Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa
File:                     7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa (raw, json)
Hash identifier:          ctoG+GHzmS4Ut3a4/ec60M1Ov4NpdEkraJIiUtaiKL8=
Subject key identifier:   89:46:36:F4:6A:BF:C9:C6:7B:8D:57:C4:26:55:BA:B1:78:D8:85:89
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F432858479D76BDF445F2BB48AA7084C0
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     22742
IP address blocks:        74.123.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bd:f4:45:f2:bb:48:aa:70:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=93eac0f1-251f-4fd1-8e23-98e561161426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:75:62:b2:ac:9b:32:87:c1:63:0b:7a:56:
                    1d:31:9d:d3:7e:43:17:6d:9b:1e:9d:7f:55:e2:cb:
                    6a:33:af:30:9c:37:11:a3:9a:f1:7b:3e:7e:99:71:
                    b8:68:10:2f:fa:4e:1d:32:7b:3b:40:fe:72:b8:e0:
                    4f:1b:c9:bd:3b:e3:62:c2:4f:72:1a:59:1d:2c:14:
                    85:74:c3:5b:46:6c:44:f9:08:ea:0a:42:4a:75:09:
                    ea:ba:82:5b:77:da:6f:70:d5:e1:8c:4b:c4:0c:54:
                    15:1a:68:23:9d:b0:a5:4c:46:b8:7b:e1:9c:9f:06:
                    f7:1b:a5:44:bb:38:36:7f:bb:a9:5c:ee:df:47:7b:
                    81:91:1f:99:7e:c8:92:95:4f:a3:76:dc:6d:e3:14:
                    5a:a3:4f:ec:e3:ae:c5:ab:c9:4e:85:0a:35:03:d8:
                    34:a1:b0:c0:d3:09:7d:59:f8:da:83:2f:15:32:18:
                    55:64:7b:a7:7b:38:23:66:23:18:f7:13:0f:2f:df:
                    fa:e7:df:e0:72:dc:5b:0c:74:58:7d:ad:5d:17:96:
                    7d:6c:ff:25:b3:37:23:97:95:77:23:a4:01:64:29:
                    5c:a0:f8:02:92:2e:ec:7a:b9:68:67:cf:9d:50:28:
                    00:a9:27:91:dd:e5:c7:2a:fc:23:64:46:75:99:e2:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:46:36:F4:6A:BF:C9:C6:7B:8D:57:C4:26:55:BA:B1:78:D8:85:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:dd:4f:f4:41:34:1f:06:56:50:50:e5:95:88:b4:a8:5e:
         8e:9d:b4:89:e3:27:52:7b:b9:e8:d4:63:c5:4d:d8:cc:bf:b1:
         3a:4d:a5:bf:46:12:6b:80:de:36:fe:5d:a2:f2:77:91:00:a2:
         1c:f1:04:f5:93:7b:c9:90:6d:57:5c:3d:d6:e5:27:d2:fb:54:
         76:ff:ef:74:68:a4:b2:82:5c:8d:cd:38:a9:9f:cb:2a:b3:6a:
         ce:2b:67:27:6d:d1:8d:6d:eb:bd:72:a3:b0:16:74:62:6b:d6:
         0e:1e:b4:0d:6c:ac:6f:05:0b:07:c9:98:68:ad:75:82:cd:63:
         c0:ad:5d:11:7d:98:4d:20:12:f9:9e:c5:11:f6:d0:5f:10:bc:
         7c:0c:c3:d8:57:80:09:53:e2:8b:70:34:3b:ce:09:9c:32:02:
         14:92:aa:85:38:61:52:3b:d7:23:1b:88:95:03:65:18:a8:eb:
         62:ef:3b:a2:9a:12:84:31:37:80:b3:d5:38:8c:04:3f:74:d6:
         7e:b8:e2:ce:8e:d9:91:af:ba:ce:bf:55:3d:2a:ad:5b:a0:90:
         41:ed:d7:f9:57:70:43:eb:ee:ad:69:07:6d:46:2a:41:e0:6b:
         1d:18:00:6e:b2:c6:4d:e2:a1:12:f7:08:61:30:d3:ee:20:67:
         4c:d5:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:33 2024 by rpki-client on console-ams.rpki-client.org