Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
File:                     b2961625-afdd-3c57-ae0c-90c9e114d526.roa (raw, json)
Hash identifier:          RKbKfa3aNcP8frDYtnsEqJ7PaUxw/FSxomNvKGjeYlQ=
Subject key identifier:   94:C6:7E:17:BB:1B:C5:21:28:D3:3F:8A:49:D5:E1:E5:68:E0:08:91
Certificate issuer:       /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial:       010D0C9F432858456F792904DAF760D042115C40
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
Signing time:             Thu 04 Apr 2024 16:04:55 +0000
ROA not before:           Thu 04 Apr 2024 16:04:55 +0000
ROA not after:            Wed 03 Jul 2024 16:04:55 +0000
asID:                     7029
IP address blocks:        74.117.216.0/21 maxlen: 21
                          74.117.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:79:29:04:da:f7:60:d0:42:11:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
        Validity
            Not Before: Apr  4 16:04:55 2024 GMT
            Not After : Jul  3 16:04:55 2024 GMT
        Subject: CN=7fe7aa4a-9e4c-48ee-929f-f5cddc122441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:9f:c9:9c:1f:f1:85:f1:42:b1:33:c7:2f:
                    0a:18:c2:0c:d4:8a:b5:c0:77:d7:52:fa:4a:70:3a:
                    f5:a2:9a:17:a7:77:cb:00:e0:ae:df:1d:d7:d3:27:
                    69:b5:fd:21:8c:b9:36:af:fe:e5:8d:99:f1:17:6c:
                    45:7f:b1:50:40:ee:08:a3:b2:4f:ce:bd:8c:a0:77:
                    de:a8:04:90:10:ae:e1:19:35:fd:42:ea:d8:77:7c:
                    7c:b4:cc:c4:2a:6c:b5:64:ad:12:df:7f:73:52:f5:
                    4e:4d:57:68:e1:23:32:80:5d:01:4e:50:74:a2:2e:
                    fa:85:66:03:e0:ab:9e:68:77:5d:68:4d:4e:db:f9:
                    8e:d5:c7:38:e9:71:0c:dc:3c:bf:2c:57:46:30:62:
                    a3:06:bd:a5:e9:cc:eb:66:99:ec:71:43:ae:85:56:
                    89:16:90:5e:08:5b:1b:70:6b:2b:17:e5:94:31:6d:
                    6a:60:54:ee:cc:fc:67:77:b9:05:db:7c:f8:20:6e:
                    cb:6f:13:78:94:24:f5:8e:a7:5d:48:57:15:6a:30:
                    3d:e2:39:1d:a6:cd:e6:fc:4b:ea:43:85:ee:6d:f0:
                    14:84:43:41:a9:8f:56:f4:c1:15:80:d5:44:92:a2:
                    3a:1d:d4:b3:e9:e3:a6:7c:d9:17:12:0d:f6:1b:61:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:7E:17:BB:1B:C5:21:28:D3:3F:8A:49:D5:E1:E5:68:E0:08:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl

            X509v3 Authority Key Identifier:
                keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:4c:6f:aa:6d:36:f6:3c:65:ca:19:c6:73:6e:01:5d:ce:
         4a:5f:6d:53:0e:98:fe:ca:94:d9:36:b2:c7:39:6c:32:3b:bb:
         e4:a0:9f:72:fa:7d:32:fc:8a:16:1c:ad:7c:1e:9a:50:43:22:
         37:15:bc:00:a5:60:cf:35:cf:5d:16:30:ac:f8:14:71:d0:ac:
         59:70:b6:98:3f:86:41:e4:62:af:99:b3:8f:e3:6b:12:29:81:
         c6:be:c9:35:07:0f:54:59:e2:ef:9f:5c:3c:c8:4d:7c:2a:2f:
         4b:da:1d:2f:06:fd:6b:f9:1d:ff:dc:a5:04:bd:92:34:15:75:
         fe:0b:f6:59:e6:06:48:24:54:4f:6e:f3:77:b2:ab:5f:b7:e8:
         b2:28:71:ea:2d:b6:f7:ba:e9:9f:89:38:ca:65:35:ec:c7:fb:
         3d:87:ec:38:26:f4:89:d9:e0:96:ea:b5:1e:72:46:bf:4d:c3:
         ee:3b:1b:de:65:b9:37:94:f3:85:bf:2a:53:d9:82:a3:17:c5:
         8e:21:de:84:c6:eb:be:0c:ac:8b:39:e9:97:7d:c1:4e:cb:d4:
         0d:d7:5b:73:7a:56:e4:10:12:b5:78:2c:47:ad:b1:39:a1:5b:
         bf:b3:37:e2:3c:05:8c:ca:25:21:92:f2:97:ec:1c:6a:d2:43:
         1a:20:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:40:45 2024 by rpki-client on console-fra.rpki-client.org