Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d64350d-9d11-3570-bd12-c555d99e720d.roa
File:                     2d64350d-9d11-3570-bd12-c555d99e720d.roa (raw, json)
Hash identifier:          y3jjpzXRsg1U9mRLlr4ai7Hyq1J/lHrZAriLCHRwwhc=
Subject key identifier:   DA:64:20:C0:94:D0:FB:47:FB:8E:A0:9A:5A:77:E4:71:9D:2B:6F:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472F308CE8911B4AC65E99FFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d64350d-9d11-3570-bd12-c555d99e720d.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.225.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:8c:e8:91:1b:4a:c6:5e:99:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=c3c24bf2-2d8d-405e-9ca6-5d2ea2c94a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:0b:8a:77:9a:d9:41:98:42:f0:10:c1:53:
                    f1:28:43:3c:f4:a5:01:71:4e:e5:67:57:17:38:00:
                    56:3b:64:de:ae:37:02:74:62:d9:62:34:10:37:29:
                    9a:be:e2:86:b5:b7:47:9f:00:ea:c5:51:35:1c:ad:
                    0b:d5:ce:78:b4:53:30:e3:f2:82:7e:27:2d:f3:54:
                    30:a0:d3:a7:da:9e:8e:8c:de:b1:43:cb:44:a4:dc:
                    5b:5b:ec:4e:ab:e4:32:61:ab:32:91:64:98:e6:0d:
                    9e:c3:78:67:74:a0:ce:17:8c:8f:47:e9:7e:79:67:
                    aa:66:b2:37:1b:b2:ce:b1:56:cf:04:51:40:55:62:
                    12:75:6e:42:a3:8e:2f:75:cd:db:2d:89:c5:75:81:
                    9a:ee:46:d2:12:00:d0:31:2f:ba:c2:25:0e:41:f4:
                    f2:39:c4:26:e3:da:e2:f9:a8:17:de:40:e1:e3:18:
                    46:72:97:15:59:fd:12:b9:e1:57:4b:25:b1:e6:0c:
                    cd:66:51:5c:bf:35:84:c5:a7:6a:70:49:9f:5f:b2:
                    cb:34:a7:7d:07:05:b3:ff:46:42:08:c0:a2:d3:45:
                    a5:57:d9:4f:f0:7b:65:04:96:17:8e:2e:ba:2d:33:
                    3a:89:a3:60:2b:fa:9a:c3:ac:52:b9:68:cf:6b:38:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:20:C0:94:D0:FB:47:FB:8E:A0:9A:5A:77:E4:71:9D:2B:6F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d64350d-9d11-3570-bd12-c555d99e720d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5b:75:4c:fd:0f:a2:48:b1:68:bd:1f:21:8c:b5:ae:65:a3:
         a0:bb:ad:2c:03:28:7d:1d:37:f4:3d:d4:f4:7e:98:21:c5:f2:
         ff:25:38:2a:a9:d3:d1:fd:5a:05:b2:4d:4b:12:f7:be:3e:d9:
         51:49:32:7b:ec:9a:03:82:af:a1:26:54:e9:c8:2e:b1:f2:ae:
         62:9e:5d:8b:d1:63:95:59:69:31:1f:1b:4f:84:91:05:d8:8b:
         8c:b0:9a:f6:70:ee:1e:20:ca:0e:ec:91:9b:8b:89:93:83:b6:
         5b:fc:52:a4:e6:41:7c:53:17:a8:f9:98:dc:4b:09:1a:15:71:
         11:54:d1:82:da:bb:7f:65:a4:be:eb:e5:93:23:82:96:1b:be:
         8f:59:0f:e1:05:c5:d6:bc:5f:5e:17:e7:9c:db:93:cb:2e:55:
         df:f7:a4:fc:e6:40:47:7a:6f:8f:4d:aa:03:2e:0d:71:e6:62:
         1e:20:91:fb:e5:5a:1e:4c:90:d3:bd:ad:36:16:bd:8e:fd:14:
         dc:5c:6b:80:f9:2d:3b:f8:9f:0b:3e:6c:02:b8:4e:d0:a7:a8:
         6a:52:a4:10:29:8f:38:e2:2c:c1:0d:8e:3f:99:09:8b:63:52:
         e4:ac:3e:4f:99:e1:3d:69:d5:1a:94:8d:70:0c:37:9f:c3:00:
         16:33:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:23:53 2024 by rpki-client on console-ams.rpki-client.org