Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/e18eb42f-03d4-33a0-a7e2-731e2956ac67.roa
File:                     e18eb42f-03d4-33a0-a7e2-731e2956ac67.roa (raw, json)
Hash identifier:          eoQ/J0Ua5kgojB4p/14b1dLRpYRSTk14PdEG6mPNvEI=
Subject key identifier:   BF:F3:65:BF:31:5B:D5:86:3D:F0:DA:67:A3:6E:AC:7D:05:C1:45:EE
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858477C446FE62BA31A5C5D344400
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/e18eb42f-03d4-33a0-a7e2-731e2956ac67.roa
Signing time:             Wed 09 Oct 2024 15:38:05 +0000
ROA not before:           Wed 09 Oct 2024 15:38:05 +0000
ROA not after:            Tue 07 Jan 2025 16:38:05 +0000
asID:                     0
IP address blocks:        74.119.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:44:6f:e6:2b:a3:1a:5c:5d:34:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Oct  9 15:38:05 2024 GMT
            Not After : Jan  7 16:38:05 2025 GMT
        Subject: CN=701c6b49-19af-450a-bb66-136a9b87d4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:0f:9b:c9:7b:f3:bb:8e:83:44:5f:1c:08:
                    f0:9a:9e:cd:0d:6f:c8:a9:46:36:a3:b8:1d:14:a4:
                    bf:43:5d:4f:89:0a:a6:07:19:a1:86:d6:a6:cd:47:
                    af:28:9a:b5:82:21:c5:7e:a4:21:c6:74:51:1c:48:
                    03:54:d0:d0:ee:ce:11:8f:7f:d9:fd:f2:dc:15:1b:
                    87:3c:4d:fd:2a:40:58:99:67:fb:4a:af:e4:c9:3d:
                    2b:52:4e:d3:38:25:99:31:81:c9:f1:8d:55:66:9c:
                    a4:01:9a:74:94:ea:86:ab:a9:6b:49:dd:de:48:28:
                    51:a2:83:31:9c:9f:2c:6c:e2:87:8a:47:23:19:79:
                    23:ee:e4:f8:fe:5e:58:de:7e:7d:89:7f:78:c1:9c:
                    b5:53:1e:19:fc:4c:ae:de:90:37:56:50:1b:ec:f1:
                    b5:45:d0:dc:3e:42:d2:3d:1c:43:0f:60:da:57:6c:
                    8e:4c:22:11:ea:a5:49:92:9d:74:cc:09:58:40:d6:
                    7b:8e:6c:b7:3b:96:4b:09:62:12:2c:8d:60:4c:05:
                    f8:e1:35:b5:cf:a0:bc:eb:19:e3:85:62:f3:53:57:
                    19:de:14:ca:77:4c:01:14:8d:93:d8:96:2a:5e:86:
                    b3:42:ae:51:7a:75:33:e6:3a:f0:ba:fe:e6:85:f3:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:65:BF:31:5B:D5:86:3D:F0:DA:67:A3:6E:AC:7D:05:C1:45:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/e18eb42f-03d4-33a0-a7e2-731e2956ac67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:42:6e:01:41:64:26:ad:f3:dc:f7:1f:94:2b:00:e8:b9:2f:
         f3:e8:2b:58:c0:c0:63:a0:b0:f6:2c:5d:b2:f6:bd:10:28:dc:
         93:59:b3:44:2f:da:1e:0d:20:b1:c2:5e:c0:42:3a:09:80:ad:
         5c:99:e3:0e:2d:5f:d2:f4:ad:fc:0a:df:21:24:d4:6b:ff:c7:
         e7:58:0e:c2:39:98:09:fe:87:9a:88:a3:ec:a1:af:42:cd:92:
         a1:c3:c5:e5:61:6c:61:f8:82:09:bb:8b:ad:9b:36:74:40:cb:
         44:f5:6d:36:6d:8f:01:dd:21:0a:21:62:2b:7b:c1:da:dd:35:
         a2:dc:32:1c:45:98:aa:05:f4:13:66:2e:9e:2c:27:67:4c:56:
         e9:88:48:e0:26:cf:36:2c:da:83:93:a3:33:62:59:66:bf:65:
         c8:78:d7:44:04:fc:9e:fb:44:87:9a:45:d9:44:97:2d:4c:71:
         b9:95:3c:3f:65:9f:b8:b4:0c:83:b0:ca:08:42:12:2d:d8:f8:
         7d:59:75:5a:20:92:ef:14:bd:10:71:0b:99:d8:e1:dc:fe:45:
         9c:ba:cc:4d:ec:28:ff:3a:d5:ab:1b:09:2b:d4:49:47:31:7d:
         c0:00:ff:8c:aa:d1:81:89:e8:c9:b5:77:ac:5a:e0:c4:66:90:
         69:50:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:24:14 2024 by rpki-client on console-ams.rpki-client.org