Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa
File:                     6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa (raw, json)
Hash identifier:          t1Q6jOaK+e5MaURnZ/kuEtlOqm7uCqnmTVAdU31Hy7k=
Subject key identifier:   E4:AE:1F:0D:63:91:A8:43:55:8B:82:E5:BD:08:85:D9:40:8A:62:6B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584799466ED1E3453ECBC03B6BA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     998
IP address blocks:        72.25.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:6e:d1:e3:45:3e:cb:c0:3b:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=3004f67c-ee92-41f0-96c3-339d823ecaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5a:72:ca:23:b5:52:0a:31:8e:ba:04:92:90:
                    6d:15:3d:55:f6:5e:77:4f:5d:19:1c:ec:64:26:99:
                    49:48:ec:49:3e:23:f6:ef:03:23:b0:da:f0:08:d1:
                    3c:0f:c9:59:19:8e:f3:87:57:6f:e9:f2:c7:c1:8b:
                    4c:cf:32:87:71:d9:1d:78:f0:7b:31:22:7a:03:9c:
                    de:2f:0b:0c:96:67:bb:b7:28:de:8c:ce:fe:2c:75:
                    1a:e3:f0:0a:ee:23:d6:23:c0:82:09:85:64:b4:b4:
                    4f:27:25:e7:e0:f5:9a:2e:9a:65:30:12:3f:94:70:
                    6f:fd:c7:fd:5e:64:0e:cc:4f:05:40:28:59:24:f1:
                    ca:f2:a5:cb:b5:c9:fa:a9:01:89:7e:1c:2a:72:97:
                    07:ea:dc:89:ae:6b:c0:09:04:dc:98:8c:25:eb:6d:
                    fa:b6:f3:e7:62:ce:e4:4c:b6:cd:53:a6:d4:86:25:
                    54:5c:49:90:84:31:c3:27:7a:f3:b9:76:5f:f7:50:
                    8e:25:1d:f6:f4:c6:52:2a:fb:76:f4:18:a7:2b:99:
                    1a:ab:e2:da:c6:80:af:43:d8:91:ac:ac:05:c2:ff:
                    e3:73:2d:89:4a:fd:60:88:da:24:86:39:3c:6e:ce:
                    8f:85:f2:be:1c:54:9c:ab:b4:39:d0:2a:d0:e0:d8:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AE:1F:0D:63:91:A8:43:55:8B:82:E5:BD:08:85:D9:40:8A:62:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:70:bd:48:fa:6a:fc:13:90:68:2b:6c:c6:84:33:52:21:61:
         46:9d:8f:11:9c:a0:6b:03:16:b0:bf:30:06:ee:0b:d4:ff:16:
         99:16:95:cd:2a:0f:a3:8e:8e:bf:54:75:3c:45:4d:e9:ed:04:
         f5:50:4c:c9:ac:21:bd:11:61:57:5e:f9:66:fb:50:26:90:72:
         d5:92:b6:89:f2:d4:91:e7:b5:e8:1a:2f:b2:4a:e6:de:b3:a3:
         46:d6:3a:aa:e7:54:e0:cb:e3:49:97:de:ae:46:00:86:03:d0:
         63:a2:27:94:43:b0:2e:be:a1:ef:da:a0:e8:7e:44:c0:4b:75:
         43:63:0f:18:70:71:c2:e1:16:e7:dd:1b:d2:ac:14:8f:65:97:
         62:4a:72:89:70:0e:fb:7a:71:67:dd:03:32:50:42:cb:7f:58:
         4b:c2:7c:e3:a5:8a:2a:62:a1:85:19:9c:5c:7b:e8:51:9a:1b:
         3f:60:a8:63:dd:37:8f:1c:f8:c8:e1:fb:97:80:2a:4f:61:29:
         c7:e2:06:d9:1e:01:0b:bd:a0:3c:4e:20:a5:b7:81:ad:25:c5:
         8f:a8:8b:56:ca:da:33:2a:ae:5e:c0:df:27:28:58:1d:69:ef:
         03:84:a0:3d:ee:d3:bd:29:0f:1f:ee:80:48:b5:cf:e4:3f:c8:
         2c:5c:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:11 2024 by rpki-client on console-ams.rpki-client.org