Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
File:                     971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa (raw, json)
Hash identifier:          b3Jf4bNM1BenOZPfnyzAtv5zhAj9GawuGxoMHS6oufg=
Subject key identifier:   D9:E1:DD:E5:0A:E2:60:79:D3:CA:32:76:FE:A6:1F:00:92:61:EE:49
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285847213B1FEBE86E11E787C17700
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     715
IP address blocks:        74.63.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:1f:eb:e8:6e:11:e7:87:c1:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=29b4c247-e62e-46f8-a4dc-500292dac3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:38:65:02:db:f3:01:3c:fb:65:1f:b3:7c:
                    c1:0d:64:63:c0:49:3d:5f:ef:fb:ad:2e:b8:df:5b:
                    99:61:62:f8:a3:d7:71:64:23:c1:17:7b:7c:c7:27:
                    99:03:db:4d:46:87:4d:7d:78:6b:cb:22:a0:79:31:
                    3a:8e:99:b7:60:51:b9:04:a0:65:cf:6c:e0:31:d4:
                    e1:5d:65:4f:f9:c4:42:3b:ca:9c:21:0b:4a:8d:fd:
                    c7:ed:ea:0d:56:f4:d9:7f:6e:09:88:8e:61:a9:ab:
                    10:34:89:df:5a:44:1f:d9:d2:56:02:07:85:98:45:
                    a2:c0:46:87:c0:af:02:b9:36:6c:4b:af:ad:80:fc:
                    f9:91:b6:e9:b3:e2:1f:15:f6:5a:50:98:52:46:71:
                    71:67:2f:4a:d9:a0:fe:42:15:d3:59:87:6f:a6:79:
                    66:b2:ab:88:b2:40:86:91:d8:ed:42:b7:b7:0d:b4:
                    57:d0:a8:c6:75:02:2d:4c:4e:26:b4:f7:b0:85:3a:
                    7a:3c:9e:c3:75:00:bb:06:0f:5a:6d:93:2a:42:43:
                    a1:1a:4f:f2:7b:19:ac:76:bf:cb:9f:71:a9:3e:cd:
                    68:31:41:ec:16:bd:12:32:3e:d0:e4:14:b0:c0:97:
                    21:a7:39:6e:35:12:f0:d9:4c:6a:8e:b6:ec:0f:0d:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:DD:E5:0A:E2:60:79:D3:CA:32:76:FE:A6:1F:00:92:61:EE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:a3:38:d5:86:1d:12:0d:da:a7:90:3d:9c:a1:7e:ad:ac:
         0a:8c:46:e9:4a:48:0f:86:9e:ce:81:0f:b9:59:22:95:f4:c7:
         9f:8c:19:6e:60:43:05:64:ac:70:f0:e3:98:3f:b4:c8:23:ed:
         41:43:b4:f6:6f:bb:9d:a9:7a:6a:78:ec:f2:08:a1:6d:cd:6b:
         5e:12:8b:4d:54:7e:e1:82:46:61:bc:b4:9f:c7:fb:8c:11:a9:
         17:f6:63:8f:26:cf:11:46:12:c7:5e:28:67:c1:09:a5:c9:ad:
         2f:bc:b5:f3:81:f3:49:f2:07:88:53:ea:a6:32:59:40:76:14:
         a3:25:20:a0:f9:31:8c:fa:b8:95:85:2e:fc:a7:c7:0e:85:2e:
         9f:3e:26:ac:3f:7e:38:fc:1f:47:fa:24:fa:43:df:22:d1:b1:
         8d:b6:18:7e:7e:f8:ef:d7:08:ce:8e:04:24:cc:e0:b4:30:44:
         8d:c2:24:db:b3:5a:fb:28:33:3e:09:34:96:8c:91:16:e9:5d:
         71:5a:6f:60:2d:48:5b:be:ce:a5:88:c5:a9:8d:d8:36:28:6c:
         c0:dc:1a:f9:cc:83:66:dc:d5:06:65:c4:52:f3:04:9f:0f:a7:
         a4:5f:66:40:b7:b8:13:9d:05:01:fb:fb:77:26:bf:77:71:aa:
         25:aa:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:20 2024 by rpki-client on console-fra.rpki-client.org