Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6425ebd1-1c08-3e79-9995-1ea170ee2988.roa
File:                     6425ebd1-1c08-3e79-9995-1ea170ee2988.roa (raw, json)
Hash identifier:          zGcOt+iQd50ZU86BBVp8kgg7H2pDKOz6G4raf7bA4Nw=
Subject key identifier:   51:3E:A3:EB:FD:A1:18:77:D5:D3:34:B0:53:21:D2:F4:89:D8:66:F5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858478CB6A54DEAEBBB23F1727CD0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6425ebd1-1c08-3e79-9995-1ea170ee2988.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     397240
IP address blocks:        204.74.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:a5:4d:ea:eb:bb:23:f1:72:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=524f8bb4-814e-4474-952f-97d778c1b8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:01:87:3a:4a:2f:c3:1a:82:b9:b4:06:e8:
                    f1:50:e9:5f:98:96:fd:38:f9:e0:5e:c4:09:80:31:
                    94:cd:fd:eb:f0:d6:82:e2:d8:37:82:21:31:4f:bc:
                    48:ca:2b:23:95:3b:bc:22:c1:da:00:53:f9:e1:57:
                    7d:a1:41:9d:f1:de:33:ed:b3:cd:12:f6:1e:f4:71:
                    ac:56:e0:02:94:d0:5b:ec:c0:ff:57:e0:3c:f3:94:
                    40:34:4f:4a:33:a6:ab:52:f5:67:53:52:31:72:88:
                    81:5a:99:c7:1e:fa:ee:3a:2f:00:e3:73:bf:a6:2f:
                    ba:ff:a4:40:40:ee:b2:aa:fa:70:61:4e:1f:27:f0:
                    b5:ab:a5:14:70:05:3e:67:cf:2e:c3:85:f0:7c:07:
                    d2:af:b0:ca:0f:ba:ae:db:79:be:2e:cd:0c:a1:43:
                    d2:56:ca:5b:32:0d:d4:91:9a:11:70:09:14:24:04:
                    e0:2b:0d:76:67:cf:23:7e:42:2d:7d:dd:f7:77:8c:
                    1f:ed:e6:94:8c:17:96:b6:3b:f5:fe:8d:4d:86:94:
                    af:b2:03:86:ce:8f:09:93:75:fe:61:44:c7:72:9e:
                    8e:51:9c:de:4b:90:72:52:fb:d3:d7:c6:8b:71:ce:
                    26:87:e3:fc:5c:25:fe:d2:52:e0:64:4e:8d:2e:23:
                    9c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:A3:EB:FD:A1:18:77:D5:D3:34:B0:53:21:D2:F4:89:D8:66:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6425ebd1-1c08-3e79-9995-1ea170ee2988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:00:46:b6:d0:33:81:7a:ac:ce:f1:df:74:4f:60:62:70:
         a0:1e:28:a1:00:09:60:e5:ff:6a:a0:61:fa:3c:39:62:86:90:
         91:58:17:33:61:88:72:25:87:12:ba:0b:a2:1d:a9:f6:57:1b:
         ea:b8:0a:a6:51:bb:21:d1:fc:b7:27:e1:20:94:f8:a2:54:8e:
         76:b6:eb:40:03:2e:1b:f2:ae:7c:78:b8:bb:3b:4b:c0:c7:dc:
         54:91:45:c4:8c:df:4c:92:b2:fa:cb:41:f0:6a:c3:0b:4d:58:
         fe:a3:7f:74:50:63:b2:97:eb:20:d0:12:a4:ce:3f:27:d5:1a:
         b9:83:b6:d2:cb:56:8d:b6:19:cf:3d:32:d5:f1:c0:da:3c:94:
         a5:28:41:2e:b9:fe:f3:56:ab:d2:87:2d:78:6c:cf:bd:95:7e:
         92:3a:30:e4:0e:8b:38:44:f2:a7:20:3e:85:cf:0f:d2:d6:59:
         c0:ca:16:ad:1a:83:23:da:68:58:b4:5b:14:29:4c:a3:53:53:
         bc:48:d6:27:dc:c5:e8:1b:9c:ef:2e:c2:4a:62:b6:c7:ab:71:
         07:13:60:4a:33:fa:00:e3:79:b6:e7:12:dd:4f:43:9a:3f:28:
         1f:cc:91:bf:4d:a9:d6:49:fc:39:82:0b:0e:c3:78:9d:45:e1:
         f3:63:0f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:18:49 2024 by rpki-client on console-fra.rpki-client.org