Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
File:                     bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json)
Hash identifier:          HBgJy7uO/qHPpKtTCZM+bOVJ73IA3J7g8l6ZJYPdEMA=
Subject key identifier:   1D:F4:91:FB:8A:F0:61:8C:95:3C:57:4C:94:AC:DD:92:1D:83:79:87
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584726D089729E8915A1BE49E100
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     19528
IP address blocks:        74.209.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:89:72:9e:89:15:a1:be:49:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=3e5aacd1-1323-40a1-8b01-8904adaf2b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5c:9e:14:0f:af:f7:45:d1:74:cf:e4:47:50:
                    0b:02:ee:3b:be:d9:92:db:13:d9:e1:da:68:45:28:
                    61:60:57:33:8f:ee:fe:82:dc:9e:80:24:97:a6:dc:
                    4e:35:60:cb:ed:5c:75:5e:34:66:01:75:47:05:57:
                    db:b6:c1:17:35:ec:a6:20:e5:a4:40:3f:1b:db:ab:
                    1b:52:8c:4d:e5:33:f5:0a:ce:f9:15:a8:bb:ec:b1:
                    66:56:fc:16:4d:a0:1a:4e:d7:17:59:b3:91:8d:51:
                    5d:b1:9d:b4:15:e5:d0:f0:2c:46:21:f5:eb:1e:1d:
                    90:9a:4f:d2:6f:b9:39:1d:46:b3:a8:61:30:a8:2c:
                    59:ea:1e:2e:40:1a:48:7f:17:f8:88:9f:99:f4:08:
                    6b:88:16:f0:bb:08:c0:4e:05:b3:28:88:78:83:09:
                    ac:f8:53:fa:b4:af:02:0e:54:96:03:c9:2d:57:84:
                    f2:e1:5c:81:94:c4:17:08:51:7d:3b:5a:7a:31:e2:
                    ec:6f:a1:2f:c5:f2:1e:32:78:d4:2c:5c:14:c4:d2:
                    2d:a5:dc:fd:72:a2:25:61:1c:c7:d6:b9:cd:07:98:
                    ec:81:d9:38:6e:32:7f:ca:4d:92:84:35:78:04:71:
                    bd:ee:b0:82:e3:23:33:87:b2:6d:fb:53:36:29:15:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F4:91:FB:8A:F0:61:8C:95:3C:57:4C:94:AC:DD:92:1D:83:79:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:15:9f:b2:32:e7:02:ce:3d:93:ae:4a:bb:f9:58:c3:18:
         4b:7b:99:af:e1:05:5b:0b:a9:5c:2c:ec:44:f7:24:50:04:db:
         e1:0c:4a:f2:54:00:2d:bb:c5:c1:b8:0b:0e:8c:0d:57:07:48:
         5f:14:ea:29:de:e5:0d:f9:19:87:4a:23:fa:59:ef:29:f5:70:
         63:30:a8:8e:84:d6:8a:bb:9b:e6:99:62:ac:89:6b:95:10:67:
         1f:88:55:1b:d7:bc:0e:b0:5c:7c:28:80:c1:a4:00:ba:9d:74:
         09:50:54:fd:82:44:bf:02:f4:41:dd:12:c3:32:38:a2:9d:9f:
         56:ae:1c:87:30:c8:43:e5:62:a0:1d:7f:cf:ac:35:31:e2:cc:
         45:fe:48:41:02:6e:bb:3e:cc:72:e7:e5:65:b3:98:af:ab:a1:
         98:b4:4a:12:5d:09:0b:e2:36:2a:bf:63:81:57:67:3f:2f:a4:
         2a:87:9b:c4:c8:28:d3:75:31:a2:f2:24:bd:e3:19:47:b1:74:
         fa:d3:ec:35:c3:1c:a1:1b:bc:88:cb:5d:b0:2a:70:12:ac:60:
         29:3b:fc:ab:c0:bb:75:0f:a6:da:ab:cd:3e:81:b0:c7:94:3f:
         b5:f6:cb:61:3e:f2:ab:7e:fc:81:1c:74:ec:03:6a:9c:13:37:
         37:4b:64:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:26 2024 by rpki-client on console-ams.rpki-client.org