Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ce57e29-2889-3b92-b36c-77f04da61d7f.roa
File:                     0ce57e29-2889-3b92-b36c-77f04da61d7f.roa (raw, json)
Hash identifier:          +lSmFVKTZwLnCcVyOqmQEdXCtzxHayMiz2pumZpQ8AE=
Subject key identifier:   AD:76:E2:1C:5D:2A:0A:74:17:15:55:DD:9C:41:01:99:4F:8F:24:AF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E7093113B0E663D475F0B40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ce57e29-2889-3b92-b36c-77f04da61d7f.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        74.125.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:93:11:3b:0e:66:3d:47:5f:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=de1b90ad-05ad-4d18-8a98-9fa8e1fd1e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b7:1f:69:ac:15:ff:2a:fc:7d:ae:28:f8:07:
                    e6:de:78:f6:7c:0f:8b:cd:1d:a1:43:55:2c:77:bc:
                    58:ac:77:55:ae:8c:9a:c9:b4:f7:52:5c:ea:29:01:
                    af:c0:60:46:3b:13:06:d2:4a:97:af:56:f0:69:76:
                    72:86:24:8c:bf:7b:9e:e5:17:d6:7c:e3:32:ca:7f:
                    b5:8e:83:01:cf:02:96:92:85:92:50:fe:8c:3e:99:
                    3d:bc:8f:8d:36:a7:a2:46:08:55:ec:22:5b:d3:60:
                    2b:27:50:13:88:1d:bd:45:4c:e6:cd:64:43:2d:e7:
                    d4:ed:61:75:33:d4:3f:54:93:78:66:e6:31:a7:83:
                    96:49:54:16:9f:05:a6:7d:97:58:51:16:0b:2a:20:
                    1b:c8:26:de:9f:b9:13:e0:85:61:a6:07:5b:67:b6:
                    ac:73:11:e9:89:9c:ed:0e:58:ab:83:f4:03:a4:11:
                    aa:42:ed:1e:27:d4:a3:89:fc:bc:24:9a:7f:a2:cc:
                    af:32:0c:eb:d9:93:0e:48:e7:5a:30:ba:40:c1:35:
                    82:61:e0:cc:94:88:15:49:6c:fb:0a:44:76:0d:79:
                    b6:80:00:7c:15:42:4e:6d:12:a4:ca:65:4c:50:8e:
                    33:32:de:f8:5e:c2:6b:2a:33:13:47:1a:64:fb:2a:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:E2:1C:5D:2A:0A:74:17:15:55:DD:9C:41:01:99:4F:8F:24:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ce57e29-2889-3b92-b36c-77f04da61d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:45:b0:0e:83:46:ec:02:52:8a:6a:a8:cf:79:91:30:bb:
         fc:62:af:85:d9:60:94:41:e9:64:cc:8d:ab:ed:8b:3f:ad:2e:
         17:ac:25:a3:ee:e8:57:8a:f4:0a:44:c4:e1:ba:ac:f5:07:24:
         4d:a2:df:6e:4e:09:ec:8e:72:47:33:77:c1:b0:6a:0e:48:e5:
         14:25:1d:d5:11:f3:52:7d:b4:be:82:98:d3:72:14:7b:fb:1d:
         05:91:31:53:e9:4a:77:08:08:a3:6a:f3:44:21:d5:39:0c:6b:
         bb:ae:96:f2:60:7e:4e:32:bb:a3:4f:63:de:ab:70:77:60:08:
         e2:fd:ff:ad:13:1a:9a:e8:c9:cf:80:e3:9b:fd:ef:95:a4:11:
         7b:8e:48:e2:b8:7e:de:61:b3:c6:5d:7f:8c:fa:75:1d:a3:b4:
         89:a3:3c:03:78:57:56:cb:1e:d9:62:bc:68:f8:fa:98:f0:4d:
         dc:00:7e:b7:ee:c4:99:4a:0b:c1:9a:47:30:c1:85:78:aa:14:
         9e:14:5a:ce:6a:5a:74:a7:f2:0d:dd:38:04:2a:fa:bc:41:ff:
         fc:aa:42:16:e1:f3:93:a4:50:0f:fe:25:d3:66:54:db:00:d4:
         fc:d9:e5:43:83:d2:ed:e5:01:2a:3e:bd:32:85:3a:fc:80:9d:
         93:a4:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:50 2024 by rpki-client on console-ams.rpki-client.org