Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38693d61-b0bc-3c60-a796-910d6241dc2f.roa
File:                     38693d61-b0bc-3c60-a796-910d6241dc2f.roa (raw, json)
Hash identifier:          UISVPdb6znL6yRpDwteaqcp+wk8tvIP4y/3gev+mJHM=
Subject key identifier:   FA:28:1F:7E:87:3D:8F:30:9F:3F:56:05:83:34:EF:4B:4D:F1:DF:EF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DBFAC271B1C16DD6F5D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38693d61-b0bc-3c60-a796-910d6241dc2f.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11426
IP address blocks:        74.87.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:bf:ac:27:1b:1c:16:dd:6f:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=d3a831ed-9dd4-47c7-ac2d-b3c01bb90135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:fb:75:fd:ec:04:00:07:48:99:1b:83:67:
                    15:af:f7:f0:85:fb:b2:cc:0f:dc:55:c5:5c:d8:e6:
                    fc:42:ba:bc:db:59:07:e6:25:d4:6f:fe:47:26:a3:
                    71:37:2b:e2:32:df:24:76:9f:21:30:4d:23:2a:14:
                    0d:ea:39:15:8d:63:02:c9:ae:23:6f:51:fb:a8:ef:
                    0f:aa:25:94:a4:25:5d:6c:e1:6f:0d:f3:8f:d0:cc:
                    8f:d0:13:18:3f:4c:b0:1e:72:d2:38:4b:95:c6:3f:
                    7b:f4:74:a6:35:b0:51:56:d4:ec:a4:b5:d9:92:91:
                    eb:28:e6:ac:2d:2c:f4:1a:ed:a4:2f:0d:1a:a1:13:
                    3b:25:ef:52:10:fc:9b:13:58:86:b7:2c:32:ea:f1:
                    e7:88:09:4e:cd:14:6c:42:35:fa:0e:bf:e3:0f:34:
                    05:df:49:69:1b:c7:c2:bb:ca:66:df:07:86:ab:99:
                    0d:d4:f8:fd:d4:5c:18:a3:bb:ad:05:9b:12:de:77:
                    51:5d:05:26:2c:fb:3e:4b:3e:27:95:3e:24:48:77:
                    2c:f7:34:36:5d:8e:0f:e6:b0:13:65:39:38:58:46:
                    40:c4:d6:ce:06:67:a1:6c:29:67:30:1c:5a:1a:3e:
                    7c:f1:17:1a:8e:cd:9e:dd:a5:d9:3e:02:c6:a2:dc:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:1F:7E:87:3D:8F:30:9F:3F:56:05:83:34:EF:4B:4D:F1:DF:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38693d61-b0bc-3c60-a796-910d6241dc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:50:d4:09:f1:fa:12:74:0d:5c:6a:14:2f:6a:0f:59:f2:23:
         d5:59:54:4c:ab:fd:b2:30:c4:03:cd:4a:9f:fd:82:1e:b6:08:
         3d:5d:5c:5f:bd:96:03:aa:38:18:2b:59:a3:81:2e:a0:d3:fa:
         cb:94:33:e9:87:4c:21:4a:c1:df:e5:f4:2c:62:ca:a9:ad:4a:
         41:75:14:b2:59:e9:b8:bf:90:dd:4a:5f:92:9f:11:37:92:c8:
         87:b9:bc:bc:22:e4:8f:01:35:3e:b5:9f:22:5f:5a:53:8b:68:
         a2:9c:ca:2a:b9:c3:76:3f:0a:e8:6e:c8:63:db:5f:e2:a1:c3:
         4d:44:14:cc:fa:41:19:2f:e4:7e:c7:74:2f:64:ed:0d:41:fe:
         10:6f:3b:28:2e:3c:d0:41:7b:6d:91:af:d7:6d:c0:3f:28:f4:
         94:cf:b9:88:e7:38:4a:75:ab:1e:52:6a:5a:7b:fa:84:81:8a:
         bd:c8:f5:a9:c5:56:9a:f4:ad:eb:d0:56:74:e6:94:2a:12:51:
         49:88:00:4f:83:26:8d:fc:d4:76:ec:3f:c4:96:2a:f0:f9:ff:
         3b:6d:13:57:28:73:29:31:5f:e4:13:dd:86:19:aa:18:a4:f7:
         ff:e7:63:e2:4f:c7:5d:fd:a9:61:12:2d:ff:1d:27:8b:cb:87:
         47:9e:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:37:17 2024 by rpki-client on console-fra.rpki-client.org