Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/295943fe-3e47-3654-9486-179ce9244927.roa
File:                     295943fe-3e47-3654-9486-179ce9244927.roa (raw, json)
Hash identifier:          3JSGxkPX7kQ9zyaszcldJAQeC1Zfky7P/Ud7p8X4vvA=
Subject key identifier:   C6:D6:04:70:39:FC:DB:78:70:FC:EC:2D:CF:20:C7:C3:83:9D:89:C8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285839321997BD16A7551E09C3E800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/295943fe-3e47-3654-9486-179ce9244927.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        74.62.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:97:bd:16:a7:55:1e:09:c3:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=e4435c73-bef2-4191-80bc-9857d7ffac34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:1b:66:a6:09:33:c5:64:a4:03:1e:a8:a1:
                    e8:1f:db:27:c9:b0:c6:4e:7f:6c:c7:aa:5b:aa:ad:
                    c7:68:27:d2:8e:79:db:d8:00:07:d1:cd:46:a5:ad:
                    6c:6b:29:0a:42:16:9c:2c:81:55:3e:1b:a1:3b:83:
                    3a:c3:a6:0e:37:22:88:68:0d:3f:77:13:92:d5:98:
                    7c:57:11:a3:b2:ea:69:5e:6c:74:c8:cf:cd:b1:4e:
                    11:a7:55:5f:bf:f0:c5:13:ea:40:c8:cd:e5:49:b6:
                    19:a0:d5:84:9a:31:13:2a:fc:3c:33:02:91:ff:6e:
                    36:52:6c:e6:03:e0:70:a7:a3:78:7c:24:53:23:fe:
                    b0:6b:08:ef:78:ff:50:99:fc:0f:57:e7:f0:43:5d:
                    ea:fe:8b:ad:d6:1e:71:18:f3:f1:5e:0c:2b:49:69:
                    05:3f:d5:77:06:88:dc:b4:c7:3e:80:42:6c:f3:cc:
                    36:4c:ae:27:5c:64:65:0d:78:2a:58:b1:d5:c1:5b:
                    69:d8:47:da:2d:dd:1a:d5:e5:8e:d3:82:e9:5f:fa:
                    52:a3:a7:54:c0:af:7f:2b:e6:e3:a4:ba:14:cf:52:
                    fd:7f:3f:cf:79:34:19:d7:9a:48:b2:a1:da:17:ff:
                    40:7a:61:b8:82:59:84:d2:d8:0e:f5:30:71:9d:75:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:04:70:39:FC:DB:78:70:FC:EC:2D:CF:20:C7:C3:83:9D:89:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/295943fe-3e47-3654-9486-179ce9244927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.62.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5d:59:15:56:54:d1:4e:35:75:98:96:30:7a:3e:9e:37:36:
         50:e9:eb:32:2c:71:39:05:f5:3a:a8:82:b7:c3:fd:d6:20:01:
         82:ec:52:fa:a5:22:b3:30:cd:c5:dd:fe:a8:83:3b:87:02:a4:
         4e:a5:bd:eb:24:16:10:1e:cc:a7:f3:a9:30:2b:c1:f7:98:89:
         9a:aa:c3:87:3f:61:f5:07:fc:fd:1b:57:64:60:27:aa:fd:e3:
         ee:3a:9f:be:c0:37:b8:47:4e:4b:19:6f:a3:cb:d5:24:74:ff:
         3d:c9:2c:a7:2c:8a:06:da:a7:68:d3:dc:bb:95:6f:f4:1b:0e:
         36:11:87:c1:55:f4:fb:74:ad:47:05:57:cd:dd:cb:8a:8f:74:
         98:3d:0a:df:d3:f2:45:7e:51:65:e2:de:23:20:8b:7c:66:6c:
         ef:df:4c:d9:3e:72:bf:7b:f4:52:ae:fc:f7:b3:c2:10:41:31:
         6e:7b:da:e3:b5:1f:6d:79:95:9f:4d:d3:c0:86:a8:5e:38:03:
         c5:1c:93:44:f2:87:89:4a:25:b1:7e:9c:04:36:55:1b:ff:c9:
         ed:de:17:36:10:4f:7d:1a:01:82:70:f4:b7:cd:f9:55:45:65:
         62:45:27:1a:8c:55:89:13:11:28:0f:a6:a4:10:98:c9:db:d8:
         56:e8:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:23 2024 by rpki-client on console-fra.rpki-client.org