Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c62421-3a91-30f3-a1ec-4345363c0b81.roa
File:                     a9c62421-3a91-30f3-a1ec-4345363c0b81.roa (raw, json)
Hash identifier:          2XlUoK9IhUtbLGgsbUzYfu0l6jsshdg+bSdw1+Vdxxg=
Subject key identifier:   9C:EC:F6:07:52:18:8D:6B:A0:D9:A0:BD:F2:1D:68:70:78:36:84:0C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847DDCA1A0974C59D15F5F9F120
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c62421-3a91-30f3-a1ec-4345363c0b81.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     397229
IP address blocks:        204.74.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:1a:09:74:c5:9d:15:f5:f9:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=b3c4a3ca-e7fa-4489-8aa8-7c505a12a98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:b9:83:23:19:7d:e2:0a:33:38:e5:cb:88:
                    c7:09:35:84:b4:e3:1e:eb:28:33:3d:fc:f7:30:72:
                    fe:ef:29:0f:6b:1f:81:b9:a2:08:67:1c:96:b3:71:
                    b9:09:cb:b7:ba:cd:ca:76:68:f3:6e:0a:58:83:83:
                    a3:47:6c:ea:b4:d3:db:05:3e:5a:d9:a5:ac:a8:f6:
                    55:f7:67:99:70:50:47:0c:3a:60:7b:61:a8:1e:8a:
                    61:67:14:29:f4:7a:51:8e:d2:25:9c:fe:e9:3e:fb:
                    a3:d2:4a:49:66:2c:1c:48:c7:06:7b:a2:98:28:10:
                    23:87:ed:c7:e4:e4:90:70:3a:5b:c5:a2:92:68:5e:
                    ba:28:58:85:c5:58:1a:b8:e1:f0:8e:05:1d:30:63:
                    a6:56:2a:94:e3:38:39:9d:3c:d8:1b:62:7f:92:f7:
                    bf:8d:b0:c9:6f:76:3b:1a:51:07:c2:5b:ba:f9:5d:
                    1e:f8:ec:a8:f7:e5:d3:a1:35:a8:dd:a3:cd:86:61:
                    30:61:b6:9a:a2:8d:9a:3e:09:5f:69:42:b3:73:c7:
                    69:2a:7f:9c:3f:c4:97:eb:56:8d:2c:88:4b:50:49:
                    d9:16:58:36:8d:95:53:30:ed:0e:b7:27:47:4b:75:
                    b9:11:7d:6a:55:63:aa:18:14:21:ae:d1:09:ef:45:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EC:F6:07:52:18:8D:6B:A0:D9:A0:BD:F2:1D:68:70:78:36:84:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c62421-3a91-30f3-a1ec-4345363c0b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:96:55:da:37:0a:94:d6:05:12:56:78:20:05:dd:30:d8:fd:
         79:11:e4:c9:ee:a0:02:cd:01:32:25:b7:41:b0:53:a5:2d:ab:
         5c:3c:d3:ff:1b:68:65:40:47:fd:12:4e:cc:4d:7e:99:42:b6:
         88:67:35:6d:6d:9b:1d:14:e9:40:b8:f4:96:05:57:af:d3:a8:
         d9:f1:ad:e9:02:0c:80:3d:f0:f2:3c:d3:8b:f5:39:c3:96:a5:
         0d:15:b3:f4:bd:e9:f4:d4:65:a5:98:8d:a7:7d:33:3a:85:00:
         a2:2e:77:27:3d:5b:ce:2b:5f:31:99:00:da:7f:32:8a:bd:0e:
         5a:52:e2:0b:a2:ed:82:0a:f2:d0:39:2e:6b:f2:b9:9d:27:c2:
         c4:2f:9c:1d:8b:aa:99:d1:1d:28:a4:2d:f8:1e:82:6e:cd:4e:
         46:a9:90:21:7d:9b:fc:5a:b4:f9:46:e9:1f:b9:73:ea:f2:3f:
         44:ff:a9:a0:f0:61:ba:df:6c:6e:81:39:c2:a1:27:00:41:ab:
         c8:d3:c3:dd:b3:c0:33:23:60:87:3f:dd:d8:1e:1c:f0:99:97:
         05:d1:02:3b:76:04:8c:05:82:97:d3:08:50:43:c1:91:2d:a7:
         a6:54:47:89:c7:69:d1:8e:95:19:11:c7:be:59:cb:48:d6:bd:
         02:e9:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:12 2024 by rpki-client on console-fra.rpki-client.org