Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa
File:                     d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa (raw, json)
Hash identifier:          6uurQLrK2s+jKfIaEjSRG+PB9PSEf2cCCer1bxDqWkg=
Subject key identifier:   F4:82:92:7D:C1:56:27:06:A8:1C:92:4E:A2:1B:21:2A:17:A9:05:55
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285847F4557345508DDCC8FA61C7B8
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa
Signing time:             Thu 21 Nov 2024 15:49:22 +0000
ROA not before:           Thu 21 Nov 2024 15:49:22 +0000
ROA not after:            Wed 19 Feb 2025 15:49:22 +0000
asID:                     6079
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.157.0/24 maxlen: 24
                          74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          74.80.178.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:55:73:45:50:8d:dc:c8:fa:61:c7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Nov 21 15:49:22 2024 GMT
            Not After : Feb 19 15:49:22 2025 GMT
        Subject: CN=685e3f6c-8be9-454e-96bb-0aa4a5f47f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:ab:96:b5:ad:8a:61:bc:f9:0a:8f:f7:ff:
                    96:10:97:60:40:9a:01:ba:5f:d5:d3:c2:a7:74:6a:
                    7d:3c:23:3a:15:8e:f8:b9:70:03:0d:69:5c:fa:20:
                    56:42:1d:70:95:2d:72:44:c0:0f:e5:0c:63:d7:32:
                    b6:e2:ba:bf:f0:43:b8:7e:55:e6:bb:6c:b6:ed:32:
                    e7:36:b9:73:9a:60:a1:a7:02:b7:1d:58:8b:8f:de:
                    9d:73:ea:86:74:14:c4:c5:f9:29:fb:08:f2:c8:d5:
                    bd:62:f4:2a:50:04:5a:42:7e:5f:91:35:32:66:89:
                    91:99:21:0b:e6:64:69:00:64:2e:f8:a3:31:8c:b7:
                    0b:76:70:ed:c7:0a:c7:84:67:3f:bb:d2:c6:07:98:
                    6e:b0:a8:91:0c:7a:46:ef:86:26:ad:cc:5d:89:2c:
                    80:c7:76:a2:1b:be:21:1b:e7:99:5c:54:9c:a5:74:
                    d8:5a:04:cf:0c:bc:43:98:09:b5:46:00:f4:df:e2:
                    d3:23:a9:7b:a3:9f:65:4d:ce:bd:57:70:5e:10:f8:
                    66:68:38:b3:1f:57:87:02:11:db:3d:62:b7:88:ff:
                    df:db:c7:87:02:73:28:8c:bc:23:8e:68:4d:83:5c:
                    75:78:52:aa:15:85:69:c1:12:d0:d5:90:e0:2d:0b:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:82:92:7D:C1:56:27:06:A8:1C:92:4E:A2:1B:21:2A:17:A9:05:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.157.0/24
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0-74.80.178.255
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:79:69:8f:4b:12:36:ef:73:e5:00:a4:5a:02:6b:81:53:
         73:c8:95:df:fb:a4:1b:60:f5:c7:10:63:4f:c4:b6:97:65:a1:
         71:78:04:b6:d4:3c:84:30:fd:33:f3:15:c3:11:07:40:8c:d3:
         18:d4:a2:b7:0f:a6:76:5f:ca:97:a3:25:f4:c6:9d:e2:1e:c0:
         f0:a0:6c:72:ad:1f:38:34:72:a5:b1:e0:dc:a6:3a:6b:49:17:
         c6:ae:b4:2e:21:4b:b5:66:15:d5:d3:0a:da:d6:3e:90:8a:1f:
         69:c3:0a:20:36:b4:c3:45:49:c8:eb:51:17:9e:b5:32:27:62:
         14:6b:49:8d:92:ef:28:96:30:f9:5a:f9:68:89:fa:0e:74:89:
         df:03:25:fd:fd:74:96:ec:5f:a3:6a:de:bd:b8:d4:98:49:ed:
         16:6c:3c:3f:60:88:bb:5a:47:8b:f3:35:67:3a:58:5d:8d:94:
         cf:11:30:e4:82:22:be:75:8f:f2:79:18:7f:03:5e:62:8e:fc:
         65:9c:a7:9f:2a:03:28:63:2c:64:b1:6a:30:c1:27:37:80:5f:
         f8:88:5f:59:1f:42:65:0c:c2:d7:de:63:9f:72:5e:29:79:df:
         61:68:23:03:92:5e:60:a2:78:f8:07:02:3e:e8:a5:26:49:76:
         d2:49:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:00 2024 by rpki-client on console-fra.rpki-client.org