Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07792df2-9809-3254-94e8-5ff0afcb594f.roa
File:                     07792df2-9809-3254-94e8-5ff0afcb594f.roa (raw, json)
Hash identifier:          mR0Ic6v4DvoTjANbubRfY/iN8k0tXkr66IbjvzFwUa0=
Subject key identifier:   73:AF:04:1B:52:C5:24:75:7F:BA:F3:D2:49:65:E2:1D:11:AA:1A:DF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454907CABF1850843822D11A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07792df2-9809-3254-94e8-5ff0afcb594f.roa
Signing time:             Thu 21 Mar 2024 21:35:47 +0000
ROA not before:           Thu 21 Mar 2024 21:35:47 +0000
ROA not after:            Wed 19 Jun 2024 21:35:47 +0000
asID:                     15169
IP address blocks:        74.125.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:07:ca:bf:18:50:84:38:22:d1:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:35:47 2024 GMT
            Not After : Jun 19 21:35:47 2024 GMT
        Subject: CN=dc72d56f-557f-473c-be99-6703372028c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:ae:81:e9:69:65:3b:20:79:6e:18:5f:19:
                    0f:f3:1c:ad:61:41:00:96:5f:66:2b:f7:f7:fb:35:
                    6a:71:de:cb:41:c5:0c:0a:5e:1a:7d:6f:47:b0:fa:
                    11:76:73:c7:47:62:ae:a9:af:c4:20:a0:e1:c0:30:
                    88:11:cf:84:34:64:9b:24:3d:99:9d:eb:35:22:b8:
                    ff:a1:1c:a7:8a:1f:44:f4:c4:5b:65:98:5e:34:fc:
                    63:5b:46:d7:87:c6:ac:3a:38:af:b5:56:c5:41:da:
                    58:89:cd:b6:9f:0f:b2:90:bb:49:4f:b9:c9:d0:05:
                    3e:a9:46:42:d1:c8:41:20:ef:75:c0:21:15:4d:58:
                    4a:c5:1a:82:c7:ae:cc:f6:21:28:a6:36:60:f0:61:
                    25:f0:4c:9b:bc:29:c4:5f:a9:0d:9d:b5:af:9d:e1:
                    e8:d9:8d:ba:d7:88:e5:5b:f2:3c:b4:ed:45:cd:35:
                    e6:b2:05:3f:7f:02:91:95:a6:5d:10:d0:2b:d9:f8:
                    e6:db:d7:c6:fc:cd:3d:d1:02:73:bf:32:1c:78:75:
                    96:e0:95:83:e9:66:82:60:2d:87:fb:eb:94:c8:01:
                    52:72:60:04:a8:5d:97:4d:68:1f:a5:6c:c1:02:5b:
                    b4:a0:46:e7:77:29:44:3e:53:a4:c1:a7:18:bb:31:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AF:04:1B:52:C5:24:75:7F:BA:F3:D2:49:65:E2:1D:11:AA:1A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07792df2-9809-3254-94e8-5ff0afcb594f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:62:9c:da:f3:c4:df:1e:23:28:09:be:28:c3:83:74:54:85:
         47:af:cf:c8:d9:94:8a:fa:3b:78:ea:b4:7d:11:95:b0:09:4e:
         9e:5d:3d:8c:64:ea:4b:da:78:d7:50:11:85:87:7b:67:01:59:
         7d:76:5a:5d:ba:e7:c8:cd:06:53:c7:2c:99:69:20:25:af:f3:
         39:bf:1a:45:1c:e5:48:58:75:92:89:0f:7e:45:f1:90:9e:80:
         74:a4:bb:6b:9f:64:0f:64:79:1e:ed:b1:fe:30:4c:c1:a5:e6:
         ed:ab:88:44:0c:c0:58:99:fe:d2:52:cd:49:9f:12:65:82:a8:
         9d:5e:49:db:6e:54:f7:c3:0c:5f:3f:77:ee:ee:2a:5b:3e:cd:
         43:73:34:17:32:53:0b:2f:ce:78:28:37:a5:d0:ae:9f:e9:d8:
         4b:b5:d0:60:0b:e0:82:b6:ec:1e:9e:ef:90:0c:06:c5:5e:7e:
         19:eb:1b:39:1a:8e:a0:28:cd:02:03:89:54:44:f6:bf:ff:16:
         e6:e4:3a:4d:7e:9b:89:4a:f1:c5:07:7a:2a:e3:be:0a:a5:b2:
         55:a0:2e:c5:d7:9e:a4:b1:60:02:9f:88:54:8f:c1:5a:8f:73:
         cd:be:d9:e3:5b:c7:6d:20:3f:f4:09:ef:75:f0:fd:e3:f0:10:
         a0:5d:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:52:17 2024 by rpki-client on console-ams.rpki-client.org