Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/7e39b765-e3e8-3881-9da8-a808c316afd5.roa
File:                     7e39b765-e3e8-3881-9da8-a808c316afd5.roa (raw, json)
Hash identifier:          wQWQ9KBQdqkTER1Yu/DAEKzWSzTXCgg7oGolDfSVnGE=
Subject key identifier:   85:8F:67:32:64:DB:74:D6:4F:0A:26:AD:27:49:B0:D2:BE:AC:5A:8B
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285845BA7E34BFC7286150789FCC40
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/7e39b765-e3e8-3881-9da8-a808c316afd5.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     18659
IP address blocks:        208.74.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:34:bf:c7:28:61:50:78:9f:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=af6d78b5-2d26-41d9-b8a8-3a1128d6ee1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:ec:ad:73:66:b2:8d:73:05:b9:08:14:65:
                    c2:0e:13:15:37:6d:fc:46:ec:e3:17:7a:a9:6a:9d:
                    98:fa:d2:c2:0b:9a:66:50:94:15:4e:ae:e9:8d:09:
                    be:a3:ac:fa:1b:b9:44:c4:62:ce:82:ee:c4:0a:33:
                    c1:9b:3b:e8:3a:b3:1c:ac:f2:0f:ba:47:72:09:1d:
                    0b:d2:b9:4f:ba:73:5a:0a:2d:13:21:19:20:1b:4d:
                    84:3f:92:bd:08:5e:5c:e0:bd:19:83:13:ec:d0:0a:
                    53:f5:39:94:9d:81:64:c0:20:7b:56:68:a2:f1:f1:
                    af:e7:3e:ad:19:50:78:39:cf:7a:8f:28:b6:90:e9:
                    39:9f:ed:11:9e:a3:c5:ea:d5:88:66:be:31:46:1b:
                    ea:60:bc:c1:00:26:15:99:8f:88:1f:7a:a9:94:3e:
                    0b:1a:2b:19:c9:0f:0e:3d:94:8e:5c:f9:6b:ef:ca:
                    17:06:26:9e:9d:27:0f:12:31:88:a1:da:c0:d4:3c:
                    1c:24:c5:4a:75:16:55:07:b8:76:48:f2:4d:90:59:
                    ae:04:0d:57:44:ee:f8:60:e4:e3:d3:70:17:6a:e2:
                    4b:b5:5b:9c:31:fa:7c:18:be:ef:db:14:5d:50:0e:
                    31:40:82:16:85:5a:2d:08:bb:b0:87:0b:91:e5:a8:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:67:32:64:DB:74:D6:4F:0A:26:AD:27:49:B0:D2:BE:AC:5A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/7e39b765-e3e8-3881-9da8-a808c316afd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:85:01:08:15:64:bb:80:20:87:32:bb:c1:2c:8c:fd:19:60:
         93:dc:75:4b:ab:87:58:49:8a:41:df:4c:10:ee:8a:c3:22:c7:
         fd:7f:5b:ef:b4:72:1b:58:2d:62:e4:41:83:97:d8:2a:b9:53:
         e0:db:0f:ae:f5:b3:db:71:3c:04:c3:c2:8c:42:47:27:42:dc:
         52:70:13:97:55:ab:a7:44:0c:d6:d8:1e:6b:b7:e4:bf:a0:2d:
         d7:2d:91:0b:4d:13:61:2e:8e:fb:e5:eb:6f:75:88:3f:cc:94:
         d3:ed:23:e4:d6:a5:62:2f:0a:e8:16:70:23:3e:e7:3e:66:90:
         62:53:ba:17:0d:44:15:30:87:2e:d3:46:05:40:a2:2e:f2:34:
         e0:35:cf:56:69:72:14:f3:bb:40:b3:78:27:79:29:fa:ee:56:
         d2:54:60:1a:71:d6:ce:5a:6a:1c:df:4e:82:4d:fd:2b:4e:35:
         e8:db:91:a5:f5:81:5a:1d:87:6b:00:20:1c:01:ca:34:77:76:
         10:e4:70:92:19:4c:24:6d:6d:60:d9:3d:55:bf:c0:b9:fa:0a:
         08:57:fe:11:26:c1:39:b5:37:8f:0e:47:95:1c:f8:70:a0:50:
         69:fd:a1:a2:ed:47:1f:73:b6:2f:de:ae:d9:d2:3f:24:4e:d3:
         75:af:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:58:55 2024 by rpki-client on console-ams.rpki-client.org