Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6ba6adc5-e44e-3f14-a897-6d9f69915847.roa
File:                     6ba6adc5-e44e-3f14-a897-6d9f69915847.roa (raw, json)
Hash identifier:          5WewseXe10300xWjRg2aa9SOZJvOeIeESISncwPVDCo=
Subject key identifier:   13:C1:A3:A8:73:46:5E:68:DA:52:DE:0B:BB:C8:9B:0A:E9:F2:5C:07
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858459C29F9470BB6BF61FD78F420
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6ba6adc5-e44e-3f14-a897-6d9f69915847.roa
Signing time:             Sat 20 Apr 2024 16:16:45 +0000
ROA not before:           Sat 20 Apr 2024 16:16:45 +0000
ROA not after:            Fri 19 Jul 2024 16:16:45 +0000
asID:                     212238
IP address blocks:        74.114.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9c:29:f9:47:0b:b6:bf:61:fd:78:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 20 16:16:45 2024 GMT
            Not After : Jul 19 16:16:45 2024 GMT
        Subject: CN=d61d47d3-7bb8-4615-adf7-298455dd1fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:9a:29:0e:ff:3d:23:66:80:88:0a:36:c1:
                    9f:ed:50:45:9a:f2:d4:1a:ba:1c:e8:08:92:e6:4f:
                    cb:0c:27:6f:8b:56:ae:7e:b6:71:a1:93:94:ce:b6:
                    e6:04:79:bf:d4:af:ab:dc:24:b7:b2:e6:ff:5e:b8:
                    9d:68:72:08:29:c4:5a:93:bd:d1:4c:f0:9e:18:c4:
                    2a:02:00:fa:7c:e0:5e:a7:c0:45:46:09:87:a7:2e:
                    6d:5d:11:3b:17:8e:84:dc:d4:2e:ca:7d:f7:ba:2b:
                    1d:14:b9:57:c2:34:86:85:48:ea:b7:fd:11:c6:df:
                    50:3f:6d:9c:8c:8a:63:6b:b1:17:09:93:26:db:5a:
                    16:95:c9:be:f1:98:7d:af:41:a0:cc:f5:ed:23:24:
                    c1:9c:60:9b:b8:9f:32:16:a7:bf:b7:7e:84:15:db:
                    52:69:51:e5:60:aa:ea:e3:7e:99:0a:0a:75:e2:f3:
                    96:70:73:71:dc:01:b5:60:9e:d2:e3:96:e4:b9:71:
                    65:19:28:e1:47:c3:8b:1a:70:be:ee:4c:70:1a:d5:
                    25:fd:65:ba:8d:57:7e:42:c6:12:cd:42:ba:3f:49:
                    64:df:e8:5b:ea:56:a0:dd:71:4b:4c:dd:87:98:ac:
                    d0:96:a7:ca:ab:a9:c1:b2:5d:a0:84:c6:d7:5f:f4:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:A3:A8:73:46:5E:68:DA:52:DE:0B:BB:C8:9B:0A:E9:F2:5C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6ba6adc5-e44e-3f14-a897-6d9f69915847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:93:1b:df:3b:b0:b8:40:91:aa:21:fb:3b:36:c0:07:55:bc:
         66:85:6b:2a:48:1b:82:b3:33:6a:d9:fd:71:20:b4:72:ff:c1:
         87:24:6b:4c:1d:84:6a:eb:bf:53:c7:a6:51:07:a7:7d:fd:13:
         bf:c4:c7:8e:94:e8:41:c1:46:27:72:40:38:e0:19:07:b7:58:
         20:1d:ca:2b:21:46:4c:13:78:04:a6:32:8d:9d:27:da:12:f0:
         75:79:4e:61:9a:a1:73:11:44:c9:7f:56:b1:50:6a:94:a4:62:
         8b:19:2a:8a:94:70:e1:f8:a6:2f:6d:e0:a5:f6:19:7e:b2:ec:
         ce:bb:1d:23:b2:c5:8f:f4:ca:46:59:e8:28:9f:5f:1d:c2:9d:
         93:f9:45:5c:4d:5e:ce:1c:ff:2e:ae:a6:e2:fa:b7:b2:a7:c0:
         69:0f:2b:8c:f0:e7:d0:44:04:4f:5b:86:e4:ab:b2:a3:f8:2b:
         18:a6:28:6b:6d:7b:a1:df:d1:b0:5e:22:3e:5a:10:c6:d9:ba:
         82:61:c6:24:2a:4b:7a:0f:cf:e5:c1:fe:54:7b:33:8f:2e:e2:
         94:81:f8:be:20:3a:df:6d:3e:08:33:cf:5d:48:55:25:5d:a0:
         5b:a4:96:6f:f7:e4:89:0c:52:24:f8:4a:4d:0e:ee:ed:9b:07:
         7d:02:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:34 2024 by rpki-client on console-ams.rpki-client.org