Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa
File:                     3873425f-0330-3da6-b372-5e44dd7a2deb.roa (raw, json)
Hash identifier:          ZVMncxCq3eIa67oGgB5Ao1IYJpBmF9Ey+ItlELVm4C4=
Subject key identifier:   4A:F9:67:5F:A6:D2:DA:C0:E4:65:4A:D7:DA:4C:08:F2:5D:83:FE:22
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584726D089E0A754377B098B7D20
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     35847
IP address blocks:        74.51.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:89:e0:a7:54:37:7b:09:8b:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=ca5d8132-711f-4bbe-8e5d-b0eac0ad5537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:c4:bf:ad:6c:8c:23:b2:d6:8d:e4:a5:a9:
                    e9:0e:76:32:13:7b:c2:88:bb:c3:3d:3d:47:6d:f5:
                    b0:4e:e0:29:1b:3a:c6:83:0e:62:fb:72:fc:91:24:
                    e3:fa:cf:e1:e1:f0:72:9e:2b:69:0d:3d:3e:c3:93:
                    d1:d9:a9:47:04:26:79:13:c5:b1:16:fd:4b:94:a4:
                    fb:27:18:1f:bf:c2:0e:8a:b9:e3:33:64:a2:38:0f:
                    9b:a3:5c:63:23:c1:05:50:3e:13:ca:b8:6f:45:0a:
                    61:7e:a1:aa:eb:b8:5d:24:2e:3d:f5:90:55:75:e8:
                    45:09:2b:3b:93:ec:0a:74:b7:a8:9a:c6:0d:c6:b8:
                    60:6f:9a:ec:71:41:8a:fb:25:87:e3:a2:33:49:b5:
                    cd:9f:72:94:08:a2:d4:8f:ea:b6:bd:1d:17:71:41:
                    53:54:e1:8c:0a:ae:d5:56:10:9c:de:e1:94:e0:98:
                    e1:9c:00:59:9b:47:58:f4:16:73:b8:9d:ab:5f:fd:
                    88:97:44:fc:78:23:13:e0:59:cd:92:d6:91:ad:9c:
                    25:f1:34:4a:64:98:74:9e:59:6c:ea:3e:69:54:64:
                    de:5b:23:2c:0a:ff:94:f1:cc:3e:92:1f:d8:cd:01:
                    56:dd:8f:f3:10:af:31:aa:2a:08:51:6a:e3:f7:a4:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:67:5F:A6:D2:DA:C0:E4:65:4A:D7:DA:4C:08:F2:5D:83:FE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:0a:8b:c0:71:2c:52:b4:f3:b5:82:ce:50:5b:23:b0:9e:
         d6:b6:35:36:d6:12:97:06:74:6a:49:99:02:c7:1a:44:67:4b:
         03:27:89:2c:f8:6e:34:05:58:91:4f:75:93:e0:12:20:20:43:
         42:da:ae:76:0d:22:ea:94:44:f1:1c:a8:a3:cc:f0:83:ef:38:
         31:78:b4:29:d9:d5:8b:43:dc:23:79:3d:25:11:12:e6:c4:a7:
         3d:b6:3a:bf:79:01:a8:8b:1c:ad:13:c8:1d:57:79:3b:ba:75:
         46:cb:9f:c4:81:99:7d:bd:0c:b6:c2:f4:8c:34:cb:4c:c9:53:
         47:90:30:e8:51:b0:bd:ff:20:93:44:31:c5:2a:ad:1c:75:5b:
         31:96:62:1a:64:63:d1:9d:36:f5:ee:91:27:37:4b:3a:ec:2d:
         e2:5f:2b:f6:0e:21:6b:8e:f7:c1:c0:90:2d:45:40:b0:ab:ff:
         bf:40:ed:da:55:9d:b6:0d:6b:9a:af:52:34:cc:ae:72:03:36:
         27:cb:a6:fc:4e:c3:9b:7b:74:89:15:5f:55:2f:6c:d9:fa:2b:
         f0:04:74:82:da:df:f0:07:ea:17:0d:5f:88:20:9c:be:18:d6:
         ac:21:d2:dd:a3:69:10:8b:f3:a7:3e:f5:1b:ca:62:a6:d3:6f:
         70:cd:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:07 2024 by rpki-client on console-fra.rpki-client.org