Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa
File:                     bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa (raw, json)
Hash identifier:          LYxj6B99coyiHU9oJu9O8qNVONtXfd5XoD3G5hk8l1g=
Subject key identifier:   AA:DD:F0:58:81:FD:37:AB:37:07:7A:B5:56:8E:36:4A:7E:98:79:F4
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F43285845EF893A85D20F1227046B2890
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     401305
IP address blocks:        207.174.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:3a:85:d2:0f:12:27:04:6b:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=73dea516-beb0-4c2a-9631-c9025f84310a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:d5:40:bf:09:24:10:a1:ab:48:55:75:c1:
                    f0:b0:00:37:07:75:72:a7:f9:dc:98:19:e0:4f:9b:
                    f0:38:91:c6:5a:e7:5e:4d:79:0f:4a:06:f2:0f:04:
                    d3:4f:d4:64:9e:4f:e0:5b:35:ac:f7:01:f2:88:d9:
                    2a:96:53:5c:34:33:94:34:0b:c3:5f:0a:1e:b4:eb:
                    d0:c3:b0:d4:0b:e2:c3:89:d1:71:23:f6:35:71:f4:
                    04:b6:ed:3f:42:da:eb:a7:d4:8f:02:01:ea:ad:a3:
                    66:07:d9:52:cf:5b:f7:8f:07:8c:e3:6c:d4:ec:96:
                    35:d1:33:3e:f7:3b:3f:62:bc:92:ef:66:38:73:5e:
                    dc:b7:5e:95:4a:74:d7:db:e2:63:20:90:71:d5:df:
                    80:ab:c6:54:7b:40:69:78:20:d3:20:6c:69:e6:7f:
                    fd:ad:91:e8:8b:f1:d7:83:ba:b9:64:74:f2:bf:87:
                    8f:61:44:44:e5:89:9a:93:1d:4f:44:6d:9d:45:19:
                    ee:a1:d6:59:1c:c6:ab:c2:eb:e5:77:37:09:4e:00:
                    ef:89:2c:fb:3d:27:5c:fe:7c:a3:8c:db:20:d2:9a:
                    7f:f8:06:b8:92:67:f1:82:95:9d:d5:f4:05:8d:ef:
                    62:dc:a9:fd:d9:a5:0c:e4:63:7c:95:d0:dd:94:af:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DD:F0:58:81:FD:37:AB:37:07:7A:B5:56:8E:36:4A:7E:98:79:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:6b:a7:6e:00:d3:2e:17:e7:25:43:18:7d:0d:bc:31:12:
         71:34:4d:b6:b6:b3:45:0f:ee:ba:1f:e2:c8:d4:07:fe:21:72:
         8b:5c:47:6c:7e:23:1e:d5:e3:e0:5f:5a:28:3f:84:63:a1:b9:
         10:e6:05:b7:b1:d3:cb:7f:40:2f:0c:5b:f1:a5:a8:38:dc:0a:
         8c:a0:44:eb:4a:ed:b7:1b:55:14:75:30:cd:2d:19:e6:db:75:
         50:59:bf:f1:6c:f5:ef:94:c4:b5:7f:c8:fb:77:f3:7d:8b:3c:
         dd:73:ae:89:7c:b5:a6:cc:89:d1:0d:43:7e:7a:6b:22:e2:78:
         f1:2a:cb:9f:a8:63:8c:a1:08:2c:70:82:a8:9c:13:3e:2d:42:
         16:57:75:92:67:7f:a5:7d:f0:91:46:6e:12:6c:c4:b0:03:76:
         ea:e1:85:3b:63:43:01:75:ff:35:ea:1f:91:29:e0:fb:e2:01:
         9c:37:97:8b:ff:ad:33:10:92:dc:af:f6:87:85:c4:ad:83:18:
         36:be:4d:3a:ac:3b:b1:d3:a4:40:1d:6c:8b:f9:83:50:49:da:
         6b:4a:03:9a:c6:29:6b:8d:13:2d:9a:0b:b6:d2:fb:b5:81:d4:
         3f:47:e4:9a:3b:76:40:2f:1f:83:e3:a7:36:32:ea:c7:6b:ec:
         65:63:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:55:34 2024 by rpki-client on console-ams.rpki-client.org