Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
File:                     74d043bc-e479-3a7a-9a76-aacaabb89db4.roa (raw, json)
Hash identifier:          TKrxFs5DYHIBqjJlcv7UiLbb2NksCexo4J7Qc+Goq6U=
Subject key identifier:   ED:80:A0:07:8F:17:53:63:E1:63:B2:70:54:4E:EC:64:06:05:00:FB
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F43285846A0CF8AFAAE495219DCC2B780
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
Signing time:             Tue 23 Jul 2024 01:00:26 +0000
ROA not before:           Tue 23 Jul 2024 01:00:26 +0000
ROA not after:            Mon 21 Oct 2024 01:00:26 +0000
asID:                     14445
IP address blocks:        23.136.184.0/24 maxlen: 24
                          23.170.241.0/24 maxlen: 24
                          23.170.242.0/24 maxlen: 24
                          23.170.244.0/24 maxlen: 24
                          23.170.248.0/24 maxlen: 24
                          23.170.250.0/24 maxlen: 24
                          23.170.251.0/24 maxlen: 24
                          23.170.252.0/24 maxlen: 24
                          23.170.253.0/24 maxlen: 24
                          23.170.255.0/24 maxlen: 24
                          45.42.178.0/24 maxlen: 24
                          45.42.179.0/24 maxlen: 24
                          216.73.148.0/24 maxlen: 24
                          216.73.151.0/24 maxlen: 24
                          2606:18c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a0:cf:8a:fa:ae:49:52:19:dc:c2:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jul 23 01:00:26 2024 GMT
            Not After : Oct 21 01:00:26 2024 GMT
        Subject: CN=7e1811c6-1e77-447e-bd57-23dcfe5d4dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:41:c8:81:9a:12:be:e4:ed:ad:06:d4:71:
                    98:85:08:86:f0:94:68:33:06:fb:fe:2f:2c:7e:27:
                    9c:6c:ff:d9:5b:3c:7e:49:f6:7a:c6:dd:25:10:70:
                    a3:ba:e3:d9:ef:32:99:ee:a9:dc:4c:1a:cc:76:cc:
                    c8:80:71:b8:cd:7a:86:63:8f:2f:13:04:b1:cf:e6:
                    6e:0d:6e:f8:85:57:5b:7e:7f:42:0e:f3:a4:99:27:
                    69:8d:19:4b:fc:7e:48:41:cc:d5:7e:43:4b:ca:47:
                    36:82:13:73:a8:f3:95:56:99:f8:bc:04:43:a5:bb:
                    48:b9:32:6c:af:e7:1a:ab:f7:f8:1f:19:40:58:04:
                    5b:73:2f:6a:ac:33:0f:44:21:03:c5:8b:55:9b:db:
                    b4:49:ba:21:98:af:e8:2e:0e:ea:92:e9:10:bb:84:
                    15:08:17:02:c0:a2:3d:e9:d5:02:17:74:5b:e7:4b:
                    cc:b2:f0:1b:fb:16:9c:c7:11:6b:f3:50:95:a6:b0:
                    70:90:d7:d4:87:77:ec:ee:68:50:4d:2a:d8:8d:90:
                    a8:b4:b9:65:86:5b:58:8b:7d:04:c6:4f:fc:72:e8:
                    32:e3:a7:9d:eb:cf:34:f0:02:de:a3:b5:0b:eb:47:
                    e3:80:e2:8d:8d:c7:f1:21:9b:45:d3:64:7e:ef:d1:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:A0:07:8F:17:53:63:E1:63:B2:70:54:4E:EC:64:06:05:00:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.184.0/24
                  23.170.241.0-23.170.242.255
                  23.170.244.0/24
                  23.170.248.0/24
                  23.170.250.0-23.170.253.255
                  23.170.255.0/24
                  45.42.178.0/23
                  216.73.148.0/24
                  216.73.151.0/24
                IPv6:
                  2606:18c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:7c:88:82:d1:e5:15:26:57:10:c9:dc:37:c5:1a:c2:80:
         48:d2:61:4d:70:9d:4c:d9:13:ce:17:40:99:c5:ed:70:bd:3b:
         da:77:d2:40:60:24:ce:23:df:37:29:22:16:30:ea:32:5e:f4:
         44:8d:c2:a9:f7:b1:72:80:a9:7b:d1:0f:77:4f:89:d9:2c:bc:
         ac:6d:ea:26:eb:23:88:df:9e:34:3d:3c:1c:06:fc:23:c3:c8:
         6a:27:81:c4:20:b4:31:31:a4:78:ae:77:0b:4c:24:c0:8e:18:
         bd:4b:bd:1c:e0:c1:da:a0:e2:a3:aa:50:ce:8e:bd:40:47:78:
         33:0e:32:13:7e:12:e9:70:db:5c:70:59:da:80:53:8c:a5:ff:
         0e:e0:c4:20:68:b6:c3:70:44:0c:2f:28:bb:a3:c8:e5:07:62:
         d4:d8:ef:1e:ee:88:80:8d:fa:b5:b4:c2:20:3e:69:ec:c6:a0:
         b7:d2:f3:b0:a9:79:4f:c5:3e:eb:ba:44:06:7a:17:ed:2c:98:
         f4:84:c8:85:3e:e8:de:8c:8f:d0:39:ab:c0:21:e3:f7:d1:13:
         45:fa:9e:ca:da:2c:f1:d9:fd:ce:73:b5:31:23:15:ee:7d:49:
         e5:67:bc:35:eb:ab:74:44:01:6b:80:7e:7e:31:b0:e0:9c:06:
         b3:e5:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 21:13:58 2024 by rpki-client on console-fra.rpki-client.org