Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa
File:                     30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa (raw, json)
Hash identifier:          pDjs6ZriNBXFNWDrHY4LYhAbraQUXyJt5p3c6WjWuIc=
Subject key identifier:   FB:6E:AB:D2:57:E3:BB:30:1A:5B:BA:65:32:33:48:28:4A:34:42:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DDF7299BD590E17FA5C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        74.107.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:df:72:99:bd:59:0e:17:fa:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=642ab763-dfb1-4590-8e58-a0c461b14172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:cd:80:4f:0c:5c:28:3b:5c:ac:66:f9:48:
                    81:0c:c0:e9:f0:80:26:f8:92:83:97:02:ff:9d:c5:
                    1d:40:7a:55:11:7c:b1:c6:a4:7d:43:57:ad:24:d9:
                    64:f2:3d:62:0d:89:24:19:9f:72:12:14:cb:91:9c:
                    ed:9f:81:f8:54:ca:1c:45:be:fb:c5:6a:62:c2:ef:
                    f8:3d:85:20:3d:80:6b:e2:31:fb:34:56:a2:8d:88:
                    ce:9e:32:84:8a:4a:eb:9e:f2:87:f5:30:c3:59:53:
                    46:c3:10:5e:87:fe:c0:06:e5:12:95:9d:81:b6:38:
                    11:44:7b:35:22:c6:88:cb:7d:87:4d:74:89:49:c4:
                    95:a2:9b:a3:f8:f8:60:9a:bb:b7:11:50:df:5b:12:
                    97:03:17:7e:32:cc:03:16:0e:00:71:76:79:d3:ea:
                    e8:90:58:d3:c7:0f:ea:e9:98:1c:ed:31:47:98:b2:
                    a0:87:24:7e:b2:68:b6:00:12:72:34:d5:57:44:7f:
                    0f:5b:4a:fc:7b:78:0b:9b:aa:bd:33:90:55:ac:b0:
                    b4:1b:a2:66:c7:30:65:86:c8:c6:1a:5d:9a:a7:41:
                    9b:e2:cd:ee:00:35:52:47:c5:00:9f:c8:29:0d:4b:
                    2a:fb:a9:f5:1e:d5:a3:56:67:92:92:f1:f6:cf:4a:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:AB:D2:57:E3:BB:30:1A:5B:BA:65:32:33:48:28:4A:34:42:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30289bc1-a7cf-3b0e-a29e-3839462dc7c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.107.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:64:7b:b8:5c:60:4a:8b:35:6b:e6:d9:52:73:7a:5d:66:
         87:50:7b:9c:a1:a5:22:49:3b:fd:c7:14:51:af:5a:a4:9e:9e:
         73:72:f4:f1:7a:95:91:a1:55:1d:71:ec:8e:8d:6b:b8:fa:2a:
         d9:56:68:fd:bc:55:51:65:d6:2f:ae:4e:12:f8:f1:5e:24:df:
         41:c5:28:42:16:6b:20:76:2e:1f:25:dd:95:bd:de:dd:b9:d7:
         33:a8:67:75:21:43:ec:93:42:0d:24:65:c0:9a:4e:73:1d:f7:
         bb:49:50:8f:5f:5e:ac:b6:54:c3:e1:3c:25:14:f8:f1:fc:64:
         d0:37:c5:a9:4e:77:bf:3d:91:b6:e7:5a:3c:99:ff:f9:07:fb:
         3e:68:53:e8:5e:bd:cf:3c:ba:b7:95:e1:29:9d:cd:b7:9c:5a:
         e5:68:ca:b5:a8:63:36:c8:95:74:a8:5b:2e:9d:bb:d8:e5:67:
         e9:2a:08:0f:ef:46:0c:4f:a8:68:c0:08:45:36:a9:8c:aa:89:
         cf:7c:06:1a:8e:da:2c:f9:1c:b8:ae:58:2e:1f:c9:b8:1c:7f:
         1e:67:09:36:59:4e:2c:a9:38:df:8c:2a:ab:a0:70:53:83:43:
         5c:7d:2f:ef:09:e4:2e:fb:8e:e5:36:85:f4:e8:37:55:2e:5a:
         3a:23:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:20 2024 by rpki-client on console-fra.rpki-client.org