Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f17bd324-83e3-3de4-ac97-dec297b019c0.roa
File:                     f17bd324-83e3-3de4-ac97-dec297b019c0.roa (raw, json)
Hash identifier:          RduIVdud9uJBn+RAUmhOnbvVbx1o0EufD1COeQ8dBzk=
Subject key identifier:   CA:86:F1:44:89:0E:CB:36:5E:D6:7F:6D:77:99:83:07:29:87:D2:E6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847CA3F5BB824F3C3D38D391F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f17bd324-83e3-3de4-ac97-dec297b019c0.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397221
IP address blocks:        204.74.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:5b:b8:24:f3:c3:d3:8d:39:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=0c7c243c-c0d1-4979-8462-0f36a1bbc38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:09:ea:a5:1a:9f:c5:0b:24:9d:0c:f5:66:
                    8b:b2:52:ab:8f:e6:d0:46:87:67:35:cf:a7:3f:66:
                    ce:21:ba:26:16:5b:96:e5:51:be:c1:a6:ca:b4:c3:
                    0a:16:8d:c1:86:e0:99:71:a5:8b:f2:fe:45:5e:b5:
                    6b:94:1c:a2:98:9a:bd:75:46:44:cb:2a:df:10:dc:
                    9c:f4:dd:00:f0:fa:f0:d9:8b:11:a5:3f:00:d5:2b:
                    5c:6e:da:22:6a:c6:ce:31:d1:32:ba:1f:fc:09:c6:
                    f5:f1:ef:51:53:ba:82:e6:80:21:19:59:26:33:c4:
                    bd:25:8d:89:a1:9d:44:6d:82:be:e6:a8:6e:9f:ec:
                    15:58:6c:7b:52:08:5b:d5:11:e6:19:17:95:15:0f:
                    72:e5:3d:ab:46:b4:1e:f3:45:0d:59:cb:49:06:d0:
                    06:d2:e4:5d:c7:4c:b9:af:0f:9d:c5:c5:c4:46:05:
                    cb:28:fa:7b:40:c1:d4:63:74:92:72:5f:3a:45:db:
                    b9:f8:a0:84:42:74:5e:55:4d:90:8f:77:ee:5f:70:
                    c9:a4:09:2d:78:de:a9:3d:a8:3b:17:52:1c:70:de:
                    ac:72:1d:33:de:4b:ef:f6:f5:4f:27:7d:b0:a7:e0:
                    56:44:7c:38:2f:5f:7c:8a:84:6c:93:70:2c:e7:15:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:86:F1:44:89:0E:CB:36:5E:D6:7F:6D:77:99:83:07:29:87:D2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f17bd324-83e3-3de4-ac97-dec297b019c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:20:2e:d8:00:38:44:2f:56:99:dc:2d:53:5f:db:2d:a9:b5:
         2e:da:d6:c0:d4:3b:6c:49:e6:26:91:5e:64:e4:b7:d5:d6:d4:
         71:95:6f:2c:23:ef:0e:1e:e3:65:f1:39:df:c0:a5:de:f6:12:
         8e:e8:d9:0d:bf:e8:5f:78:a7:7f:dd:b0:cf:87:10:41:6c:27:
         8f:e5:9d:7d:ba:26:8b:3d:fd:45:60:72:21:ae:f1:48:cb:98:
         f5:d8:fa:cb:74:c8:7a:1d:39:d0:3d:2b:c1:d8:78:59:c5:58:
         5a:c8:6b:c9:15:18:ce:59:a3:56:5a:b2:f4:27:d0:e5:3b:7f:
         d7:26:97:ab:b3:dd:d4:71:44:a2:4f:bc:1c:f2:36:49:ad:62:
         3a:c9:ae:82:52:00:61:5f:12:ed:df:40:c8:99:13:29:85:81:
         49:62:99:3a:95:df:81:3b:d3:a8:ec:4f:da:d1:c1:07:84:54:
         29:a1:79:5b:04:36:ba:f4:43:3b:c1:f6:9f:49:28:4f:0b:62:
         7e:89:60:e9:59:9c:b8:05:4a:3d:ff:ea:0e:f6:6f:da:11:d4:
         f3:56:db:2a:ae:a3:c9:25:f2:7e:e1:ba:cd:00:b4:76:9c:2e:
         f2:d8:dd:ce:49:d8:e7:82:55:93:d5:ab:19:cc:df:58:53:83:
         3b:4a:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:10 2024 by rpki-client on console-fra.rpki-client.org