Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/7a3473b7-d384-33f6-a284-dd2c449fff44.roa
File:                     7a3473b7-d384-33f6-a284-dd2c449fff44.roa (raw, json)
Hash identifier:          h2leUg1F7ySHD6FZjHyN6qKP4n8ROZKkU/+1Aq9C/Yw=
Subject key identifier:   97:6E:E4:D4:D1:31:80:EA:7F:2A:E8:AB:97:3C:82:9D:E7:3C:F0:5F
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584570830A7A37AAA6DCCE92BBE0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/7a3473b7-d384-33f6-a284-dd2c449fff44.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     174
IP address blocks:        64.22.72.0/24 maxlen: 24
                          74.81.78.0/24 maxlen: 24
                          74.81.64.0/22 maxlen: 24
                          74.81.87.0/24 maxlen: 24
                          74.81.82.0/24 maxlen: 24
                          74.81.81.0/24 maxlen: 24
                          74.81.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:0a:7a:37:aa:a6:dc:ce:92:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=e33c6510-527a-404b-8a78-7c77e6bdb249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:3e:9c:41:9e:cb:34:f7:3d:33:eb:2d:45:
                    c4:0e:9f:fa:46:c1:ba:64:29:c2:14:fb:d6:28:b6:
                    c2:69:76:c2:84:f9:f1:cb:15:e8:21:c6:08:7b:93:
                    79:8d:1d:52:43:2d:9c:33:a7:4c:35:5b:10:d4:58:
                    58:ea:d9:7b:3e:08:82:8a:67:87:09:e2:f0:8b:f4:
                    b6:64:1c:d5:a1:ee:7c:76:75:5e:3d:fc:e5:ed:7f:
                    17:8e:e7:19:04:ab:36:d6:13:18:dc:46:1a:d7:b0:
                    9a:23:1e:bf:4c:1a:ab:ca:58:2c:aa:b9:a5:63:8a:
                    6d:5e:71:ae:6d:97:1c:ab:ea:f5:7a:c0:3b:ee:c7:
                    0a:33:db:25:97:82:5b:12:05:e6:17:5a:ae:c6:22:
                    c5:9e:d2:7b:9e:19:63:84:4f:4a:35:b0:53:c4:5f:
                    87:3f:37:8c:63:27:d7:f0:e6:85:2b:da:9d:45:02:
                    04:95:59:36:5c:5b:bc:66:3f:a1:2a:3a:bd:bc:bd:
                    15:79:c1:a2:33:e2:b5:5d:50:6c:50:b5:b3:41:52:
                    94:d7:6b:7c:e9:6d:c6:64:88:b9:ab:cf:1a:aa:16:
                    19:1b:a6:65:41:cc:6f:5f:cc:2a:31:f9:f2:52:8f:
                    f7:c5:dd:66:da:0d:71:ed:97:c0:0a:6a:eb:c7:31:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:E4:D4:D1:31:80:EA:7F:2A:E8:AB:97:3C:82:9D:E7:3C:F0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/7a3473b7-d384-33f6-a284-dd2c449fff44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.72.0/24
                  74.81.64.0/22
                  74.81.78.0/24
                  74.81.81.0-74.81.82.255
                  74.81.85.0/24
                  74.81.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:84:91:af:52:f9:89:53:f3:1c:1f:5e:46:a2:e8:04:53:
         da:52:cb:d9:d6:a3:7b:cf:60:70:57:4d:77:76:7e:1c:26:b9:
         db:e9:9d:8b:b2:bf:80:bb:bc:08:9a:d0:a9:bd:a8:7d:88:19:
         1e:c0:f7:78:74:39:2c:e1:a0:7f:83:3e:8e:51:76:d7:0a:d4:
         2f:02:2f:77:9c:c3:4a:f2:74:1c:55:0d:1c:eb:bc:fb:ee:d2:
         7c:e4:cd:87:8e:89:57:15:81:3f:eb:f2:e0:39:94:75:72:b6:
         ce:12:fe:22:69:bc:a7:eb:7f:74:bc:fb:75:41:a5:05:ed:90:
         70:ce:a3:53:32:e3:23:cf:42:6b:eb:a1:bb:56:5f:fb:d0:7a:
         eb:5c:e0:e2:5e:cc:22:2e:97:a2:2c:f1:9b:fb:82:55:69:53:
         b1:d6:0a:8b:5c:4e:3c:47:a4:99:cc:ca:7a:82:c5:06:ee:90:
         9e:9a:67:e7:a8:2f:8c:50:9e:f6:98:5b:9c:11:62:ef:6a:b9:
         3b:2f:27:9b:c5:8e:54:d6:fa:0d:65:23:6e:d5:07:e9:f9:d9:
         11:f5:71:17:a3:d2:3a:87:9d:06:01:c8:fb:2d:27:3f:81:9f:
         f2:3d:12:7f:06:bc:ad:c5:d6:ad:0d:21:d6:bc:3d:35:2e:78:
         eb:ab:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:56:47 2024 by rpki-client on console-ams.rpki-client.org