Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
File:                     2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa (raw, json)
Hash identifier:          2oP1wU+xZY+UTtUhMYk4jei6B/qOcUA7Ltn1ERZAVV8=
Subject key identifier:   C3:C9:FB:56:81:6C:99:AF:F0:79:31:70:DB:29:9B:B7:1E:DA:30:AB
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F43285845C8739AC46A0A711C7420EC80
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     6142
IP address blocks:        74.85.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:9a:c4:6a:0a:71:1c:74:20:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=3430341a-d79b-47cf-b5ff-fedae4a6b8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:28:e7:d2:d6:90:8d:52:fb:89:a4:ed:89:
                    f0:65:ae:8d:07:59:18:b0:c5:96:cb:59:4f:ed:d4:
                    f3:83:e3:67:05:ba:61:b9:57:9e:9e:94:f0:c7:70:
                    c4:9f:5e:b7:f2:f2:e1:e1:1f:fb:49:d8:11:a5:d5:
                    01:59:d1:20:71:01:b1:4c:42:93:d6:72:94:e7:37:
                    6b:20:17:c4:74:dc:87:6f:39:bb:1b:a0:ca:70:aa:
                    dd:d5:b9:8d:4c:e2:ff:88:bc:50:cc:f4:49:71:ce:
                    0c:66:b0:e7:d1:b1:68:07:94:8f:75:b8:7c:f0:9a:
                    1a:d7:30:08:c5:6c:45:a9:68:5f:34:2b:dc:f0:2e:
                    dd:1e:35:c5:bc:a3:9b:11:be:3b:a1:1d:79:bc:73:
                    ef:56:b3:22:1d:f2:24:88:22:26:77:e5:36:86:f6:
                    86:fe:bc:e3:87:c7:2b:36:23:9a:f3:d9:f0:c9:c9:
                    32:67:9a:e1:23:46:df:e8:aa:d5:fc:62:b9:35:99:
                    9d:d4:c2:6b:6d:26:9f:12:a2:47:bf:2d:59:90:4f:
                    89:d0:f4:a7:e0:20:6a:5e:7b:75:25:0c:10:16:86:
                    0d:fe:82:7d:10:f5:47:aa:b4:69:35:61:17:d4:ea:
                    f8:4e:31:b0:30:41:42:83:7e:43:56:4a:0a:ac:bc:
                    d2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:FB:56:81:6C:99:AF:F0:79:31:70:DB:29:9B:B7:1E:DA:30:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:10:b5:ac:79:61:b5:c2:fb:ff:cc:70:51:bd:05:66:70:
         12:0f:42:de:e2:a4:a8:b4:4c:e2:21:df:a7:ea:8f:6c:0f:97:
         4c:37:07:9e:99:2f:f5:96:1a:02:8d:89:de:1e:c3:de:f8:f2:
         e0:f0:f9:3e:1e:05:2b:70:94:f8:93:6f:66:60:58:f4:8e:48:
         8d:a6:a6:07:62:99:52:09:4f:53:3f:6b:65:88:32:7a:59:71:
         fe:a8:bc:47:b0:a9:a7:44:90:2c:90:4a:b6:b2:ad:03:c7:bc:
         ed:89:07:b0:12:0a:ed:ab:63:b3:2f:02:bd:98:01:5a:13:f0:
         25:cd:7f:b9:bb:8c:92:7c:7c:d9:60:93:39:6f:98:2d:25:53:
         fb:f4:b1:a2:36:e5:22:22:89:e4:ad:3c:80:9e:0d:8b:93:0b:
         fd:14:7a:e4:6a:a9:c7:4a:33:36:8c:ec:eb:79:e8:bc:3d:8b:
         dd:f4:1c:12:d7:e0:bb:c6:c3:27:e2:6a:2f:21:4e:9b:5c:92:
         27:0f:a6:b2:b7:72:6b:2a:c3:81:59:d6:62:7a:23:cf:ec:f1:
         89:1a:41:bb:9c:0f:dd:5c:df:0e:11:86:02:fb:cb:d2:e9:10:
         7f:fd:68:8b:28:96:b0:e1:cc:4e:4f:14:d4:bc:57:dd:4c:db:
         60:3c:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:38 2024 by rpki-client on console-ams.rpki-client.org