Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d86474fa-7b64-3ae9-b80b-16ecd0bdaf6c.roa
File:                     d86474fa-7b64-3ae9-b80b-16ecd0bdaf6c.roa (raw, json)
Hash identifier:          pBClyTtjzIYrdIMu/q16UH2cytaaJ+aQr61fS6whIDU=
Subject key identifier:   43:7C:16:80:43:BF:BC:78:BD:45:F6:BF:B4:CC:73:18:FF:5B:09:E4
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F432858479D76AF5D393974302B1B9600
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d86474fa-7b64-3ae9-b80b-16ecd0bdaf6c.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     4651
IP address blocks:        174.35.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:af:5d:39:39:74:30:2b:1b:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=18865b15-ffaf-4b84-9ac5-25e77da7ec7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:c4:1a:15:cf:2a:a4:6e:12:c8:dc:ec:5d:
                    3a:f7:74:45:7b:41:6b:60:c8:e2:72:38:db:b1:2b:
                    de:7d:b7:19:37:aa:47:6c:f0:41:f6:d9:41:a2:b9:
                    1b:f9:b0:05:f3:9a:5a:de:a3:58:be:9b:b4:6e:b5:
                    f6:5e:23:b6:d2:17:5e:42:6b:8f:12:de:41:c9:1a:
                    8e:0e:ab:6e:6b:a2:a0:a6:1c:38:c4:64:7b:f0:96:
                    21:5a:fe:ee:41:63:d1:12:8a:a5:7a:d8:0b:19:a0:
                    0c:28:0c:01:8b:b8:ff:7b:32:fa:05:f1:6e:9a:f7:
                    f7:ac:62:06:4a:e6:22:83:f8:d5:ca:bd:94:33:c9:
                    d8:dc:e9:cc:c5:31:cf:75:09:52:59:40:6d:ea:98:
                    da:22:c0:4e:d6:6b:29:e6:d5:b8:c8:61:0d:c9:e4:
                    ec:81:9b:2a:68:76:07:c9:9a:38:30:f2:69:9e:03:
                    ff:97:89:50:37:3c:c7:16:7f:c8:19:b3:66:f9:4b:
                    c7:0e:56:0b:55:66:4d:8c:fa:51:c1:26:c5:6d:93:
                    89:e8:33:77:30:3c:43:3a:2f:b3:93:62:b6:9a:fa:
                    1b:68:53:ad:35:f1:b1:1b:fe:82:0f:f3:47:35:0b:
                    83:14:da:9b:c0:54:57:13:9a:cf:d3:88:b0:6a:7d:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7C:16:80:43:BF:BC:78:BD:45:F6:BF:B4:CC:73:18:FF:5B:09:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d86474fa-7b64-3ae9-b80b-16ecd0bdaf6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:06:63:45:78:0f:cb:ea:4b:0f:81:1a:64:1c:5f:ae:7c:1e:
         b3:3d:e3:61:8e:7a:e6:20:33:14:0f:7e:39:7d:48:79:76:1f:
         fe:92:fd:bd:ad:24:a8:af:49:e8:25:e2:88:31:df:da:6c:9d:
         86:57:8f:a7:d2:52:57:12:df:b3:15:47:0e:44:ee:09:49:a2:
         43:98:25:22:ed:6d:14:06:72:52:6f:59:5d:6b:52:b1:df:ee:
         e3:eb:2a:55:7e:01:28:41:8b:a1:43:0c:ec:e2:e7:16:2d:57:
         3b:f3:3c:a7:dc:f7:48:53:f4:36:d4:01:95:fd:89:de:df:2a:
         65:30:92:1d:ce:9e:2b:8d:a6:f0:81:45:ca:02:ae:d4:8b:6c:
         9a:c8:03:3b:f8:b2:8b:96:1d:c1:e7:ca:2b:a1:db:14:0d:a4:
         b4:83:ba:ce:df:78:3c:e6:fe:97:85:08:88:93:5c:4f:b0:6b:
         b8:e2:63:2b:ec:07:f4:2c:42:85:ec:dc:e1:e8:1c:fc:8d:f4:
         70:81:6f:38:18:9d:86:ab:4e:46:27:2d:e2:70:fa:e6:76:fc:
         66:14:12:78:89:a2:fc:ab:0e:a3:fc:e3:3e:6e:90:00:eb:9a:
         96:cb:2d:73:58:f0:a6:ad:5e:e3:e5:fc:f4:6a:04:a2:78:d9:
         f9:92:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:00 2024 by rpki-client on console-ams.rpki-client.org