Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/f9ec963e-e617-381d-bbb2-1f63e94650a2.roa
File:                     f9ec963e-e617-381d-bbb2-1f63e94650a2.roa (raw, json)
Hash identifier:          sOOoekFZKQFLxjMSwEeoQYLr92BCGItbrD5N82PJO3w=
Subject key identifier:   FE:78:B4:C3:D7:7F:54:23:34:D3:93:9C:0B:BB:ED:73:E3:73:E1:DF
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F43285845D503CE8C10734AB53EF30720
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/f9ec963e-e617-381d-bbb2-1f63e94650a2.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     6993
IP address blocks:        64.74.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:ce:8c:10:73:4a:b5:3e:f3:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=f6e757e0-0cbe-4db0-a5d9-fbf002a14f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:3b:50:b0:9c:f2:58:18:e5:f6:ff:cf:ae:
                    60:e3:f3:18:52:23:f7:47:f7:06:a9:56:f0:96:1f:
                    f1:d3:92:40:d5:f7:a4:b9:4f:77:02:4f:66:c7:b1:
                    7e:d5:cd:f7:d3:14:7a:09:d1:50:cb:ea:67:77:ab:
                    ac:ef:59:af:98:de:b1:ea:f7:b2:93:1c:b0:b5:91:
                    09:1c:70:f6:bd:99:7b:84:21:c1:b8:d0:3c:5f:1f:
                    1e:98:6a:95:0a:d9:70:9e:9f:76:cd:3c:56:98:a9:
                    25:6c:60:7a:55:7e:05:37:1a:7b:d5:6c:a1:c0:09:
                    04:bc:39:a7:83:7f:46:83:a1:32:ac:75:59:fc:bd:
                    af:54:5e:8c:d9:10:d8:80:9e:5d:30:40:ef:1d:d4:
                    2a:16:1f:f9:d8:73:ef:78:9c:b5:eb:24:50:fb:c1:
                    5f:36:f6:01:f8:a7:90:3c:b0:ec:eb:6d:61:d0:ea:
                    8a:41:eb:5b:58:6c:cb:ee:5c:ab:3c:d6:e6:a9:a9:
                    c5:91:e2:d7:d2:f6:2d:77:4a:12:6d:aa:4b:1e:2a:
                    35:95:08:0d:eb:3e:d9:6a:af:af:fd:79:05:76:c9:
                    4b:ad:0b:6d:a7:a6:aa:cb:99:00:4e:2e:19:b7:de:
                    d3:08:7a:90:2a:ee:2e:9b:11:1f:1b:a8:60:a7:5b:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:B4:C3:D7:7F:54:23:34:D3:93:9C:0B:BB:ED:73:E3:73:E1:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/f9ec963e-e617-381d-bbb2-1f63e94650a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fc:b4:9f:ca:dd:03:48:8e:91:7a:9f:45:12:09:cf:42:2a:
         08:06:e3:c1:47:11:ca:04:05:c5:6a:ed:d6:2b:a6:95:ab:58:
         bb:08:78:18:f2:f2:66:d5:d3:61:fd:4f:aa:50:3f:fd:ac:e6:
         3a:6f:58:c6:1e:47:a1:d0:ed:12:96:f3:d2:17:a6:53:7f:3a:
         27:f5:66:07:c2:2a:92:df:56:10:51:86:e3:3a:12:35:d5:b4:
         03:86:0a:82:c4:b3:6b:35:b7:f3:ae:3e:79:2c:7b:58:a1:16:
         06:92:fb:46:12:7e:4b:75:ad:9f:6f:b8:35:c0:34:7d:2d:43:
         7f:0d:1e:43:65:05:90:b4:4e:3e:bb:3d:88:6b:40:df:d2:3c:
         f2:30:e2:0e:a1:e9:ba:b2:49:4c:39:ea:a8:45:37:7b:a3:40:
         e0:8f:0e:21:57:1c:db:85:65:20:6a:12:9c:44:e7:cd:b0:2b:
         f4:29:6b:00:89:d3:43:07:85:eb:61:59:83:42:c2:c8:4c:50:
         e0:12:61:b7:75:58:d2:2b:7f:37:9f:87:90:6a:11:0b:a1:7b:
         f5:40:40:0e:9e:bb:ae:da:87:eb:88:79:c1:84:e3:87:20:6a:
         91:70:51:bb:e8:2f:04:43:3e:6d:17:09:a0:f5:77:2f:9a:87:
         84:50:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org