Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa
File:                     d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa (raw, json)
Hash identifier:          t1nEoBPtDeHBGzUu1SOrB8kYWVUi/AXCnEukZtGtZIg=
Subject key identifier:   4E:D2:3D:A9:DD:23:4F:D6:46:1C:3C:55:E7:DA:0A:80:89:DD:1D:61
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DC16E7AA8900BB79A2100
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        74.127.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c1:6e:7a:a8:90:0b:b7:9a:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=b6150ecf-aa3d-419a-9750-d7a1ffb12b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:ce:ef:e4:72:94:8f:56:25:84:34:bb:a1:
                    2d:b2:50:4f:50:5b:48:18:17:f5:04:76:f1:ec:2a:
                    21:e5:84:e3:2c:3a:77:94:99:e4:0c:dd:09:d6:30:
                    e3:df:4d:d7:9f:46:f4:c5:0b:c4:f6:d8:d2:99:70:
                    ee:fc:20:c4:88:ec:a0:4d:9a:d7:5b:6b:a7:2a:cb:
                    59:6e:2a:1c:ed:a8:b8:09:7f:19:a7:db:a5:29:db:
                    19:f0:17:a4:53:3a:94:11:79:93:6e:b7:40:bd:90:
                    36:d7:e2:1a:87:c3:fb:e9:68:79:a1:83:58:00:b8:
                    ea:bf:68:57:76:51:4b:9d:5a:3b:95:4b:43:4b:31:
                    96:a4:93:78:1e:09:fb:59:ff:1d:68:01:0d:a3:16:
                    e7:73:dc:5f:0c:d6:e1:b1:ab:6b:a5:f8:4b:cd:5a:
                    9a:7e:56:37:07:a6:9d:de:ec:81:99:89:d8:e1:d8:
                    c9:74:d3:e7:d3:f3:dd:b4:5a:6b:e1:a2:8b:f0:28:
                    80:37:95:8d:59:48:4f:36:28:e3:8a:5d:4d:fe:73:
                    8a:e1:ad:fc:7b:b1:ce:78:2c:30:c3:75:09:60:b0:
                    77:c9:b5:78:ff:20:55:b3:41:b0:51:4d:2b:14:d0:
                    97:4b:e8:63:51:67:92:f8:cd:95:c1:57:b4:c1:f0:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D2:3D:A9:DD:23:4F:D6:46:1C:3C:55:E7:DA:0A:80:89:DD:1D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:89:13:77:11:b5:4b:7f:95:14:8a:8a:4d:05:c4:a9:44:e6:
         ca:4c:24:16:bd:75:36:9b:29:cc:10:39:51:a7:b7:64:9e:af:
         5f:27:31:8c:47:1f:8d:09:d8:83:bb:e8:b3:85:ef:14:b8:e3:
         99:81:a5:9f:d2:b6:d9:55:58:09:e4:83:d0:11:c9:c3:78:58:
         6e:63:ba:e8:aa:91:3d:a4:cf:c8:7b:0c:75:e9:f5:46:11:bb:
         8a:47:57:36:7c:6e:2e:0a:62:9d:a6:3f:13:56:83:c9:77:82:
         b7:5b:ef:50:48:b9:a3:02:df:cd:20:e8:16:0f:a5:2d:43:f4:
         e7:be:e7:7c:df:43:9d:d3:0f:1c:2c:aa:f7:ed:e2:ff:87:e4:
         ae:d7:cf:71:d6:9f:72:ee:12:ff:2b:1c:98:ee:80:a9:8f:94:
         08:6f:40:dc:56:b5:25:5d:4f:ff:43:79:64:f2:8c:bd:9c:2c:
         b6:24:1f:16:78:3b:e1:0c:6e:87:0e:af:02:5f:82:77:c8:1b:
         43:8f:42:90:0e:c8:05:38:1b:a4:57:e5:d4:a0:3b:ef:7b:e1:
         dc:f9:4d:1d:80:0c:6b:04:f7:03:21:06:12:da:79:b2:6d:71:
         8d:ae:23:e3:73:22:80:ed:86:fd:00:4c:f1:90:99:a3:9f:04:
         e5:65:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 01:56:56 2024 by rpki-client on console-ams.rpki-client.org