Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8be8911a-c0db-3184-9ca4-d0a5936c348c.roa
File:                     8be8911a-c0db-3184-9ca4-d0a5936c348c.roa (raw, json)
Hash identifier:          y+lz0pQ7KrqjQOrDZy7Db3HOf7fIyLxNybGiw/6jzmg=
Subject key identifier:   28:8D:4B:E0:26:6F:9C:C6:49:59:A1:05:5E:5F:4B:61:77:54:9A:8F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858393219978F05850C4488816F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8be8911a-c0db-3184-9ca4-d0a5936c348c.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10838
IP address blocks:        74.87.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:97:8f:05:85:0c:44:88:81:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=571cd7dc-6cba-4bb0-868f-ed2d21849539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:14:00:31:24:40:f2:a3:d8:2a:a9:b9:f8:
                    0f:7d:1c:3a:6d:4a:fa:b1:c9:fe:5f:bc:1f:e4:20:
                    05:30:8a:5d:04:4b:32:75:0c:d8:54:70:58:38:18:
                    94:ed:90:6f:4f:8d:98:83:a6:52:8d:59:5e:3a:50:
                    10:66:f2:9d:79:f4:fb:01:f7:22:73:71:cb:b8:80:
                    a8:a0:76:99:43:c5:bf:a2:7b:e2:c4:c3:53:67:22:
                    b3:17:d1:7e:5d:e1:b9:cf:78:27:ab:e8:83:c9:55:
                    44:aa:c0:8d:5a:bb:f6:ef:df:62:84:d3:1e:c0:b6:
                    42:1d:f3:05:e2:5b:ca:a4:98:03:bd:3c:1d:eb:8c:
                    8c:20:d8:4d:ee:eb:78:c1:df:85:83:85:42:71:da:
                    29:00:bc:70:44:73:eb:c0:86:70:0e:36:d6:25:4b:
                    d2:d1:5f:50:f9:bf:39:8e:ca:41:74:f9:2e:c3:a5:
                    e4:7b:45:b7:7d:94:9c:6d:ef:c7:75:9c:5c:47:98:
                    12:e4:bd:3f:f3:2c:78:0b:b7:00:b6:0d:18:e8:f7:
                    d0:8c:a9:20:29:f5:ef:5c:3c:af:34:cf:50:1b:ba:
                    27:dc:f7:fc:32:9d:b9:7d:44:14:29:bf:d0:7a:2f:
                    43:61:06:00:03:87:61:b7:7b:e1:c9:0f:7c:6a:75:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:4B:E0:26:6F:9C:C6:49:59:A1:05:5E:5F:4B:61:77:54:9A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8be8911a-c0db-3184-9ca4-d0a5936c348c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:ff:e6:83:e8:ab:30:0f:49:0d:53:b2:83:ef:9c:b6:b6:
         88:47:6e:fc:d4:8d:8f:b8:02:02:38:d4:f4:10:69:63:18:fe:
         9a:1e:4a:c2:f2:d5:20:b9:1d:5d:c0:81:47:5a:56:54:7e:20:
         03:6f:b4:d1:d7:bb:6f:36:cc:b6:a8:db:39:d5:3f:56:cb:64:
         db:77:90:1c:d0:72:f7:7a:0c:1d:56:b2:72:f3:2e:2b:8b:23:
         17:bd:a3:1d:b0:67:b2:d6:d8:16:10:4e:8b:e2:fe:db:5a:b3:
         1f:69:4d:0a:e3:df:f4:a6:e2:7c:d4:ad:6d:b7:6d:04:1b:a6:
         d1:2f:e4:04:89:96:ce:72:be:38:9a:7f:c3:05:dc:b5:08:e2:
         39:70:06:08:27:7f:c2:09:34:26:a2:ea:04:3b:c9:21:13:f9:
         97:96:1e:81:fc:40:53:25:72:b4:42:54:37:21:60:a7:2d:ae:
         29:f7:d3:2f:a5:37:1f:bf:a3:f0:25:15:db:26:a7:c9:7c:a2:
         d9:2f:23:c3:8f:21:ab:f8:ef:12:cd:44:72:7e:01:6a:46:ad:
         6a:1b:1d:4c:eb:aa:21:ad:f9:b8:97:86:0e:08:27:2d:51:a7:
         53:ac:24:ed:96:90:87:e7:66:74:08:46:84:20:e8:a6:5f:a2:
         69:a0:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:31 2024 by rpki-client on console-fra.rpki-client.org