Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/848e6944-547f-31e0-92c6-cbcd94b8c02d.roa
File:                     848e6944-547f-31e0-92c6-cbcd94b8c02d.roa (raw, json)
Hash identifier:          vonCEnJQdK2zcLqvYDRcZo4eQMlw7IqIRbnKHLBFIeU=
Subject key identifier:   50:7B:03:D1:8E:7F:76:3E:A5:2A:4A:60:51:36:ED:77:9D:41:7A:84
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584523DAFB64039A20B0D1879680
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/848e6944-547f-31e0-92c6-cbcd94b8c02d.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     21559
IP address blocks:        74.119.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fb:64:03:9a:20:b0:d1:87:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=2799cd9d-af68-47c4-9e2f-5c7c0d71e607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:67:09:fc:bd:ff:ad:d7:50:90:04:56:6b:
                    06:22:a3:23:e7:5c:c2:4a:d7:c1:56:a2:a6:40:26:
                    81:1c:b0:18:da:8f:f7:72:98:6b:16:6a:82:e2:9b:
                    20:16:ee:94:98:1c:33:63:18:47:52:29:dc:5a:6c:
                    41:29:98:37:c6:a0:d6:62:0d:74:91:78:e3:78:b2:
                    bf:9f:18:47:e0:de:c6:84:20:e9:ac:09:05:c3:0e:
                    33:29:35:9f:3f:3c:eb:33:f7:b2:4c:78:53:bc:74:
                    1f:8c:08:dc:ff:03:ef:5d:0b:5f:8f:f3:01:a2:99:
                    df:3d:59:bc:92:90:fe:ea:84:c0:a6:44:92:b5:44:
                    1e:e9:e4:18:a9:e6:cb:81:40:17:c9:86:1c:25:2e:
                    46:bb:b6:44:51:ea:a2:74:29:29:b1:fe:33:a6:a2:
                    99:b1:3b:36:f8:eb:56:f5:0a:78:95:d9:6c:2a:93:
                    af:07:2b:9c:cf:06:92:0e:8f:ef:9d:ce:a5:07:b5:
                    1d:a5:7f:0c:c2:98:a7:9c:44:2d:8c:6f:e5:dd:07:
                    9a:05:c9:9c:5a:a1:21:c4:37:bb:62:5d:c0:5e:a7:
                    6f:a9:0c:10:01:71:b6:dd:db:9b:fc:85:c7:e6:da:
                    40:4d:b8:e4:d2:ec:91:5c:b7:45:6a:8a:90:ff:a3:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7B:03:D1:8E:7F:76:3E:A5:2A:4A:60:51:36:ED:77:9D:41:7A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/848e6944-547f-31e0-92c6-cbcd94b8c02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:65:0f:97:23:c7:d9:be:d9:60:ac:70:b2:59:c6:94:eb:38:
         bb:ba:9d:ab:fc:3c:8e:c2:ec:f8:37:f1:bd:1b:4a:b5:b1:30:
         12:3a:d0:2e:20:b2:8d:e9:46:51:b3:09:2c:9d:02:0c:eb:ce:
         56:79:6d:06:ec:0c:23:ac:15:c3:e7:b1:4b:4f:e5:7b:19:a3:
         80:4b:53:ac:cd:9a:f6:16:ae:0d:70:49:dc:27:a0:4a:7a:74:
         5e:f0:d5:a1:c7:0f:b8:31:08:4c:df:73:db:e3:55:9a:4b:28:
         d2:44:73:85:86:66:b5:b9:38:9c:75:cc:fa:76:1b:32:4d:52:
         9d:a6:c7:ee:a9:a6:56:fc:75:08:83:b8:46:8b:43:93:ab:db:
         01:e9:7e:99:8a:04:7f:5e:0b:dc:17:24:73:ef:5a:88:e1:1d:
         13:1c:17:45:8a:e9:1d:e8:12:b2:c2:93:0b:0f:31:bf:45:45:
         01:ca:77:ec:19:62:25:78:ee:4c:b0:30:5f:0a:08:10:30:d3:
         e4:d1:3a:00:6d:55:ec:b9:2a:cb:fa:3c:f9:54:49:60:62:ac:
         c3:01:cd:08:7a:9b:5e:cd:ad:e9:62:b7:71:e2:10:59:7b:c9:
         5a:e7:b9:b7:b5:18:60:07:5f:54:2c:d1:a9:69:ab:25:5c:46:
         63:6c:69:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:35 2024 by rpki-client on console-fra.rpki-client.org