Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
File:                     c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa (raw, json)
Hash identifier:          XAqj/Q3zjgm7y09UiFgj8ymRNz5qQwK/eNW7H3m2+6o=
Subject key identifier:   00:73:B3:63:25:9D:75:02:49:59:7E:71:B2:7B:9F:4E:20:07:01:56
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A428AB716E6C217D79483F80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     17278
IP address blocks:        69.74.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:ab:71:6e:6c:21:7d:79:48:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=d8e52a8f-f579-44c9-8c72-ad695d882acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:23:ad:5a:5c:f5:0d:a2:ba:6f:86:e9:62:
                    3c:ff:8a:70:ed:40:4b:40:42:44:fb:01:9f:ad:41:
                    1a:8d:4c:16:ac:31:3c:84:80:6e:b2:9f:78:c3:9a:
                    f0:ce:5b:3d:d8:75:30:e4:03:39:31:d0:29:80:3d:
                    0e:49:3e:aa:cb:c7:d1:b4:d1:78:4c:b5:27:6c:02:
                    52:d3:1e:f0:f4:d9:4c:5d:59:af:d5:78:bd:c2:35:
                    c5:3b:6b:fa:b8:9c:ee:aa:70:19:8b:fa:f8:26:d5:
                    c8:a1:7f:56:bd:94:f4:16:12:a8:80:a3:a0:71:69:
                    70:5f:94:77:64:91:d9:f4:4c:83:14:73:e7:5b:6e:
                    76:56:f2:a2:de:af:b2:19:8d:ef:62:a1:60:e9:89:
                    45:16:22:8c:60:3e:2c:43:5b:6a:6d:c8:32:2b:ca:
                    c2:b0:ce:7d:67:88:e4:35:e3:b9:e7:33:90:2a:7f:
                    a2:2d:8c:6a:79:b5:d4:a2:70:ae:95:58:83:fd:10:
                    da:13:a4:9d:b9:00:58:6f:48:34:b0:10:fa:a7:b3:
                    59:ff:53:c8:07:7b:7a:f0:0e:da:6d:f0:bb:e3:9e:
                    6a:06:51:ae:9a:b8:06:f1:f9:14:ab:2e:86:b3:ad:
                    aa:cc:0e:ae:5c:13:19:a0:cd:1a:90:8e:06:f7:e0:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:73:B3:63:25:9D:75:02:49:59:7E:71:B2:7B:9F:4E:20:07:01:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:8c:b4:1c:63:8f:9c:d2:a7:87:0b:b0:3d:fd:19:7c:5b:
         92:3d:cd:d1:fd:25:11:45:00:c6:db:eb:da:ce:62:dd:b7:9b:
         ff:a0:35:fb:42:f3:5b:74:5e:63:30:72:85:59:3f:3f:01:96:
         43:ee:24:0a:74:2e:88:a1:ce:21:a0:cb:c0:15:6d:00:bd:f4:
         d6:35:5a:dc:cf:43:57:f4:89:31:4b:2a:77:3b:9b:fb:be:00:
         51:c1:3b:7c:18:a7:ba:0c:46:e4:d5:9c:55:72:ba:d4:76:d9:
         bf:7f:0a:b4:92:68:b4:1a:99:13:f8:ed:99:d0:d1:3d:4f:39:
         2c:ab:eb:dd:11:f0:35:74:1e:11:60:ad:30:f2:bb:96:74:d3:
         b4:bd:07:81:48:ba:af:f5:bb:74:0c:8e:2a:a7:9d:cb:fd:c5:
         2b:54:c3:96:b8:bf:c6:5c:bf:37:a4:a4:b3:f3:ea:7f:a5:f6:
         9b:5f:53:46:19:57:b3:4b:61:27:fb:b9:3d:b2:ea:dc:b0:05:
         ea:18:51:a9:40:17:67:29:42:96:eb:f3:81:8a:bd:fe:cf:07:
         57:a1:dc:b4:3e:ba:19:41:21:81:b6:72:16:d4:51:63:1a:2e:
         98:0e:26:bf:4c:21:b5:ab:8a:72:71:29:aa:31:9f:9f:90:d6:
         d1:79:d4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:11:36 2024 by rpki-client on console-fra.rpki-client.org