Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa
File:                     19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa (raw, json)
Hash identifier:          eIMXjLh0lyiZktn+mASE+QHwdvTl/gEpX/bRp+K87sg=
Subject key identifier:   C8:13:99:10:80:B4:BF:BE:BB:36:53:85:44:F9:24:AE:34:9F:59:E9
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285845E193CFED3B9967FF84152A00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     5650
IP address blocks:        74.91.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cf:ed:3b:99:67:ff:84:15:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=d6c4d558-bac2-4ed2-90c8-59f0dc1aa2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:d8:74:67:28:18:21:67:df:30:9e:b5:42:
                    d0:71:5d:a1:7e:01:c4:a1:1e:18:55:1d:6a:d0:ba:
                    53:9f:d9:c3:34:60:57:ed:58:08:d4:ea:36:bc:e1:
                    1b:3a:b5:08:66:b6:6d:3a:b9:33:b7:9f:bc:a7:be:
                    4d:17:ca:91:8f:73:fd:02:02:cf:39:0e:01:81:c6:
                    7a:39:bc:99:3a:8c:94:38:34:56:4e:53:5e:02:02:
                    d5:b8:f8:26:cb:aa:9f:84:d5:31:54:f6:0c:d0:9d:
                    44:d0:b3:11:e4:51:26:c5:5c:71:a4:a8:0e:dc:23:
                    8c:f5:17:5a:d3:c2:fd:3d:b7:cb:dd:e4:5c:e0:cf:
                    70:a7:9a:4b:f1:6a:34:73:69:09:68:84:92:9b:f7:
                    17:eb:69:0f:11:bb:d9:cb:a9:e1:90:04:cc:4c:27:
                    79:9e:e8:cb:c8:ec:1b:ea:b2:4b:d7:eb:f6:cf:7e:
                    b1:a0:d8:ec:67:c1:d0:72:62:81:d8:26:6f:88:c2:
                    49:49:46:10:c2:10:b3:51:f9:3c:33:de:51:be:36:
                    84:6e:a1:92:1c:3a:87:8c:a0:b1:fe:99:31:b1:ad:
                    0a:b4:62:7b:5d:ff:d0:7d:8c:da:70:f8:4e:09:bb:
                    20:ca:a8:eb:15:85:4c:70:83:90:19:08:2b:ee:b9:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:13:99:10:80:B4:BF:BE:BB:36:53:85:44:F9:24:AE:34:9F:59:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:cb:ed:81:2f:21:35:9e:7e:8b:1b:6c:c9:55:e8:e7:d2:
         ab:3f:69:64:4a:61:05:6e:f4:f7:2c:f9:80:d1:18:54:32:3e:
         79:53:03:1c:f3:ea:94:3b:69:1e:ac:2d:f0:42:e5:ff:0c:ed:
         90:6e:d9:c3:51:f6:b6:ad:fc:be:24:24:38:9a:96:2c:1d:3e:
         a8:0c:61:81:8a:8d:14:de:ba:6f:70:9d:bf:b2:52:46:43:51:
         4f:bd:bb:fd:47:37:11:fd:59:ec:9e:93:81:86:82:9e:8e:81:
         41:db:62:e1:b2:56:33:2a:cd:23:eb:56:07:75:d8:7f:60:1e:
         d7:84:bf:b4:76:a9:16:75:b1:c3:d8:50:57:c4:1e:0f:04:2e:
         3e:32:07:2b:0b:3d:61:18:26:71:3b:ec:9d:1e:de:2e:c5:e7:
         d5:2c:e4:fc:07:fe:d7:9f:56:ba:a6:86:ed:6b:7a:48:5a:3e:
         c5:21:0e:47:96:20:37:a2:61:5c:55:eb:bf:e6:ce:d2:f5:66:
         9a:aa:a3:38:d5:19:c6:9e:2a:55:ae:2d:1f:3d:1e:83:86:73:
         4a:30:ba:5a:76:af:a6:05:40:40:cc:7d:c7:9a:9d:f7:5b:f8:
         bd:7d:20:9d:26:d5:41:71:9e:f6:ea:9d:52:6a:73:3d:db:cf:
         a0:96:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 14:26:11 2024 by rpki-client on console-ams.rpki-client.org