Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa
File:                     0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa (raw, json)
Hash identifier:          1tLdyiTtqCCAKouWlcm90VjlmaL3XAfjG/CnbryQUXg=
Subject key identifier:   A6:F4:7C:2C:E8:F9:11:10:72:EF:3D:27:CA:3D:65:45:DE:44:17:AD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E965881D350C8678B6C6B780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397224
IP address blocks:        204.74.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:88:1d:35:0c:86:78:b6:c6:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=3f04f950-8561-4ee7-b631-bc931d2805df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:59:88:bc:d8:b3:e2:b0:b2:0a:16:94:da:
                    ca:29:40:14:77:2a:ef:0f:3c:6f:11:84:45:e5:64:
                    70:2e:75:07:c1:9f:a6:87:f7:0a:22:64:51:34:68:
                    33:15:62:a0:06:74:be:84:6e:b8:2e:8a:74:bd:f1:
                    16:cd:e2:30:0e:9d:eb:9e:4d:78:f7:6a:8f:3b:d0:
                    0b:44:b2:a4:08:17:80:f2:a9:14:eb:08:c8:0e:32:
                    37:c2:72:4e:b0:50:06:46:a4:00:9c:bb:35:f7:ea:
                    18:43:1d:1a:6a:e8:09:b6:97:f6:f0:dc:44:6a:cf:
                    07:bd:9c:50:1f:a3:ef:7f:12:dc:ac:49:8f:a0:9c:
                    f0:9c:d5:ab:dc:2d:25:2d:d0:88:9a:17:2e:60:6f:
                    6f:9f:9d:f5:e0:ec:78:d8:7e:13:fa:0d:2b:36:5a:
                    e6:77:e2:db:d2:02:60:d0:e8:f7:31:d4:57:17:89:
                    b0:d0:f4:77:97:cc:c3:f4:fc:eb:20:f2:2a:ce:c9:
                    04:59:67:fb:e3:eb:3e:14:0d:83:52:c1:7a:72:75:
                    31:9a:1b:34:5d:7a:c1:84:bd:c6:a4:77:65:a2:d2:
                    01:01:24:85:bd:4c:38:6a:9a:ac:4d:bc:50:50:71:
                    16:7a:d0:09:33:9b:f5:9a:e5:1b:b8:8c:9b:35:3a:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F4:7C:2C:E8:F9:11:10:72:EF:3D:27:CA:3D:65:45:DE:44:17:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b3:57:51:53:80:cc:3a:83:db:f1:54:9e:18:d3:92:6f:32:
         61:79:82:d5:45:39:c8:9e:d4:0e:15:83:79:ba:7e:fc:59:3a:
         d1:3f:fa:b3:61:5e:3a:34:f3:2d:bf:0e:63:9e:e5:16:28:2a:
         b0:80:e7:8b:be:ac:5a:35:08:1c:3b:de:d6:69:1b:f1:76:91:
         bd:cf:88:c0:70:bc:8a:91:65:bf:a4:e4:09:1b:d9:67:d6:ad:
         35:1a:f3:e8:d3:eb:ad:a7:84:30:b6:99:b0:98:97:45:68:d8:
         11:dd:f9:86:52:c9:e4:bd:f4:54:e8:66:9a:fb:97:73:65:f2:
         c4:fd:58:eb:b4:f4:81:59:58:93:fb:31:e3:c2:46:15:6f:7c:
         a2:8a:19:48:66:91:ef:0b:a1:84:9c:43:6b:74:af:f0:e6:d3:
         4a:80:dc:89:47:3a:79:e0:87:07:55:98:7e:12:2a:1c:43:25:
         f9:dd:b0:cf:fd:fb:21:d7:e1:1a:f7:6d:bd:c6:cb:2c:d9:0f:
         e1:8c:76:d7:31:fb:82:bb:6b:0e:27:bd:01:a2:59:b0:c6:0b:
         32:59:d1:57:e7:e9:b9:87:d9:5b:cf:f7:9c:f8:04:20:d5:3b:
         a6:2a:54:43:92:a0:75:5c:65:4d:9a:29:06:64:6e:33:c0:0e:
         f9:fc:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:24 2024 by rpki-client on console-fra.rpki-client.org