Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6d7584fb-b9dd-3170-a0b5-8dc0d3d81f83.roa
File:                     6d7584fb-b9dd-3170-a0b5-8dc0d3d81f83.roa (raw, json)
Hash identifier:          izYh7aObmxAJHA6MVgodq7ZgoDGfz1y1rCMRGyTN8fE=
Subject key identifier:   B2:EA:43:A4:F1:C9:13:27:7A:07:CF:D7:CB:6C:41:43:3D:68:E1:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E96561046597DA4EF4552A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6d7584fb-b9dd-3170-a0b5-8dc0d3d81f83.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397241
IP address blocks:        204.74.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:61:04:65:97:da:4e:f4:55:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=e6442da7-a5f2-47e3-bc6c-d2df69c5cc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:4e:e6:20:d6:4c:f1:dd:4f:84:79:4f:11:
                    2b:80:dd:c1:9a:ad:76:47:b4:34:a1:88:d9:f2:df:
                    8a:a5:3a:67:2c:63:f7:44:eb:79:ab:c4:c8:be:04:
                    16:e3:9e:ed:d3:b0:55:9b:1f:1b:de:e6:60:2a:e4:
                    59:8c:a4:64:aa:4c:a9:9f:b5:8e:d9:2c:42:8b:fd:
                    a0:40:28:42:a9:d0:9a:f7:e0:b6:a3:84:4c:15:af:
                    26:4c:87:4d:a4:a2:5f:ab:f7:ef:d2:2b:d4:fe:6d:
                    34:ba:19:60:5b:57:66:14:ec:5c:cc:39:3d:fa:04:
                    8d:2f:23:8e:38:74:a2:4a:94:f8:60:6f:2d:e4:8c:
                    5b:20:91:27:eb:b5:66:d2:cc:c2:e9:3e:77:02:af:
                    66:89:40:6f:30:83:b1:2f:55:8e:8c:a3:2c:10:31:
                    61:66:bb:6c:83:1c:4b:37:73:ae:ad:76:6a:9f:d1:
                    40:5e:ca:8f:94:e5:b2:05:19:90:11:8b:b0:82:b7:
                    0e:8a:f5:71:95:b6:f4:b3:e5:ef:a5:07:c2:85:5a:
                    f9:d2:58:7d:bc:03:de:9b:ab:86:43:bf:61:90:4f:
                    ab:49:46:4e:ca:e9:8f:6c:26:e2:fb:da:d6:ce:78:
                    bb:b0:2f:00:dc:78:d0:a4:05:40:8c:c2:fb:53:52:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EA:43:A4:F1:C9:13:27:7A:07:CF:D7:CB:6C:41:43:3D:68:E1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6d7584fb-b9dd-3170-a0b5-8dc0d3d81f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:67:0a:fb:f8:47:89:41:28:8f:6a:52:c4:e9:19:5a:d3:c0:
         fb:ad:fe:32:7a:6d:6d:ec:3f:6e:00:66:c0:2f:e8:30:a1:6d:
         3b:02:93:c4:18:72:f2:44:fb:1b:50:d9:1e:47:c8:f8:1b:2c:
         2d:d4:8a:dc:15:2f:3d:97:65:0e:21:43:4b:15:5d:33:d1:ac:
         fa:74:fc:92:26:22:7e:b7:92:48:62:ff:37:46:cd:53:9d:f4:
         89:69:ae:bf:77:85:48:80:24:9d:88:03:18:ad:7b:4f:09:1f:
         1b:52:5c:e6:b3:e3:67:3b:93:b5:46:ea:b6:f5:f3:13:86:d8:
         9c:f4:29:74:5a:12:4c:ae:08:8c:79:62:b2:24:f2:dd:65:cb:
         15:e2:26:e0:9e:e4:90:b2:ba:2f:46:4a:6c:c5:e7:60:4d:94:
         af:95:7e:61:1a:a6:6a:6d:d1:f5:7a:e6:5c:b3:e0:6a:5e:28:
         73:44:27:31:f8:23:18:d1:cb:20:23:77:71:b3:f9:64:3f:c5:
         85:92:67:75:1f:ca:03:08:58:5b:c4:7a:81:9d:bc:5c:fc:2c:
         a3:44:d8:ad:6a:6a:c7:53:8c:ec:5d:58:ca:32:65:5d:8f:39:
         2c:23:5c:ed:29:9f:cc:dd:b0:1d:51:4e:e4:e3:76:b1:84:d3:
         f0:0c:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:11 2024 by rpki-client on console-ams.rpki-client.org