Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/b10901b8-dacc-34c3-ab94-b81969ccd595.roa
File:                     b10901b8-dacc-34c3-ab94-b81969ccd595.roa (raw, json)
Hash identifier:          T1DZkV7FxmvXTp0AieQfJ67UpiaBIRkJbWVespFqCc0=
Subject key identifier:   85:76:4E:CC:2B:0E:50:6F:9F:80:91:8E:D7:05:26:C3:87:63:74:FA
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F432858457D133686B6497CC689136600
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/b10901b8-dacc-34c3-ab94-b81969ccd595.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     19905
IP address blocks:        64.74.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:36:86:b6:49:7c:c6:89:13:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=633d19ea-8125-464e-9a6c-590e368050d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:5c:76:36:99:d9:55:60:f3:8d:48:47:1b:
                    d5:d4:ea:0d:65:12:b8:a3:4a:08:71:c2:b2:32:c5:
                    33:45:9f:75:ad:e9:00:d9:84:b5:e6:ce:af:84:9d:
                    bb:c6:f4:5a:0e:e0:26:70:bd:ad:00:d5:40:c4:9f:
                    cb:ea:5e:bc:42:ab:19:a5:d5:6a:58:ba:1c:0f:e5:
                    c5:00:d2:2d:7d:6f:44:57:89:99:e2:15:92:b0:25:
                    7a:46:84:c9:e1:ee:c1:f5:e3:0d:91:f7:62:f5:b3:
                    e2:f0:e3:41:0e:5e:50:a5:91:d7:d1:be:82:2b:73:
                    70:70:83:bb:98:19:ca:69:7c:7b:eb:33:dd:a8:10:
                    03:89:29:db:00:44:04:b3:56:a0:6c:84:21:25:39:
                    ac:f0:b5:67:3b:69:1f:33:3a:cb:da:18:fb:8a:84:
                    04:ae:cf:77:6b:8c:32:31:ef:24:bf:58:9b:55:52:
                    44:b8:91:7f:b4:c3:e6:62:ea:2c:b6:3f:30:c0:37:
                    3f:be:c1:66:72:f5:c1:7b:0f:1a:bc:c2:e2:ec:38:
                    5e:48:bf:c9:a7:b3:52:3b:b7:a9:b4:3d:82:e1:37:
                    36:9b:12:92:02:40:ff:6e:8b:ba:ed:a1:c8:f3:54:
                    2c:bc:e2:93:99:8d:74:4d:11:88:b2:bb:a2:16:e8:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:76:4E:CC:2B:0E:50:6F:9F:80:91:8E:D7:05:26:C3:87:63:74:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/b10901b8-dacc-34c3-ab94-b81969ccd595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:ab:14:cd:9a:4e:9e:89:ad:8b:0c:41:39:72:49:d6:7d:
         d0:90:95:01:6b:4a:cb:b6:27:c0:0c:6e:49:22:03:8f:a1:85:
         80:73:00:fe:2c:85:f9:2f:ef:5b:4d:c6:2d:a9:cf:ba:84:54:
         7b:f5:c3:a9:3a:60:4c:c2:85:7e:10:56:ad:10:ff:66:70:b4:
         8a:b5:20:60:ed:ba:2b:66:0f:f8:ca:fe:d3:f4:0a:84:8f:12:
         70:bb:55:7b:22:80:6d:44:fb:31:36:e9:b0:98:ab:ff:fe:88:
         1f:ca:f3:19:c9:a8:d9:0f:bb:cd:25:75:b9:0b:9a:32:1c:70:
         27:d8:cd:15:5f:74:f5:f0:69:a9:cb:85:2e:17:c9:20:99:61:
         a3:c9:14:e8:8c:72:13:d6:dd:b8:0f:c8:8e:9e:b7:50:3c:92:
         c6:d0:f0:63:c5:60:a4:b5:e9:a1:74:0e:d5:2a:cc:1a:b0:98:
         4a:2b:d2:98:1f:ce:91:40:e8:bd:c0:86:03:b7:d0:0d:f7:ec:
         48:d4:3a:bc:33:b0:19:5e:c1:5b:d7:03:aa:57:82:ab:96:f7:
         f5:fc:27:57:0d:22:5e:ff:22:a1:bd:7b:42:3f:91:37:7d:be:
         24:ce:40:52:4c:ca:63:3d:3b:9d:97:49:01:a4:17:bc:1a:d6:
         76:21:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:58:17 2024 by rpki-client on console-fra.rpki-client.org