Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/903ce770-fb52-37ef-9d65-17b0d21bfe00.roa
File:                     903ce770-fb52-37ef-9d65-17b0d21bfe00.roa (raw, json)
Hash identifier:          bOOcmAEFJ9j3/JSwXVQCtHCX13wGg8qJ5mfj57loLV0=
Subject key identifier:   5A:B2:38:87:06:62:1A:78:0A:94:F5:7C:91:C3:D4:24:70:75:E3:5F
Certificate issuer:       /CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
Certificate serial:       010D0C9F4328584546A2B82C3223684E15C60C80
Authority key identifier: D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/903ce770-fb52-37ef-9d65-17b0d21bfe00.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     19189
IP address blocks:        74.214.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b8:2c:32:23:68:4e:15:c6:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=d458a89b-dd9e-4710-ad67-422809649215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:ca:fd:09:7e:4e:6d:13:74:f9:70:e9:93:
                    f0:9f:97:a6:41:21:15:ed:20:54:ca:e3:64:70:0a:
                    ab:57:21:45:82:17:ad:eb:7e:53:31:e7:e1:e5:8a:
                    5c:cd:c8:a7:9c:39:7d:04:4e:cc:af:9d:21:42:4a:
                    9f:80:30:e6:5b:4f:73:69:fe:56:13:86:ac:dc:ee:
                    4b:09:36:31:f2:3c:00:d4:cf:fa:bf:58:7b:6c:f5:
                    f4:d4:e9:90:c5:45:12:69:04:be:00:57:92:05:80:
                    31:ad:4f:f1:ff:ea:05:8e:08:fb:98:61:ac:ab:c9:
                    49:22:57:42:c5:60:29:b6:f7:1c:04:0b:e5:f3:53:
                    7e:0e:b9:87:6b:b2:fe:c2:29:0d:e8:e7:5a:c9:2a:
                    53:41:1d:48:72:c6:51:f6:e7:62:d3:4c:92:f0:17:
                    df:6d:ae:93:e7:d9:08:be:1d:03:67:f1:2d:bc:8c:
                    70:15:e2:78:99:70:2f:69:de:a1:93:23:04:52:af:
                    85:14:64:27:76:24:ea:8c:5a:72:7f:50:b9:15:a3:
                    d9:75:25:f7:63:5c:5d:10:02:e3:fc:5a:54:74:9e:
                    8b:6d:cf:a8:64:6f:11:66:5b:7b:41:46:4b:97:61:
                    3f:a5:93:3e:3d:9f:b9:25:71:35:37:7e:2a:8b:51:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B2:38:87:06:62:1A:78:0A:94:F5:7C:91:C3:D4:24:70:75:E3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/903ce770-fb52-37ef-9d65-17b0d21bfe00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:5c:fd:e2:4d:44:7d:f6:c2:8e:a1:d0:87:cf:a2:29:d8:
         a6:6d:7c:8a:28:24:f5:e3:9f:33:20:bd:46:36:f5:f4:71:ee:
         52:5d:04:33:9c:25:2b:b0:03:06:78:af:15:bc:5d:1e:a7:17:
         e3:ca:85:87:f7:c6:31:b6:f9:ee:a3:d4:57:a8:ab:21:d1:62:
         9d:f7:77:3a:e6:f5:5e:d6:6c:b0:3b:be:13:12:b8:8b:84:42:
         c1:dc:d6:a7:b7:3d:ca:92:9b:68:1d:dc:3c:ec:a8:2c:ae:0e:
         3c:73:d6:95:8f:37:89:1b:ac:fe:ab:93:42:83:2b:51:7e:0e:
         b1:0f:f1:1a:0b:8d:66:d4:09:63:d0:59:c8:55:29:51:0e:83:
         45:67:ed:1b:65:62:80:5f:88:aa:8b:75:6f:6f:86:23:67:f7:
         86:e5:b7:6a:0e:d9:a1:d5:3a:da:e6:de:a7:61:28:57:84:6f:
         ce:45:5b:5d:92:44:3d:ea:37:1d:0f:ff:84:01:1a:06:71:8d:
         d1:29:22:15:9b:00:a9:90:c2:a2:b9:e2:df:d5:92:6f:65:ef:
         ff:2f:d5:05:21:94:db:a7:d9:d3:19:66:7a:fe:1d:3e:ec:1e:
         76:0d:29:72:d9:e0:6c:00:92:9f:8f:3c:db:80:70:a4:a8:43:
         5e:1f:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 22:48:30 2024 by rpki-client on console-fra.rpki-client.org