Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/31ad8053-33fa-36c1-b5ee-5da431d002de.roa
File:                     31ad8053-33fa-36c1-b5ee-5da431d002de.roa (raw, json)
Hash identifier:          hTJ8Keq84MLQeIVuCoNZ4nWzauyHnxtSOBtemPY48/0=
Subject key identifier:   61:0F:32:9E:25:8A:05:E6:57:4E:DE:A0:06:73:AF:29:F5:53:EB:DB
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584774FB8F33B0435A256E20C368
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/31ad8053-33fa-36c1-b5ee-5da431d002de.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     36511
IP address blocks:        74.116.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:8f:33:b0:43:5a:25:6e:20:c3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=f8a742c6-81f5-49b3-943f-09314b417ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:0c:fb:e7:f4:c7:19:c8:f0:5c:13:25:be:
                    82:ba:e9:8a:f9:f3:43:54:14:64:6d:7d:b5:14:16:
                    6c:76:f8:01:84:07:b6:f9:b9:fa:7e:1c:93:c1:48:
                    7d:75:1b:ac:32:3b:00:20:71:0b:07:5d:e2:60:63:
                    69:e6:e7:fb:d5:48:57:d4:66:1e:50:06:92:97:86:
                    54:af:76:96:99:83:15:1a:fd:0a:36:58:61:b1:62:
                    70:9a:9a:2d:3b:5c:8f:a1:67:60:4c:03:6d:8c:c8:
                    ee:be:1d:04:91:c7:b3:ea:ab:0d:8a:b5:cd:12:2b:
                    00:da:1a:7d:8c:9c:dd:48:14:ea:fd:72:03:53:4f:
                    bf:09:0d:d9:6d:85:cf:c1:f2:50:ea:b9:c3:50:7a:
                    72:ec:b5:5e:65:b9:fa:c6:fb:82:5d:78:1d:3d:f6:
                    57:03:ed:7a:27:44:fe:db:78:05:a8:9a:58:fb:0e:
                    0f:7a:ac:01:02:46:35:e5:63:f6:e1:39:8a:14:3b:
                    27:9e:1d:13:59:2d:a4:ba:eb:4d:c8:d5:2c:b3:2f:
                    0a:a8:b3:d3:29:6c:75:0e:35:05:49:cc:d9:bf:8f:
                    a7:8f:96:9d:18:46:ac:72:26:90:3d:be:d1:e2:2a:
                    12:9d:31:5f:2a:5e:f6:a8:71:2e:f8:b9:b0:27:8c:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0F:32:9E:25:8A:05:E6:57:4E:DE:A0:06:73:AF:29:F5:53:EB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/31ad8053-33fa-36c1-b5ee-5da431d002de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c2:b9:51:1b:2e:9f:d0:27:cd:1b:26:7b:47:f5:c1:dd:98:
         4b:2a:7a:4c:b9:fd:1a:99:9f:a9:93:0b:6f:a6:62:4c:54:c7:
         db:8d:d7:f7:e3:e9:f2:5b:73:a9:38:57:a7:7e:ad:72:9e:60:
         38:b6:ea:c9:31:18:1f:df:c5:34:1f:bd:50:56:20:89:73:7d:
         8c:ec:ea:71:6d:59:91:19:ad:70:81:e8:fc:17:c9:4c:f9:be:
         8d:0f:02:98:86:42:34:78:02:36:50:4b:bc:27:19:e9:b2:c4:
         90:f6:ae:ab:57:de:3f:2e:8d:5c:0e:71:82:82:00:79:5e:3c:
         41:b9:f7:37:f4:b9:17:b7:e5:b9:4e:5f:65:65:f6:8b:3c:39:
         8a:4c:73:b8:97:6c:49:ad:3a:a4:fc:b5:25:37:62:83:3b:4c:
         60:c9:39:51:e2:1f:5b:72:af:80:1e:86:63:2b:90:0a:a8:44:
         8d:3e:29:5a:3d:63:8d:74:b9:46:21:63:3c:8b:75:38:66:93:
         25:9a:fe:dc:92:8d:2d:32:47:ad:25:49:f1:f9:7e:ec:fc:c3:
         6e:b0:3c:ac:2c:46:29:3e:d8:26:e7:27:55:76:ee:4e:f7:10:
         4b:94:ab:41:88:14:1e:39:48:fd:48:75:90:85:d6:85:a0:99:
         7e:0d:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:17 2024 by rpki-client on console-ams.rpki-client.org