Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/09f24c0a-499e-358e-8cd6-435cbaafac51.roa
File:                     09f24c0a-499e-358e-8cd6-435cbaafac51.roa (raw, json)
Hash identifier:          YArl+x1jR1n80XedsXC7HNXvXwzjjjy3l4kxd+F9Z74=
Subject key identifier:   A1:4A:E2:FA:C7:1A:CF:8A:36:2C:28:DF:BA:AE:47:3E:4B:95:F3:EC
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285847A5D6B10DF1F3B4B5F5088FA0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/09f24c0a-499e-358e-8cd6-435cbaafac51.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     26065
IP address blocks:        69.74.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b1:0d:f1:f3:b4:b5:f5:08:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=9a7b1240-b131-4475-bd19-7cbca5875649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:cb:5b:15:ee:2f:25:b6:ee:70:39:d3:92:
                    4d:83:36:38:04:81:99:f7:92:65:2f:e1:06:09:7d:
                    5b:ba:d3:c2:68:8e:e0:bb:cf:da:c8:af:5c:79:fe:
                    05:e5:8c:19:ee:e3:7f:b4:b4:66:fe:c9:a9:66:b8:
                    09:41:c2:a8:c5:a6:ef:d3:96:01:1e:5f:63:d6:de:
                    62:36:63:55:69:25:c8:dd:07:2c:c8:76:f2:f3:53:
                    cb:ff:69:70:97:9a:2b:15:54:e3:eb:0d:f0:c2:c5:
                    86:62:c2:c8:1a:79:38:d8:66:a6:76:fb:33:ee:77:
                    cf:d3:34:43:86:37:4e:7f:19:21:c3:5e:8f:b0:9b:
                    20:7f:ee:f2:0f:fd:fd:e0:c6:7c:10:93:25:2a:33:
                    ea:63:58:f8:cb:76:44:2d:d0:15:16:41:f8:3d:cd:
                    71:d3:6b:41:93:3b:c2:28:29:6b:d1:94:ad:5f:91:
                    3d:81:e9:1c:eb:ed:36:a8:1c:19:d0:71:7e:a0:6f:
                    08:17:d3:b9:52:f4:4e:01:9c:8b:a1:dc:82:08:72:
                    8c:63:e1:27:79:d0:d4:34:f7:51:3c:f8:15:c4:6b:
                    57:a0:0c:91:34:86:98:54:c7:c4:44:51:e9:28:63:
                    ad:84:53:91:40:eb:67:da:33:df:23:e8:fe:22:27:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4A:E2:FA:C7:1A:CF:8A:36:2C:28:DF:BA:AE:47:3E:4B:95:F3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/09f24c0a-499e-358e-8cd6-435cbaafac51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5f:bc:0d:2a:37:1d:e5:f0:cf:6b:b3:a8:d4:1f:9e:fb:ae:
         d7:20:a9:07:08:bd:2b:c7:06:7a:2a:d2:5d:7d:cf:02:e6:9f:
         86:49:8a:1f:77:78:e5:1f:98:d6:37:7b:7c:b3:04:34:fc:a0:
         15:87:d5:0e:c1:64:a2:97:57:ff:1f:b5:24:01:a9:bc:12:19:
         71:2a:bd:33:e6:9f:d0:69:ba:91:61:3f:50:b2:82:fd:4d:cc:
         02:26:fe:32:88:b9:30:5d:83:d3:1d:ab:1f:4c:52:a3:33:f5:
         07:48:0c:59:0d:ad:a6:3a:8e:49:33:f2:8e:3b:ba:45:e7:75:
         07:86:cf:c9:96:43:b2:85:c7:5b:21:ff:dd:99:92:a8:2a:94:
         0b:34:a2:2e:45:a6:30:79:fc:a9:78:87:0a:51:0a:02:74:ab:
         55:d6:cc:4c:08:6e:82:a5:2a:a6:f4:28:f9:d6:c6:78:5e:82:
         6c:db:b3:a9:63:f1:c2:f5:6c:78:a9:0f:b1:e1:56:f7:35:7f:
         9a:f0:59:d3:65:f7:87:66:92:f6:35:51:2f:9b:6b:ef:a8:4d:
         31:37:71:9e:31:e4:04:19:38:45:99:ea:e5:11:d2:04:d6:ac:
         b9:5c:73:f8:45:d5:11:de:d6:02:e4:87:49:4c:e7:e4:01:dd:
         74:6a:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org