Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa
File:                     3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa (raw, json)
Hash identifier:          0Dq9ZpkIDO69sriX/khQkztNdxTjkEG0QFxhG50q3DQ=
Subject key identifier:   83:CB:28:81:6A:CE:69:4A:79:38:78:5C:F9:D1:32:AC:43:0C:98:EE
Certificate issuer:       /CN=8adbc307-9e15-47ff-abb8-570dd88539f4
Certificate serial:       010D0C9F432858473D2600FEE4007072568907C0
Authority key identifier: 54:CC:85:65:6D:D8:16:EF:C0:01:CC:85:73:03:3D:60:B6:90:FD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     397294
IP address blocks:        74.80.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/8adbc307-9e15-47ff-abb8-570dd88539f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/8adbc307-9e15-47ff-abb8-570dd88539f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:00:fe:e4:00:70:72:56:89:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8adbc307-9e15-47ff-abb8-570dd88539f4
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=ac590f93-3ad0-4f21-9bef-acbcdad2d970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:19:c2:5c:cc:30:88:10:be:38:17:7c:4a:
                    a0:5e:64:92:64:c9:66:24:fb:51:30:c6:7a:bc:8a:
                    96:02:06:e2:45:42:13:a0:55:0b:1e:c7:4a:ed:61:
                    b9:40:d3:2e:d1:17:66:8c:a1:7f:57:af:d6:c1:32:
                    96:e7:fc:86:fe:06:65:f3:12:b6:04:67:8c:f6:a8:
                    36:39:38:89:47:0f:de:b1:fd:3e:65:7d:cb:69:c2:
                    99:13:64:eb:16:54:2c:41:df:d6:5c:3a:57:89:cd:
                    a7:57:4a:c1:19:bb:56:da:49:af:c2:bf:65:e8:a5:
                    85:a0:b2:9a:29:27:8c:85:ca:ec:b1:17:7f:9b:12:
                    eb:83:ad:90:98:1c:00:ce:6d:c7:0e:52:d4:ba:b9:
                    90:b8:a4:df:f7:66:10:fa:2d:a5:45:c9:6b:13:5f:
                    d5:91:d7:ff:a4:9d:e8:fa:a7:b5:cb:c7:39:a4:32:
                    d2:f4:61:09:9a:63:45:c3:6f:50:11:cc:b2:0b:1d:
                    e3:20:05:63:55:a5:53:09:f8:fe:fe:34:48:dd:50:
                    0b:50:7f:98:79:06:96:7e:34:bb:70:c4:b9:69:f5:
                    25:32:93:f1:2b:16:9e:69:61:0d:30:91:c9:7c:39:
                    d6:ee:76:bb:f9:90:2c:b3:23:a4:e4:4e:52:f6:fc:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CB:28:81:6A:CE:69:4A:79:38:78:5C:F9:D1:32:AC:43:0C:98:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/8adbc307-9e15-47ff-abb8-570dd88539f4.crl

            X509v3 Authority Key Identifier:
                keyid:54:CC:85:65:6D:D8:16:EF:C0:01:CC:85:73:03:3D:60:B6:90:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:cc:3a:f0:74:74:82:50:2b:4b:ae:1d:3f:8c:3a:ee:75:7d:
         eb:f1:fe:fc:66:87:de:fe:57:c0:db:1e:0d:7a:e7:c9:5a:ab:
         29:05:58:91:3f:fd:46:0a:c4:d8:fc:95:5f:5f:ce:ea:b8:e1:
         1f:d1:68:ab:dd:00:ba:42:75:fe:db:d1:56:4c:4e:14:28:cf:
         62:50:14:b4:d1:85:ea:1e:fe:66:47:51:78:be:37:04:b7:b4:
         03:e1:60:b9:ba:0b:9f:1d:d2:26:7a:ef:34:aa:c2:07:26:a7:
         32:ad:0d:5b:34:3f:53:40:49:29:fc:71:ef:09:b9:f3:5c:63:
         8b:7f:47:11:59:0c:de:06:01:ed:5e:81:d7:29:3d:31:8e:74:
         96:3c:c7:9b:8f:dd:c4:5f:9c:a2:16:16:91:dd:ba:04:4c:30:
         5d:6e:af:0e:4f:9a:8e:f8:0e:dc:43:81:ff:c7:dd:a1:a2:b9:
         68:37:94:f3:f8:e3:33:33:2a:67:9e:53:da:09:21:66:72:14:
         f6:16:b6:a3:e3:a0:c2:05:04:10:75:cf:e5:3e:3e:ac:d0:89:
         53:4f:0d:5d:be:15:9f:ab:70:4d:3a:be:db:80:02:41:65:13:
         c9:8c:21:76:76:2a:7e:d5:f8:43:4c:e9:7f:3c:fb:1c:53:61:
         e9:fd:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org