Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa
File:                     5042fc88-5f01-39b3-8b5f-8932f28aa563.roa (raw, json)
Hash identifier:          Y549H2W7wAOPrGB6keT39WCkQ82aGLAfgrfRHftW/f8=
Subject key identifier:   0B:1D:4C:BE:A8:D1:B3:FF:FA:54:FE:B6:C6:0A:2B:72:3A:7D:1E:77
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F4F17F09B1F19A686FB180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        74.125.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:f1:7f:09:b1:f1:9a:68:6f:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=480ed09b-549e-4740-a559-92d845e7391b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:53:9a:de:49:eb:28:54:aa:38:7b:0e:7e:b9:
                    61:a1:39:dd:ce:b7:8a:1c:f1:08:82:f5:0f:76:ba:
                    96:37:07:1e:34:f6:c3:92:fa:d2:89:ca:67:26:29:
                    5f:61:e5:d0:38:c3:4e:f4:ad:53:f3:96:c4:39:b3:
                    c5:1d:92:51:d3:fe:e9:a0:d2:5a:5e:ce:01:e4:ed:
                    ca:47:bb:80:a0:ba:28:d2:c2:1e:e8:64:f0:af:12:
                    24:5c:9d:0b:1e:37:0c:6c:82:54:10:47:ec:61:a1:
                    21:8a:60:62:f9:06:62:55:9d:c8:79:23:cb:3d:8d:
                    bd:2b:99:c9:28:d9:8a:46:53:3b:91:e2:93:d2:d2:
                    6f:3d:20:e0:75:54:12:de:bf:8d:64:dc:66:ea:08:
                    6f:b7:90:c0:f8:66:24:fb:e8:b5:5c:64:f8:29:8a:
                    b2:8f:7e:bb:15:85:54:78:10:0a:2b:57:b4:fc:90:
                    c8:bf:90:82:40:5c:8d:47:98:29:74:d5:59:2b:e2:
                    ea:29:4b:fa:2f:25:94:fd:65:5d:61:db:89:17:d0:
                    f7:63:94:46:16:02:2f:53:ab:00:0d:41:c1:20:ad:
                    8b:4c:24:1e:ac:26:30:ec:d1:16:49:7c:be:f0:f1:
                    81:b4:30:d9:17:ae:ec:99:d9:9c:26:2d:ac:b6:81:
                    c7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1D:4C:BE:A8:D1:B3:FF:FA:54:FE:B6:C6:0A:2B:72:3A:7D:1E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:21:9e:10:2a:84:cf:f6:4c:16:04:2f:0c:c4:83:67:5d:e4:
         74:89:53:13:ff:1b:ff:43:14:7a:cd:f4:20:ab:53:75:e7:3d:
         a4:40:76:d4:db:da:34:7d:a7:bf:10:a1:5b:4d:8b:f2:26:a2:
         d9:19:29:6a:6f:9e:b4:e7:72:74:03:1f:b7:c3:6a:16:01:5a:
         d8:45:f9:9f:92:6b:d6:d7:b2:0c:7f:a6:12:36:df:0f:d0:ac:
         69:5b:cd:fc:b6:37:45:58:5d:cb:58:dc:d9:05:fa:43:f7:5d:
         ca:b6:ee:e8:b5:37:04:be:bf:6a:7c:0e:5e:ae:cf:95:92:fc:
         40:44:5f:4d:42:46:9a:e8:ad:f1:9c:dc:2e:67:17:16:dc:5c:
         ff:9f:c4:7e:d1:8d:c1:0b:f6:7d:72:e1:8e:72:76:2b:18:92:
         b8:fc:44:86:ed:b8:e9:07:6c:a4:df:52:e5:22:60:a6:08:af:
         aa:a2:08:ba:4c:b1:6a:e8:49:92:a3:0d:f4:0d:5a:79:92:e6:
         29:33:6c:89:66:62:7c:f9:76:67:fd:67:0c:12:0e:d3:3c:14:
         a3:ae:7d:11:bb:e1:ad:4a:c6:1f:48:aa:17:41:29:42:7d:31:
         fe:23:aa:d8:11:9b:52:bc:a3:1b:cf:18:9f:9e:70:2e:5c:eb:
         4c:9d:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:11 2024 by rpki-client on console-ams.rpki-client.org