Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad237144-b5c7-37a8-acda-98562917ad9b.roa
File:                     ad237144-b5c7-37a8-acda-98562917ad9b.roa (raw, json)
Hash identifier:          SxDGE8qPzIz17vBC22F4nYhwG9kGwYRi7rJcJ0c18YA=
Subject key identifier:   37:D5:85:88:C3:80:9D:CB:6A:B3:5B:94:C5:0B:F3:2E:DD:B3:16:99
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285847600B87F92CB318D10AA2A780
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad237144-b5c7-37a8-acda-98562917ad9b.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     40002
IP address blocks:        69.74.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:87:f9:2c:b3:18:d1:0a:a2:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=4baae977-76ca-4b4a-929f-ccd61831e477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:e9:06:b1:88:55:8b:c4:82:d3:92:6f:69:
                    a5:2d:60:bf:94:be:57:db:b7:1c:af:16:e5:a6:e5:
                    a4:df:49:0e:4d:f1:01:54:f4:1a:84:c8:85:ce:d1:
                    cc:4e:43:ca:76:dc:3c:71:49:c9:f0:c9:49:dd:fa:
                    58:45:ad:fb:44:21:4e:1a:e0:5b:84:d1:48:29:1a:
                    30:9b:11:64:9a:49:14:41:ee:9d:69:80:2f:4d:39:
                    b4:64:b6:86:71:60:91:29:05:71:98:b9:e3:17:3f:
                    81:bf:9e:f1:58:4c:b6:83:62:2e:0f:8f:be:62:ed:
                    34:11:47:3a:1f:62:a2:53:3c:7f:c9:25:a3:4c:3a:
                    81:1f:ae:2d:1d:3d:8e:1d:5a:65:a1:a5:b0:e7:e2:
                    60:30:9e:61:2f:e9:d3:34:d2:f6:d8:04:e2:5c:1c:
                    d3:e7:e6:d1:a9:ba:5d:aa:9c:04:bd:cd:f1:02:e7:
                    e5:a5:e0:71:2b:1f:66:b4:8f:e0:c0:9a:4b:cd:7b:
                    05:56:51:25:60:45:1b:48:8d:65:80:cd:20:ce:14:
                    05:d4:1c:50:36:8f:a1:50:3d:59:cd:e5:af:d9:32:
                    aa:3c:b2:fd:12:ff:fc:5a:a7:f7:6d:84:58:94:c0:
                    e1:c3:bd:01:19:b7:5e:4f:e8:e9:bc:78:c6:3a:82:
                    5d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D5:85:88:C3:80:9D:CB:6A:B3:5B:94:C5:0B:F3:2E:DD:B3:16:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad237144-b5c7-37a8-acda-98562917ad9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:6d:dc:f4:c5:67:36:fc:a2:6a:35:35:2c:94:41:47:e1:
         08:f8:c0:9a:45:87:40:aa:d7:c0:78:56:20:a1:bc:a3:a9:2e:
         e5:e6:be:5a:fa:9f:65:50:ba:fb:ec:ef:f0:d1:28:7b:3a:6b:
         e2:37:1f:cc:bf:34:dd:0e:cd:6e:cb:ba:4d:ca:e3:94:46:07:
         59:5a:08:92:ea:2c:37:a8:1b:7e:91:a3:28:fc:5d:33:a3:1c:
         5b:55:bf:58:2d:9c:93:da:fa:94:4e:4f:67:b7:f8:7d:da:12:
         dd:07:8e:4e:74:2d:f0:c4:9b:13:74:5e:33:f4:0f:92:0e:a3:
         ec:88:b8:89:30:96:41:6e:64:42:78:67:4d:12:cc:19:22:a7:
         78:64:81:b8:1d:3b:e7:72:74:58:ba:11:db:c5:50:5d:06:2b:
         a8:b6:0f:43:c1:e3:ce:f9:0c:7e:cb:45:f1:3f:f1:6e:5c:6f:
         1c:d4:d1:77:5c:79:8f:b6:8b:ba:65:d5:36:49:46:c0:e8:ea:
         99:af:56:e5:e0:bb:fa:5e:d3:41:5c:5d:f6:93:b9:a3:13:24:
         ea:b8:64:9a:c1:d9:55:8d:d8:ae:28:87:87:83:28:36:b0:bc:
         f9:6e:d7:a2:02:0e:d1:97:60:36:90:82:1a:3c:fe:03:8f:f6:
         34:eb:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org