Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa
File:                     ee282b1a-ceb5-3eef-95c5-520359544df0.roa (raw, json)
Hash identifier:          sVtbhr/th3bJ6UaMCyQ6o2gMvSUf0Mk7ltAXoyFi+70=
Subject key identifier:   59:99:06:F5:E8:E0:80:88:D1:DA:C9:CE:54:A7:FE:05:78:0C:4F:2A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584500F5640A32EA7558DB436CC0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     26421
IP address blocks:        74.202.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:64:0a:32:ea:75:58:db:43:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=6ca74395-b0f7-4abe-867f-7170c4202cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:64:18:3b:00:ba:91:52:09:08:fa:d5:20:
                    8e:86:8d:2b:c0:bc:ca:46:9a:75:47:bd:c9:95:c2:
                    c1:cc:25:7e:77:03:24:22:8a:54:84:49:32:fc:e4:
                    34:f2:2d:13:65:ba:a2:6c:b8:8d:8c:df:47:cd:2b:
                    a2:18:6c:cb:0e:04:29:da:f4:4f:f8:80:ea:27:b8:
                    54:9e:9e:7e:cf:90:cb:4f:b7:66:0e:1b:f5:bd:7a:
                    f9:61:4f:19:45:c0:28:3a:22:82:f6:02:01:8b:b4:
                    fa:02:38:88:4f:07:52:c4:93:0f:32:a2:a9:80:d9:
                    0d:68:ce:aa:93:f1:62:81:bc:03:b9:bf:87:66:e8:
                    ee:cc:4b:94:32:37:50:f6:ac:80:6f:6b:50:a6:9f:
                    6e:de:d4:46:62:e6:a6:17:2f:1a:fb:9c:3a:7a:9c:
                    c1:25:ff:85:ac:b8:b8:2d:55:0d:9b:8e:e5:3e:08:
                    ea:05:bf:fa:12:1f:8f:7e:e0:f6:94:a6:43:ca:99:
                    60:d2:a3:61:8d:45:f0:87:d1:8c:ee:c4:54:1b:a3:
                    53:40:53:d8:57:c7:39:f3:09:4c:16:da:47:c3:1e:
                    9f:7d:af:15:40:23:de:8d:8b:93:d9:41:19:33:c4:
                    46:06:09:c7:8f:aa:04:f3:9e:9b:7d:cd:1a:4e:0d:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:06:F5:E8:E0:80:88:D1:DA:C9:CE:54:A7:FE:05:78:0C:4F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.202.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:53:02:50:06:32:2b:f3:cb:57:a3:2b:18:53:cf:04:08:
         3a:76:bf:9e:ab:f5:3a:6f:03:8b:b6:84:8c:9e:29:4f:69:c9:
         5d:71:e6:05:74:23:a9:c9:11:b0:86:63:38:ae:66:dd:81:a5:
         41:43:99:95:fb:83:2c:db:2b:36:f5:6b:67:6f:b9:72:cf:93:
         7c:3d:29:61:fd:d8:b8:10:b5:c6:5b:ed:2e:5d:c5:78:f4:f6:
         c4:4a:77:f3:99:5a:c0:33:09:3d:ae:c8:13:bd:10:f3:ad:04:
         18:02:cd:ba:e6:21:b5:9e:af:e8:b1:be:8e:bf:c5:46:85:b2:
         7c:d1:ae:73:95:bf:2b:c8:37:27:82:95:6e:76:7d:60:14:19:
         43:f7:97:81:a9:0d:a6:48:2f:cb:b0:b6:bb:cd:18:36:a9:36:
         55:42:60:9e:fc:e6:e7:82:54:96:61:62:87:93:5d:da:b3:22:
         a6:33:f4:88:e6:7f:7e:31:74:92:c7:01:d4:53:84:41:39:81:
         b9:e8:17:39:7a:87:e0:7f:2e:f1:55:c9:17:97:63:e5:1a:13:
         73:07:38:3e:33:f2:a7:83:47:80:f5:79:99:e5:8b:9d:5a:d8:
         76:ed:b5:60:5c:03:7b:36:67:f9:e6:47:25:2e:f4:5d:af:90:
         1b:21:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org