Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa
File:                     289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa (raw, json)
Hash identifier:          zRSxwxPOgtVlY2xtrcwrf//7s9obAPbJSIU24rS8VFs=
Subject key identifier:   19:9D:09:F9:51:67:AD:73:2B:39:25:E2:16:6A:3A:21:4E:C5:05:4E
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F432858456C53065065D3342F70A59A80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     42
IP address blocks:        204.14.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:06:50:65:d3:34:2f:70:a5:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=59824f15-cd7f-472e-9bdb-e5f94b6cbbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:7d:46:a3:05:6a:f5:31:7e:15:d9:2d:22:
                    bb:60:aa:99:c5:0b:a4:97:53:34:ca:84:af:59:9b:
                    f9:71:39:12:42:6d:7e:62:7f:f5:74:25:b2:96:14:
                    d6:ba:67:80:1f:5b:ab:d7:34:19:1d:88:84:23:2b:
                    e1:ee:a2:ff:c7:07:be:71:7d:6e:ce:06:cd:d0:ad:
                    ed:14:5a:2d:6a:38:39:bf:0e:77:48:99:2d:95:21:
                    00:4d:ff:7d:4c:5b:0f:fd:f5:f6:ca:8d:27:9e:5f:
                    e0:ad:e8:75:89:e2:c7:68:98:0f:03:e5:8a:11:b8:
                    26:65:88:42:8c:0c:a0:b3:fe:0b:28:10:16:83:ab:
                    17:bd:77:7a:93:3c:ee:f5:af:98:10:e7:68:8c:10:
                    ca:c6:23:7c:5d:d0:9e:82:6b:b4:05:2e:80:63:80:
                    01:58:ab:d9:3f:f0:97:60:4b:b1:44:e9:d3:c9:75:
                    c7:a7:9d:bd:ce:10:4b:51:32:cd:ad:81:a6:d8:99:
                    7f:2a:27:1b:47:78:7e:41:3a:f2:73:7a:21:65:0b:
                    cd:b6:8e:bb:ad:a6:85:df:9a:ff:a5:f2:7f:b9:43:
                    08:de:a5:35:4e:54:21:66:87:40:29:65:96:cb:48:
                    b3:c1:ba:6f:59:fb:b5:b9:f5:19:da:2c:37:19:3e:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9D:09:F9:51:67:AD:73:2B:39:25:E2:16:6A:3A:21:4E:C5:05:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:15:14:19:65:5b:3e:53:43:75:d2:d0:d8:ef:f1:89:e8:
         1e:be:ca:c1:0d:12:ad:19:eb:46:53:08:5e:df:fb:54:83:12:
         c9:1c:f6:fc:db:dd:e4:46:00:eb:78:eb:f6:e8:2a:6b:ea:0b:
         1c:85:19:e3:8e:15:70:37:6b:e9:a2:b5:44:a3:40:a3:7d:5d:
         02:1f:2b:af:9d:df:00:1b:4d:f3:1d:63:fd:aa:93:0c:82:6e:
         19:84:dc:14:e5:03:9c:59:b7:05:92:cd:6a:45:d5:a3:6f:4f:
         e6:c3:28:87:d0:c4:d3:27:e5:5a:69:dc:76:69:a4:fa:3d:23:
         bf:f8:5b:e8:51:5c:9c:63:3a:ad:41:48:0a:53:1b:26:86:bb:
         a6:7d:c4:f1:67:95:57:cd:9e:6b:5b:32:31:61:dd:0f:df:0b:
         32:6c:b8:18:02:98:6f:ae:2b:d1:89:b9:3d:b6:df:4c:4e:82:
         35:fe:88:1e:f1:1e:35:13:62:9e:ba:63:a2:b0:23:41:28:5e:
         37:b1:e8:2e:15:e0:be:20:5d:99:28:fa:48:29:1f:4f:38:49:
         eb:a0:f6:6b:a3:7a:67:ac:4e:4f:fa:d4:c9:fc:37:b2:2e:68:
         aa:33:9f:15:95:12:f6:f5:3c:31:8f:5e:56:bf:9a:d0:22:d6:
         cf:4f:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:32:59 2024 by rpki-client on console-fra.rpki-client.org