Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f2bf7ad-bac5-3c9f-9f7a-e02bcec3b86e.roa
File:                     3f2bf7ad-bac5-3c9f-9f7a-e02bcec3b86e.roa (raw, json)
Hash identifier:          mWwyFJ+1n8/nXnSapS4t7vWsR3YnA0BZxwyo3pM4VI4=
Subject key identifier:   DE:F9:C6:DA:F0:CD:54:7B:94:3A:5F:A3:A0:0A:7C:97:A4:8C:AB:02
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DA86BDF97DAB5C1D97020
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f2bf7ad-bac5-3c9f-9f7a-e02bcec3b86e.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        74.87.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:a8:6b:df:97:da:b5:c1:d9:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=c9db3c63-08fd-45e7-adc4-c08678186a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:54:fe:45:40:9f:ad:c0:ad:76:56:2f:c6:
                    04:94:96:94:be:77:71:ed:73:7b:e2:4b:bd:ed:d8:
                    a4:95:45:61:73:42:ac:06:e1:14:f4:4f:10:dc:67:
                    43:4b:14:72:7f:fb:e9:f5:02:2c:91:fd:76:cb:ec:
                    9c:03:b6:e8:6b:9a:e6:cc:e5:42:ba:3b:7e:22:11:
                    c5:72:dd:08:2f:00:4e:80:b2:4b:cc:92:e6:fb:75:
                    16:37:5a:13:0e:b4:a2:51:7d:7b:11:70:bf:66:e5:
                    43:c1:81:50:78:c5:42:64:d8:bf:87:db:75:77:99:
                    61:06:2c:a9:a3:55:89:28:49:d1:49:1f:f4:9d:69:
                    75:33:dc:83:5c:ed:a5:d5:5b:8f:97:8a:ea:c7:1f:
                    26:06:14:d2:a0:eb:53:c8:11:8d:1d:09:db:4f:69:
                    76:f9:6c:ef:4e:04:52:69:bf:7f:37:11:d4:e2:2c:
                    c9:40:e3:19:86:a5:65:83:16:85:f1:22:86:19:d8:
                    2e:42:16:19:57:fd:cc:7e:d3:20:5d:67:5b:5b:41:
                    23:f1:c0:2d:3b:3c:15:d9:94:75:df:33:2d:9f:7b:
                    3d:7d:e1:50:cd:8c:a3:7a:95:f9:b1:84:ee:36:d0:
                    ef:df:e2:0b:6e:6c:97:00:7c:00:03:53:32:34:75:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F9:C6:DA:F0:CD:54:7B:94:3A:5F:A3:A0:0A:7C:97:A4:8C:AB:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f2bf7ad-bac5-3c9f-9f7a-e02bcec3b86e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:a0:57:43:dd:b8:a5:92:e4:39:48:6a:23:94:2a:97:e1:
         37:3d:23:d6:ec:39:ec:0b:8d:a4:3b:43:14:2c:46:5f:cf:fb:
         0c:f3:68:e5:49:d4:20:6b:b9:0c:d4:67:d1:c6:5c:ed:84:21:
         76:14:14:34:8f:3a:01:e4:49:ad:3a:8f:f4:2c:f6:99:c1:f1:
         1d:2d:50:e0:27:7d:8f:4a:56:52:05:74:00:37:cd:95:60:75:
         9f:1e:58:df:35:11:9d:64:c0:d5:5c:cd:0d:6b:9f:2a:95:98:
         44:cc:10:8d:cf:7c:d5:f3:d1:d1:73:63:52:d8:46:9b:06:66:
         ee:93:96:95:14:8f:e4:b6:b3:42:a9:f9:1f:bd:ea:8e:99:a4:
         c8:08:8d:b9:5d:9f:0f:5b:04:75:ce:9e:97:7b:bc:7c:9f:13:
         83:f2:84:af:f1:36:4f:69:6a:56:95:c2:66:5a:36:00:2d:0c:
         7f:5a:11:fb:6f:5c:83:12:b1:ff:6b:1f:2b:0e:a1:8c:84:d1:
         2a:bf:0f:0e:85:20:18:b1:d5:4b:b6:04:79:b0:0f:6f:05:e2:
         ee:8d:35:22:bb:9a:b7:66:f3:be:f0:f9:d2:ac:39:fc:4b:9f:
         03:ae:61:6e:d8:3e:fa:ba:c9:08:6d:b6:25:a3:12:ad:68:16:
         da:57:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:56 2024 by rpki-client on console-ams.rpki-client.org