Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa
File:                     c3af61be-d608-31cf-8e45-94b0de256680.roa (raw, json)
Hash identifier:          YGI2hS72+iyby5ISpCvK2BT/j3p46ImTYmjTQJKXnR0=
Subject key identifier:   11:56:AD:0C:A2:E2:0D:32:71:4B:63:B8:2A:66:12:6F:62:F2:C4:0A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F51A68F8BF5FD3B17FB780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        74.125.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:1a:68:f8:bf:5f:d3:b1:7f:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=32b96466-b42b-4d8d-a293-0cd2bc387634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:93:f0:f1:1d:dc:31:39:88:ba:92:8a:7e:
                    fe:a3:10:c2:13:22:00:54:ed:4e:14:4c:5c:80:23:
                    ff:ea:1e:78:3d:36:bc:fd:8f:1d:e9:ef:48:37:7f:
                    82:93:a0:14:dc:24:e5:9d:0b:b9:e3:3e:e6:c2:80:
                    65:18:bb:0a:b6:45:a1:7a:f5:6c:67:a1:95:13:9b:
                    ef:9b:3b:49:b5:15:f4:ec:b3:59:07:0e:47:4a:fc:
                    33:43:c8:f9:c4:48:6e:47:dc:6b:74:be:da:64:a8:
                    96:f0:50:13:5e:d4:97:fe:1d:d6:7e:7c:aa:05:36:
                    9e:77:e3:2f:5a:1e:54:5a:3c:02:f5:e4:70:61:e7:
                    3d:d9:26:f7:c3:8e:49:c0:38:5d:a5:ec:40:ca:ca:
                    c4:c4:ad:6c:9a:a7:0d:dd:ec:73:f6:d0:c8:6b:99:
                    3c:10:f8:6e:11:8b:6b:3e:ac:82:60:2d:75:4d:da:
                    2b:0b:49:39:0c:aa:13:10:1c:c9:af:b1:ab:c5:f5:
                    92:99:09:9a:c2:64:8c:66:68:1c:4a:53:33:0d:10:
                    a6:9e:c9:b0:a9:a2:9a:60:bd:4a:93:ca:45:11:6e:
                    24:b5:ca:9e:ce:41:61:41:a7:f8:39:60:19:33:ae:
                    24:3c:cb:ca:75:f9:6f:34:40:38:12:64:7a:35:b6:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:AD:0C:A2:E2:0D:32:71:4B:63:B8:2A:66:12:6F:62:F2:C4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:11:3c:c1:03:67:7b:59:3a:4e:63:c3:65:eb:9c:20:bf:15:
         69:18:ac:75:01:04:53:ad:fb:e7:c8:97:f9:88:2e:8d:f2:e1:
         16:90:89:97:26:68:ac:3a:e8:ab:c5:07:dc:a4:57:0c:4d:21:
         84:0c:dc:c5:43:37:60:d3:94:17:9d:40:f6:2e:f7:9c:fb:d4:
         9c:16:2b:ad:6c:13:3d:bd:7b:ba:7c:87:bb:c5:06:ca:7c:94:
         4a:68:b0:0a:d6:5f:18:40:bd:6c:27:21:0f:93:d1:b0:43:ac:
         61:a6:ad:98:48:1b:8e:69:41:eb:07:e3:f3:98:47:8d:9e:01:
         c8:fa:7d:0c:c3:83:15:71:1e:88:c1:d9:22:8b:90:6d:d1:9a:
         b8:73:76:7d:99:e2:9a:66:ed:24:01:4f:e9:3f:1d:d3:1b:ca:
         47:af:e8:36:95:b5:2a:d9:0c:08:7a:9b:11:71:37:9a:6e:3d:
         f5:ff:8d:8d:27:19:b3:3e:13:a2:c8:1b:ac:db:c0:7b:f1:6e:
         0e:02:87:a5:4c:3f:c2:3f:47:fa:72:c8:c4:07:ef:21:84:ac:
         02:9e:05:1f:5b:c5:5d:3a:7f:bd:a0:39:04:4c:c4:33:e0:12:
         fc:a3:9b:1d:9b:bc:4c:c8:18:21:83:81:7b:ad:e9:90:82:35:
         09:ee:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:20 2024 by rpki-client on console-fra.rpki-client.org