Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
File:                     0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa (raw, json)
Hash identifier:          JXJ6KzvdsHFCPTtIOh2RZlN8OWF79eMp904jlyfKOD0=
Subject key identifier:   60:DE:79:03:C9:A6:69:A9:B1:CB:43:ED:D9:B9:09:6C:46:9D:BD:38
Certificate issuer:       /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
Certificate serial:       010D0C9F43285847B961694247D3ABCFFB5C0600
Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     11170
IP address blocks:        74.118.152.0/21 maxlen: 24
                          142.147.55.0/24 maxlen: 24
                          208.79.240.0/22 maxlen: 24
                          2607:fe70::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:69:42:47:d3:ab:cf:fb:5c:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=c32a4626-16e2-429e-830f-efe79e4301c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:ce:96:df:a2:7b:e9:52:5b:fa:07:e1:6e:
                    60:e3:b1:b7:44:a8:1e:09:74:d1:32:f6:3b:68:e5:
                    e9:43:20:7b:40:a7:26:16:3a:c9:a7:c7:d8:2b:8f:
                    ad:0b:8c:34:a1:03:fb:47:bc:c4:67:d6:a7:a7:b8:
                    91:ee:72:d2:46:85:6b:61:73:f1:6e:21:08:4c:3c:
                    85:d0:a7:ba:78:6b:19:8a:88:d1:e4:47:ab:ed:79:
                    de:57:55:a8:d2:df:11:a9:0d:23:66:d9:c2:08:4f:
                    70:5b:a4:34:00:ab:ba:d2:6c:d6:11:4c:37:3b:a8:
                    6a:26:97:15:c1:f8:e4:d2:6d:ca:a9:31:98:85:06:
                    95:72:4a:6d:4b:a9:b1:8d:90:0a:b4:89:39:13:01:
                    7e:f7:09:01:e0:50:27:d4:bc:b7:10:60:06:b8:43:
                    82:a3:12:af:10:ee:46:5b:b5:ab:2c:39:e1:11:13:
                    d3:57:88:e3:ce:7b:6d:ef:18:6c:af:75:01:d4:6e:
                    6a:98:10:1e:85:38:e7:24:bc:31:01:65:fd:90:74:
                    db:0e:75:3b:dd:7b:20:c1:d7:a3:15:65:02:7d:b6:
                    23:e4:11:84:96:38:ea:bd:ec:c6:b7:e3:32:14:ce:
                    47:11:85:f0:be:1e:5c:94:b8:e9:56:3d:6d:36:9a:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DE:79:03:C9:A6:69:A9:B1:CB:43:ED:D9:B9:09:6C:46:9D:BD:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl

            X509v3 Authority Key Identifier:
                keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.152.0/21
                  142.147.55.0/24
                  208.79.240.0/22
                IPv6:
                  2607:fe70::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:4e:d8:5e:02:4e:6b:b2:e3:32:a1:5f:54:7f:f0:3b:7b:
         fb:61:1e:58:c5:11:bb:0b:30:9f:34:c8:78:de:8b:79:77:20:
         b2:19:a9:e4:e6:90:ae:dd:d5:fd:63:31:98:85:c6:53:49:55:
         c2:2f:00:ab:cb:bd:9e:7b:13:c6:12:6c:9d:40:d8:38:55:21:
         41:77:a9:e5:09:05:22:08:bf:79:13:7a:ba:b8:5c:06:46:c5:
         d6:bd:21:a3:ef:94:fd:47:2d:65:41:ce:1c:98:03:33:5e:0d:
         5b:a4:10:17:98:78:60:0f:96:aa:70:cb:c1:e7:bb:b0:1a:fe:
         ef:5c:d8:bb:55:1c:59:4e:5e:a0:c4:aa:4e:3d:ed:2a:3b:00:
         8e:82:ab:b3:2e:fc:9b:f7:da:58:37:e5:3e:20:fe:e7:ab:e3:
         0c:68:4d:a0:73:36:44:dc:7d:94:d2:d1:ea:cc:d9:ab:3e:60:
         4a:ee:8f:e9:0e:cd:0b:f3:cd:a2:94:46:df:e7:d5:42:2d:ac:
         24:a7:40:b1:8d:58:3b:32:98:57:ee:cd:28:b5:e7:c8:fe:8a:
         be:39:f7:6f:f2:42:45:c1:33:1a:86:ac:03:40:1e:c0:7a:b6:
         1e:19:e7:8c:b6:cc:58:3e:c7:1a:c9:6a:9a:e6:d1:b0:4e:d7:
         82:9a:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:15 2024 by rpki-client on console-fra.rpki-client.org