Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/59c8ecc5-3951-3074-8a06-9689951a690b.roa
File:                     59c8ecc5-3951-3074-8a06-9689951a690b.roa (raw, json)
Hash identifier:          s3Lq4lsqddEpnOZ7EZ+zG7LUxsJTTFvN9Qx9nW6r5sA=
Subject key identifier:   BC:F8:83:15:AA:E7:98:49:78:3A:72:CE:D4:FF:00:7C:04:1A:82:26
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285845BA7E311A478BFEE277A21640
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/59c8ecc5-3951-3074-8a06-9689951a690b.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     18594
IP address blocks:        74.120.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:31:1a:47:8b:fe:e2:77:a2:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=fb829094-07bd-4f3e-87e8-b2a7e2c13fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:88:c1:19:a7:27:91:ae:a7:01:3e:bc:47:
                    cc:48:a7:57:3c:be:5d:ea:c0:a0:8f:9a:ba:9e:63:
                    3d:c3:a1:f5:b3:df:bc:8e:0f:cf:68:c0:79:df:41:
                    2f:86:03:14:c1:db:61:02:c9:8c:91:12:ea:dd:9d:
                    78:a9:19:12:d3:b3:ad:25:5b:67:45:5e:f7:2f:aa:
                    f9:e9:c0:5d:c3:4d:16:a2:e4:59:a4:c6:5a:15:33:
                    ad:b9:9d:ef:53:8a:7e:4b:45:1a:ec:d1:0a:86:af:
                    03:5b:53:cb:ac:60:7f:bc:a1:43:ca:e3:b2:81:e6:
                    c7:9a:13:68:e4:d4:ac:72:83:62:3e:d3:23:14:9b:
                    19:a9:f9:e0:57:f9:15:88:45:77:af:32:b9:72:24:
                    a9:1a:5e:5f:0c:97:90:b5:6d:27:c1:2e:bc:a9:dd:
                    13:b6:74:5f:da:55:38:3c:e6:2b:3c:d5:00:ac:c2:
                    6d:10:2c:26:07:aa:e3:13:fb:ea:52:5d:92:64:19:
                    6a:b1:6c:02:56:23:74:59:00:13:70:f2:13:08:81:
                    9c:67:5c:12:6f:04:83:ff:43:11:2a:5b:f6:52:ea:
                    35:cc:d6:ac:24:13:2c:59:c2:2b:17:71:0c:c0:fe:
                    36:05:1e:ee:ba:2a:ef:42:eb:57:a7:bc:95:77:fd:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:83:15:AA:E7:98:49:78:3A:72:CE:D4:FF:00:7C:04:1A:82:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/59c8ecc5-3951-3074-8a06-9689951a690b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:b8:d2:f0:2b:e2:51:de:a2:a1:a9:a0:1f:75:79:42:6f:
         ac:4b:46:61:3f:98:f2:6d:34:da:48:07:7d:42:79:ea:54:52:
         77:80:7b:e8:b7:77:95:75:37:51:ae:9f:ca:53:54:8d:6e:0e:
         24:f6:f8:7a:cb:cf:24:72:df:4b:bf:ee:93:5d:d7:9d:ca:d9:
         e6:cc:b4:fc:44:58:03:1a:5a:4a:31:a5:31:86:d5:0d:8c:66:
         27:45:53:f3:7f:92:3a:d0:cb:6c:7e:b8:ca:a8:77:c6:13:ac:
         e2:c9:30:a0:c6:c4:4c:bd:7f:5a:e3:a2:b3:ea:30:fb:8e:37:
         12:8f:20:3c:aa:f6:19:1c:0d:97:23:c8:a7:de:f1:10:9e:5d:
         69:52:ff:c8:6e:23:70:90:d1:69:c2:59:ed:41:9b:28:0e:97:
         ad:c0:8b:ed:fa:e6:7a:6b:36:c6:fb:f6:aa:0b:22:07:c8:17:
         3c:85:91:0e:21:b3:11:bb:94:b6:5f:78:a8:f1:4d:ad:91:1b:
         b5:0c:04:57:d0:06:9b:2c:fb:60:5b:28:01:1a:f2:4e:a1:1e:
         da:69:e7:a2:18:04:cb:7f:46:2a:c0:96:e3:ec:91:a8:ac:c6:
         45:e8:d8:49:99:c5:7e:c8:3d:f2:22:e8:b4:4f:bb:d6:8c:96:
         ea:b7:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:54:08 2024 by rpki-client on console-fra.rpki-client.org