Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/dfb1d344-6b07-3597-a546-a308b4db9f42.roa
File:                     dfb1d344-6b07-3597-a546-a308b4db9f42.roa (raw, json)
Hash identifier:          1lY/kfYIaVisZwtg2ZD2/9drYHADCazcyxVqZiu8gQU=
Subject key identifier:   2D:EE:D5:E6:04:F0:F4:71:79:D6:6E:86:7A:2F:0F:A1:7D:A5:CE:DF
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F432858450ABAD23CE687F9DCADCBA580
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/dfb1d344-6b07-3597-a546-a308b4db9f42.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     394180
IP address blocks:        74.114.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d2:3c:e6:87:f9:dc:ad:cb:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=dc5f9c92-d9b9-43ac-a748-6239697a652f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:d7:0d:21:03:57:2e:fa:9a:8b:e8:9e:2c:
                    5e:f8:c5:2a:35:d8:79:66:bd:91:f8:e3:d8:09:5c:
                    c2:b0:34:6d:a5:b5:15:7f:03:de:60:27:d3:1b:19:
                    bb:3d:80:af:eb:10:39:82:77:a1:ee:0f:6a:74:c6:
                    77:24:bc:27:28:55:89:45:15:17:55:81:2b:35:0e:
                    9d:e1:22:94:4f:e8:c9:90:e7:3e:08:c8:cf:8f:a4:
                    c4:31:f6:f2:36:33:cc:6a:d4:f1:38:aa:2b:98:76:
                    05:02:1d:c3:9b:63:4d:24:5f:e9:ab:4e:85:52:e6:
                    ad:7e:52:7e:44:b9:5e:e4:7b:34:ce:e0:01:1d:b5:
                    de:70:f1:e2:e7:93:46:ef:e2:37:0a:ce:3d:b1:d4:
                    96:6a:fc:7f:cd:de:53:36:3f:f6:33:08:e9:3d:06:
                    d8:41:6e:69:de:70:57:ba:71:1c:71:e6:12:81:ec:
                    c2:c6:16:28:ad:e8:03:d9:32:86:fe:1d:a3:f9:40:
                    3f:25:e1:69:1e:d2:de:f8:52:4f:c9:88:26:28:08:
                    5d:b0:c8:42:22:58:10:e9:8d:55:4b:4c:69:de:b0:
                    72:1f:8e:ab:72:72:82:e3:ef:7c:dc:2d:5f:14:8b:
                    a7:22:5f:16:93:49:fe:ac:3d:ab:6f:ad:6a:37:c0:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EE:D5:E6:04:F0:F4:71:79:D6:6E:86:7A:2F:0F:A1:7D:A5:CE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/dfb1d344-6b07-3597-a546-a308b4db9f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:b8:c4:94:c2:8f:10:5b:d2:39:a7:80:70:bb:0c:08:87:
         e1:fa:27:f6:1f:d8:ed:28:3d:32:4f:f5:fd:ad:52:37:62:30:
         1d:6b:c0:de:89:7e:45:6e:f9:ab:61:bd:98:f9:7f:33:89:ec:
         3a:e4:26:31:ba:ad:99:be:86:d2:0e:97:f7:2e:37:18:3c:5a:
         45:86:ef:d9:ac:66:1c:0a:54:a3:7a:4d:79:11:34:17:01:ad:
         54:98:da:1b:26:68:af:bf:17:7c:ed:2d:d3:14:9f:3e:4f:d7:
         b3:dd:42:fb:c4:ad:91:bf:a1:93:35:c2:b3:c4:1e:a0:ce:2a:
         b6:51:70:0c:90:e1:49:2f:ba:0d:09:bd:32:71:06:e3:8c:da:
         c1:67:dd:db:ec:5a:55:48:50:1c:10:1e:10:5c:f0:88:b2:25:
         75:3a:9d:54:27:22:3d:bb:e8:52:e3:2d:d4:93:f2:76:b0:6c:
         84:c7:bb:e4:0d:ce:30:46:b2:e3:c9:e1:0c:37:68:6c:4d:42:
         e4:85:65:99:11:25:54:a5:55:e8:5f:f5:a4:5e:02:d4:87:26:
         65:a8:2b:84:1e:34:21:1d:f4:31:b1:84:8c:a3:b8:00:a5:39:
         f5:94:e6:c2:db:af:ba:96:e2:b2:79:0e:e2:40:40:5d:01:de:
         f6:f2:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:26:41 2024 by rpki-client on console-fra.rpki-client.org