:cc:b9:64:31:f8:dd:86:39:e7:81:2d:37:
                    f5:42:13:94:f4:81:89:f7:69:7c:21:67:6e:fa:1e:
                    2a:88:11:37:52:17:60:ea:50:3e:71:33:95:86:16:
                    4c:10:fb:0e:bc:3b:ff:2d:5a:a6:8e:9a:03:db:f1:
                    c5:19:b6:06:db:96:03:86:9e:72:7f:62:44:82:89:
                    fe:af:d2:1e:a1:75:6d:e8:37:17:f4:76:af:4d:00:
                    ce:f4:61:8e:b2:3b:d3:85:d2:98:7d:f6:9e:81:66:
                    70:f7:56:16:46:eb:96:cf:e4:75:87:0b:12:d1:6d:
                    de:4a:27:ee:ce:f3:54:3f:cc:16:a1:1c:c4:59:a6:
                    04:d7:0c:e2:a6:99:ad:7f:e2:fb:a1:56:6b:41:25:
                    7d:e3:a3:39:76:ff:66:70:aa:44:94:57:4c:18:53:
                    30:e3:4a:bc:b9:fc:02:fd:1e:72:fc:2a:56:4d:81:
                    53:75:ea:1b:a4:11:c2:30:ed:de:fb:49:01:62:21:
                    4b:bb:8c:13:14:b4:27:c3:04:99:f2:cd:4c:f2:c4:
                    95:ea:10:97:df:32:71:30:cd:62:94:da:12:9c:f3:
                    1d:5f:8f:89:99:7f:fe:10:3a:e5:19:3d:ae:77:b3:
                    cb:ba:00:d2:b8:be:ce:a9:42:84:63:2f:61:2b:f5:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:09:EE:0A:C2:1C:44:42:33:85:42:88:F5:E1:30:DB:9C:15:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:e2:9f:18:3a:b8:50:10:90:e8:99:46:a7:05:0d:16:9a:
         ad:91:3e:6e:45:96:03:7c:05:ab:59:76:c5:a7:d9:97:31:e9:
         d0:05:30:d2:db:25:c2:35:39:39:33:8b:c9:9b:0b:bd:74:56:
         e3:9d:e5:80:41:b5:4a:ae:60:04:f3:7d:26:4b:2b:ef:9e:ec:
         4b:8d:61:bd:c9:8e:66:f5:52:31:5c:d8:15:d6:73:24:c3:f6:
         91:36:4b:bc:40:9f:be:f8:20:64:48:98:ac:8b:fc:3e:6e:17:
         d6:5c:1e:30:11:3d:33:b1:71:2b:5f:d1:ba:dd:63:18:12:d0:
         99:40:23:cb:fe:65:e3:87:2b:79:4f:dd:53:fd:50:1b:54:34:
         b7:79:53:1d:36:1f:c7:63:23:92:59:0d:e0:55:e0:e4:60:22:
         31:76:c3:82:e0:2a:e3:61:16:aa:42:27:16:b2:f2:e8:95:55:
         21:19:48:c6:77:74:fd:b9:cb:7a:fb:04:e2:b9:7b:ec:ae:f8:
         3d:2c:f6:48:9a:c9:17:63:2f:c4:29:77:04:ec:8f:24:6b:29:
         fe:31:8c:10:47:be:c0:f9:33:53:75:ca:94:19:4e:72:00:eb:
         f4:83:15:43:d9:e4:22:cf:4b:02:b0:e2:2c:ca:04:0f:90:72:
         24:4a:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:27 2024 by rpki-client on console-fra.rpki-client.org