Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa
File:                     14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa (raw, json)
Hash identifier:          8IYwVnyZtAq5+r1KBVpdlF6OR221KVy/66EGbDMZKiY=
Subject key identifier:   02:C5:76:D5:E7:AE:7A:37:3C:D8:B6:BC:BF:63:DD:DE:1C:43:BC:A3
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F43285847872134611B1C8F9FC5770180
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     6142
IP address blocks:        74.85.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:34:61:1b:1c:8f:9f:c5:77:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=f4164740-85ab-4368-aade-8283874b633b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:0f:9b:7e:75:a2:dc:9e:a9:d4:ed:c8:46:
                    64:13:78:d0:51:e4:41:79:57:d3:f7:6c:fd:78:75:
                    1a:12:ca:41:14:4a:9d:a1:ac:69:53:76:b3:62:09:
                    f4:51:15:75:fd:7d:f2:eb:f5:b7:86:9b:5e:44:62:
                    ef:99:da:a0:5c:32:cb:f6:ac:99:32:97:f3:e8:5d:
                    5b:57:8b:82:58:68:e7:47:93:80:74:cd:e6:04:ac:
                    4f:e5:a5:28:dc:df:bb:56:f7:23:43:39:e8:d8:79:
                    27:f1:2d:e7:2d:4b:fa:c6:b3:cc:fe:cf:38:56:5a:
                    53:88:1b:3f:bd:da:0b:ae:bc:b2:0a:de:ae:30:c1:
                    0b:fb:19:e7:57:bd:b3:73:4e:f8:a4:4b:a9:bb:2f:
                    43:49:84:8b:f8:a5:b3:c3:46:03:d4:f5:8e:0e:b2:
                    21:5c:29:0c:07:de:75:bf:0c:0e:ce:35:60:03:fd:
                    68:61:6f:e1:4b:0b:af:59:c9:0f:f3:ea:37:41:65:
                    53:4e:23:88:a5:cc:00:51:26:f7:df:e1:7f:02:18:
                    8e:db:0e:3b:b0:35:3c:14:e6:4f:dc:33:25:ae:c7:
                    0b:76:fd:81:70:e7:c4:df:46:72:81:e5:03:f9:fe:
                    91:6c:05:29:0f:ae:54:96:5a:95:a1:1e:5c:07:e1:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C5:76:D5:E7:AE:7A:37:3C:D8:B6:BC:BF:63:DD:DE:1C:43:BC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:86:15:ef:f1:37:30:26:a1:56:e1:ec:d7:a5:78:28:31:
         39:03:e2:64:e3:4b:29:29:df:06:7c:2a:17:ab:ec:3f:2a:59:
         36:e8:15:06:1a:eb:c0:b7:ec:c6:0b:61:04:11:05:de:1f:93:
         5a:c1:5d:a6:8e:66:b2:35:21:35:ff:e6:41:f7:d1:5a:b5:90:
         37:31:3f:47:8f:57:17:b3:74:2e:9d:b5:4b:92:61:3a:2e:57:
         5a:13:81:7b:9b:82:9c:ec:b4:9e:44:b6:8f:88:03:65:3d:9c:
         51:22:21:ea:a8:48:0f:67:e7:51:2e:75:d0:18:fe:cf:10:a4:
         61:4e:52:56:e2:77:a0:62:e1:d7:43:23:ad:4e:3f:57:36:79:
         28:22:f8:8f:56:04:89:91:cd:88:f3:bb:a6:d1:2d:66:d1:3e:
         7a:94:83:dc:d1:8b:5f:3f:8f:89:2d:2c:16:52:b9:d5:cd:fd:
         44:cc:f7:3e:0d:6e:5b:6b:a4:f6:39:7a:62:68:0f:32:54:22:
         91:f9:0c:97:38:7a:a7:13:b1:35:7b:5a:74:9b:25:77:bb:8d:
         d1:19:42:97:c4:7a:50:49:b8:3b:29:7d:92:a1:38:0d:94:c7:
         4d:a1:a8:8e:fb:bb:4c:f0:e2:d2:ef:9e:fc:5b:ca:97:2d:4c:
         c2:d1:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org