Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa
File:                     16d526a6-8c61-3f11-a555-e4df6480ae14.roa (raw, json)
Hash identifier:          lzSGzHCVCjaPxqyRU09DQcC/4Pswed2j/hH9rnGN7t8=
Subject key identifier:   54:CB:01:44:0E:10:C2:EE:E1:6C:3D:09:1C:3C:1D:7A:D8:BE:7A:A3
Certificate issuer:       /CN=78108340-c24e-45fa-a787-5578ce17c653
Certificate serial:       010D0C9F43285847CA3F78A0E478607211BE6F80
Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     11796
IP address blocks:        208.74.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:78:a0:e4:78:60:72:11:be:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=67a435a0-46b2-4ab6-bbd4-c7b15995f0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:c9:77:46:0d:73:9c:4d:ab:f3:46:9b:64:
                    2a:ac:ca:08:36:7a:47:07:fa:19:60:51:db:ea:96:
                    4c:e4:92:69:62:9c:48:05:cc:b2:6c:dd:40:68:ad:
                    da:e4:a1:0d:2c:98:8b:50:01:d4:ba:f0:3a:04:0e:
                    be:04:c0:0a:67:5c:34:fc:7a:5d:a2:dd:d9:5d:37:
                    5b:ab:9a:b8:05:e6:3c:e2:ad:76:c5:7f:23:98:f2:
                    73:3f:21:8a:b0:3e:91:b1:44:64:f4:57:16:f5:5f:
                    20:2f:16:e9:cb:7c:8d:50:d6:6e:08:80:60:b8:74:
                    a0:d8:43:d7:a9:82:e4:2a:b4:b3:aa:3d:ad:66:6a:
                    9e:4e:f5:47:50:51:53:b1:d4:3f:58:b8:f0:c3:d9:
                    8a:fd:9d:8c:14:28:d2:94:8f:dc:0d:dd:03:f3:58:
                    eb:f7:bc:54:f9:e7:22:50:27:d1:43:4e:c3:a5:b7:
                    81:a4:8b:82:e9:28:7c:a6:60:19:0b:e3:d7:95:ff:
                    07:43:c6:04:b3:5c:ab:12:7d:a1:d0:57:89:62:de:
                    d0:bc:2f:96:4d:bd:b9:40:7e:49:7f:5e:10:db:14:
                    c5:b0:ac:92:68:25:5b:a9:f9:7b:28:69:74:1b:5f:
                    f1:2e:d0:f5:95:8f:7e:8f:ec:4a:e7:18:55:11:9c:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CB:01:44:0E:10:C2:EE:E1:6C:3D:09:1C:3C:1D:7A:D8:BE:7A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl

            X509v3 Authority Key Identifier:
                keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:9a:92:d5:62:8c:84:b8:f9:34:79:f1:02:19:f3:e8:26:
         08:87:3d:45:97:ae:a6:72:f1:28:a1:fc:b0:79:a4:7a:52:21:
         ef:d8:20:ba:8d:be:16:2d:60:b1:b5:33:21:ac:a9:7f:30:d4:
         d4:e1:6b:ce:fe:a5:6c:04:4a:27:4a:0d:88:06:5e:ec:6b:b2:
         2b:87:d0:ae:28:45:42:fb:10:9a:e4:96:07:0c:eb:7c:55:22:
         9c:dc:0c:1c:ef:e8:b1:77:72:60:69:3e:df:a0:57:08:13:45:
         4a:82:f8:ea:bf:92:eb:ef:df:1a:f1:7a:41:6f:e0:61:62:c2:
         29:77:95:07:a8:84:3a:b4:cd:32:95:0b:d5:54:88:0f:f8:27:
         a6:af:e9:e7:da:f0:5f:0d:38:2b:7d:71:d7:75:be:f8:27:7f:
         24:d0:a0:8d:c7:cd:ff:e1:eb:b8:51:7a:a2:86:cd:ac:e0:8e:
         9e:b9:20:fc:fa:39:38:d1:0c:fc:08:8a:5f:ee:e9:09:d0:ab:
         9b:55:ed:4e:56:9c:c7:d3:a8:96:22:9b:26:87:be:e0:50:54:
         4e:e0:6d:27:fb:98:20:fb:31:9e:86:5c:3d:00:5d:a5:d5:f3:
         92:34:f5:cc:22:6b:66:d0:8e:fc:4c:b8:97:28:10:a6:16:06:
         14:64:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org