Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/31328d6e-c73b-363a-ab5b-195ddd657cc7.roa
File:                     31328d6e-c73b-363a-ab5b-195ddd657cc7.roa (raw, json)
Hash identifier:          KTOSHH0TNgyuNcewSr44HqX2yTzWrwfbtSKlbP9lrg4=
Subject key identifier:   EB:61:05:3F:0D:A0:05:BC:9B:A4:C0:0F:21:E0:39:0E:A4:4B:06:17
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285847338E96844DBF347AE519FA80
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/31328d6e-c73b-363a-ab5b-195ddd657cc7.roa
Signing time:             Fri 13 Sep 2024 14:33:28 +0000
ROA not before:           Fri 13 Sep 2024 14:33:28 +0000
ROA not after:            Thu 12 Dec 2024 15:33:28 +0000
asID:                     54548
IP address blocks:        74.208.243.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:8e:96:84:4d:bf:34:7a:e5:19:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:33:28 2024 GMT
            Not After : Dec 12 15:33:28 2024 GMT
        Subject: CN=212b584e-d415-4dff-bf48-14e41216a51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:ee:32:f3:fd:35:21:1d:1e:c4:12:37:bf:
                    1e:f7:86:b2:ef:db:2e:ab:b0:97:2a:5c:f0:05:7e:
                    2d:23:a7:b1:c0:36:97:a7:63:a5:99:63:85:95:29:
                    36:b9:ea:7e:3e:3a:be:2e:e1:6c:82:ce:f2:d1:df:
                    e6:ab:35:61:ea:2f:91:8f:ee:c5:ee:09:11:f0:4b:
                    df:ac:22:28:8b:c6:62:ae:ec:f4:62:8b:0f:c5:51:
                    5d:1f:ba:53:09:0f:c3:d3:f9:98:5f:bc:15:c0:56:
                    f5:57:02:f4:cb:1d:bb:21:29:2e:e6:d8:5d:e7:cd:
                    d4:2f:c9:bf:46:05:1f:9c:b7:25:f1:41:e3:35:27:
                    8e:6e:d1:8f:ad:35:fb:89:f3:bc:bf:bf:23:6e:12:
                    03:6f:b0:cf:1c:43:94:4e:72:48:6e:16:05:26:e6:
                    ed:67:08:f6:5c:04:35:99:5a:bd:a8:62:97:c0:eb:
                    bf:22:a0:d7:9d:dd:39:8d:c6:94:1f:46:86:6c:39:
                    46:a9:31:f5:63:48:b4:2b:08:b4:9f:36:20:dd:b4:
                    b5:40:cb:da:64:21:8c:54:2e:1e:ec:51:d7:3e:17:
                    55:c8:1e:53:64:ee:06:f3:cf:96:97:28:7a:66:0d:
                    86:3f:8d:af:47:0a:b3:99:33:e2:04:aa:52:a8:c6:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:05:3F:0D:A0:05:BC:9B:A4:C0:0F:21:E0:39:0E:A4:4B:06:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/31328d6e-c73b-363a-ab5b-195ddd657cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:51:ce:c4:6e:26:ae:3d:d5:a2:d6:82:4e:c1:90:f4:7f:
         e1:5b:38:02:23:73:e1:09:17:9c:86:c6:91:86:87:76:61:4e:
         61:d7:85:a8:94:34:13:75:fb:22:03:47:a7:84:37:af:ea:7b:
         c6:57:48:5e:cb:a9:09:03:e9:fe:fb:24:ca:e0:af:c7:71:cd:
         80:b1:b1:b1:8d:ba:a4:9f:c6:6c:58:54:c7:cb:21:87:4a:b5:
         ca:59:fb:7c:6e:d0:c3:52:38:ae:cd:88:e3:3b:2b:e2:54:fb:
         be:48:27:07:93:7a:10:eb:29:53:08:c6:1b:70:60:bf:e3:68:
         ad:ea:6a:30:c2:ae:73:b4:69:da:9b:99:4b:63:c9:4e:3d:a8:
         bc:91:12:6d:2a:62:21:ed:4b:e7:b8:28:6d:59:62:8c:71:96:
         32:a4:08:13:29:73:1c:5e:ff:4a:4c:15:5d:b9:75:87:da:0e:
         95:60:45:b7:21:6f:60:b7:0d:06:ac:a7:64:2e:a1:c7:60:6b:
         0a:40:f8:52:3b:e1:cf:fe:be:16:59:40:b0:66:45:a7:f1:9b:
         dd:bf:71:40:89:cb:79:cd:e1:d8:b3:a3:07:19:0a:4a:0a:77:
         38:0f:69:a5:aa:e2:1b:c6:89:e2:77:de:cd:b5:d2:6a:57:6b:
         86:21:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org