Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/011fcd57-9d3e-3017-94cc-ffa6371b7472.roa
File:                     011fcd57-9d3e-3017-94cc-ffa6371b7472.roa (raw, json)
Hash identifier:          2slJoIW5wPoiWiAwGMFxZyGTFGxsg37yUGcmV/0J/2U=
Subject key identifier:   B6:7B:E1:8C:D1:D0:1C:66:5D:C3:0F:40:CD:80:4F:7E:0F:79:62:21
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F50F048B001691E751640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/011fcd57-9d3e-3017-94cc-ffa6371b7472.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397213
IP address blocks:        204.74.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:50:f0:48:b0:01:69:1e:75:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=00dc6b03-5de3-46e0-b4dd-c3ea9fd0d798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:15:28:d8:b5:a0:04:06:98:04:1e:0f:57:
                    9a:cd:0f:f2:a7:e2:ac:e3:ee:68:ee:f3:34:74:4c:
                    0d:cf:e8:ac:f2:e8:6b:f2:7d:1f:7a:11:1d:f2:51:
                    4c:81:f3:b5:1c:5a:97:d2:ed:29:61:b8:91:38:80:
                    97:0c:3a:d8:ac:17:fe:e7:e7:d9:07:1a:cd:c5:9c:
                    e5:a2:29:43:5d:fd:98:e6:38:e9:73:81:5c:17:12:
                    85:05:ae:63:23:f1:4b:13:53:d7:c2:4d:34:5b:84:
                    32:e1:33:ef:14:77:40:d4:8b:1d:ce:3b:f8:0e:58:
                    14:78:33:a2:1d:2c:f5:dd:65:69:5a:aa:30:d3:a8:
                    e5:b2:e7:e6:43:31:ba:78:6f:7e:a9:e3:bf:44:e7:
                    43:47:b3:47:5f:93:1e:41:7a:2d:6c:38:64:4b:c3:
                    39:8d:cb:94:6b:52:a3:20:b0:8d:0b:4f:b5:1c:50:
                    c5:db:5a:4c:d2:e2:14:c5:dc:c1:0a:a0:a8:fc:37:
                    db:19:f1:35:2c:f6:4b:34:ba:68:05:41:42:9a:8b:
                    50:4c:1f:8c:d9:26:1e:28:ad:42:b2:e0:d8:85:c4:
                    23:b0:d6:a5:01:05:4a:7d:42:3e:6f:0b:98:96:7d:
                    7d:df:ec:5d:05:09:40:28:51:77:f5:66:4c:74:d8:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7B:E1:8C:D1:D0:1C:66:5D:C3:0F:40:CD:80:4F:7E:0F:79:62:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/011fcd57-9d3e-3017-94cc-ffa6371b7472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:53:d8:9b:9e:92:00:5f:82:78:83:72:48:58:76:d1:2b:
         d1:f4:2c:05:05:78:3d:be:ba:2b:f6:a2:2c:d7:46:a4:36:2a:
         a4:ea:fc:98:f8:b0:16:6f:75:90:63:95:7b:5f:85:b4:58:3b:
         88:4c:67:62:fc:3c:77:53:28:1c:d7:25:9c:b3:4b:59:6d:7e:
         aa:6a:01:37:21:3d:db:8c:08:79:88:79:7a:68:73:9e:0f:f7:
         7f:cd:ca:ab:7e:e6:71:d9:ed:96:96:b0:64:e3:06:91:3d:e8:
         d1:37:88:3d:cd:1f:55:dc:2d:60:be:b9:e2:76:8d:c1:66:50:
         7e:9b:1b:67:3c:8e:af:ea:24:57:56:a3:cd:60:18:7e:52:e6:
         3c:1d:dd:dd:e9:69:e1:d3:05:15:b2:59:70:c4:ed:42:30:e0:
         cc:e3:11:51:4e:eb:93:24:a5:5c:f3:4e:b4:48:50:ae:9f:11:
         e8:35:2a:49:7b:b3:df:dd:ed:9e:95:1f:6f:f7:60:1d:60:d3:
         f8:83:d3:1d:78:25:b2:a5:a1:fe:9b:b4:98:40:08:7f:c5:51:
         65:6b:d9:89:b6:6c:c9:1f:19:d1:bc:aa:5b:53:49:45:af:2e:
         1f:d7:10:48:7e:67:51:46:7e:e0:3f:c8:93:28:7b:58:8b:4a:
         5e:e7:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:55 2024 by rpki-client on console-fra.rpki-client.org