Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa
File:                     0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa (raw, json)
Hash identifier:          J1HWPq4b0SVodcd8qVJGuLNo34i9BeSufz6JMPcM44o=
Subject key identifier:   1C:05:7C:44:99:C3:BC:12:44:8F:C8:4B:75:21:E7:DE:DC:06:2B:39
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285847299B266D67F4540D897AE700
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     13335
IP address blocks:        74.112.232.0/21 maxlen: 21
                          74.116.95.0/24 maxlen: 24
                          199.19.28.0/22 maxlen: 22
                          208.78.48.0/21 maxlen: 21
                          208.91.192.0/22 maxlen: 22
                          2604:25c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:26:6d:67:f4:54:0d:89:7a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=2b7ce8f0-add0-449d-a55f-ec1e946e3c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:45:5a:d6:4a:d6:af:b3:5c:82:0f:82:4a:25:
                    69:ab:71:73:21:7e:03:be:84:c8:7f:2a:e5:5c:03:
                    9c:60:4c:7a:e6:32:e7:34:ae:f5:8b:3d:68:6c:b1:
                    59:e5:d6:3f:92:9b:9c:b3:08:0a:fc:b8:a9:04:d4:
                    d6:f4:02:eb:ba:64:d6:81:af:e7:5b:cc:9a:65:a6:
                    88:c0:6e:69:1f:84:0c:8b:d0:34:9a:9b:7e:08:21:
                    11:e6:09:1e:a3:22:51:90:5d:73:7e:08:86:78:06:
                    74:5d:fd:95:de:66:af:64:a2:33:ce:3c:95:ba:79:
                    d2:83:67:70:ea:84:a6:6b:c1:e4:95:35:ca:8d:bf:
                    0d:2a:8a:32:cb:40:ac:54:01:d3:c6:4a:f2:2d:c5:
                    8d:41:ab:b3:3c:d6:0c:0c:20:10:7e:85:78:a8:89:
                    9a:59:57:41:5d:06:6b:45:7d:65:2d:ce:1e:15:1d:
                    ca:7b:52:2c:7d:2f:ec:9b:36:e9:10:db:66:d4:c3:
                    0d:9d:4f:7e:ec:11:c2:e2:73:b5:d8:45:32:58:40:
                    ed:ee:22:94:d2:76:49:a0:a4:60:6c:68:d0:26:4d:
                    68:ec:76:95:43:bd:ce:3a:c0:19:3a:7a:dd:b1:f1:
                    d9:b8:4a:bd:0a:64:f3:2a:19:25:9b:ab:75:3e:38:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:05:7C:44:99:C3:BC:12:44:8F:C8:4B:75:21:E7:DE:DC:06:2B:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.232.0/21
                  74.116.95.0/24
                  199.19.28.0/22
                  208.78.48.0/21
                  208.91.192.0/22
                IPv6:
                  2604:25c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:ff:1f:de:64:37:80:a1:b6:a7:94:cc:d4:cb:cf:92:52:
         47:e6:ac:6f:5b:67:94:2d:70:f3:75:14:02:a6:0f:74:44:fc:
         b1:0c:f2:c9:e3:52:9e:e0:e9:cd:e6:a2:98:3a:f8:52:f4:37:
         fc:10:a4:e1:2a:41:92:dc:91:27:cf:2e:f7:a5:bb:82:b0:39:
         c1:e1:70:c2:55:fe:33:e2:e4:4d:05:f6:d3:a0:12:eb:3c:91:
         de:e9:2e:8a:e3:c1:5b:4c:68:b0:45:14:f5:b2:3c:c6:33:4a:
         45:bc:70:3e:16:34:31:3b:9b:47:70:6f:d7:ef:50:29:87:4e:
         b1:c0:3e:ad:6f:18:c7:5b:44:f9:42:30:05:a5:f1:1c:12:2d:
         d7:8b:2c:46:16:89:c1:2f:bc:69:ee:fb:c2:23:5d:b4:67:71:
         79:3f:0f:5c:b3:5e:52:ae:e7:5d:2b:17:2c:ba:39:5e:d0:74:
         05:82:26:8e:c7:84:38:92:34:c7:55:79:cd:bd:7c:fc:f2:75:
         78:cb:c7:64:a0:27:58:b6:0f:14:b1:44:e9:36:e4:a3:c7:17:
         a4:0e:06:00:c0:36:7a:34:4a:eb:9f:72:e2:b9:5c:68:5d:f7:
         b3:b3:8b:b5:2d:e9:d3:3e:1d:8f:1c:c9:f6:77:56:d1:54:e1:
         f2:e1:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:52 2024 by rpki-client on console-fra.rpki-client.org