Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e665a96-f5b8-3c4d-82eb-819ef326a012.roa
File:                     5e665a96-f5b8-3c4d-82eb-819ef326a012.roa (raw, json)
Hash identifier:          Gg54u9pOZQ77MfuCa7QjY5aeqIszNHi74BpEKIny6PE=
Subject key identifier:   BC:D7:F0:23:05:12:15:D6:54:80:C4:CF:78:5A:0F:07:B9:EE:56:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE1C20B885028CD44B800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e665a96-f5b8-3c4d-82eb-819ef326a012.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        74.108.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e1:c2:0b:88:50:28:cd:44:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=39e9c8c7-41e8-4d67-b07e-cb181f74c525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:21:b5:01:2c:e7:73:39:c5:39:45:c3:be:
                    d1:e9:30:92:72:ed:23:fd:9d:f3:dc:2b:81:55:8b:
                    a1:d7:71:25:9d:3b:5e:1d:b6:ea:24:79:7f:49:75:
                    9b:b4:62:19:27:67:c0:ea:a5:7d:28:48:cc:43:ee:
                    5a:bd:c2:70:fa:a1:06:5e:43:2b:02:43:98:e7:03:
                    ef:14:07:da:d9:e7:2c:41:ba:d6:91:16:67:31:da:
                    17:9a:68:1f:a2:68:46:b1:db:6d:a0:7b:c4:71:c6:
                    6a:06:82:9e:a9:53:49:09:53:08:f4:3a:79:e7:65:
                    0c:40:a9:3c:53:99:39:e8:da:a3:c8:cb:81:27:57:
                    cc:ba:c4:b6:69:d1:71:b7:3d:cf:69:46:c9:b7:90:
                    bb:65:ca:98:e6:f0:d9:63:c4:cf:38:7f:69:e7:35:
                    8a:1b:04:13:e6:ed:33:06:4d:a8:2b:ec:2f:28:03:
                    74:04:7b:32:d1:5d:12:ad:5c:53:04:16:5f:b5:04:
                    ea:c5:98:08:91:46:fc:eb:e2:4a:0d:01:98:52:bc:
                    14:a9:23:5c:92:5e:48:cb:3a:45:5c:11:cc:04:52:
                    d3:52:97:19:9a:c7:b0:5f:7f:4d:81:2e:3e:17:ed:
                    ec:72:de:9f:61:aa:82:8a:f3:68:ff:4c:fd:c9:85:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:F0:23:05:12:15:D6:54:80:C4:CF:78:5A:0F:07:B9:EE:56:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e665a96-f5b8-3c4d-82eb-819ef326a012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.108.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:03:79:6a:ae:95:c9:03:c3:ca:e1:60:de:94:b9:92:c0:a2:
         4f:3d:53:5c:8d:68:5b:6b:f2:8e:51:dd:24:5c:11:b7:54:8f:
         94:42:c8:33:e4:86:0d:88:0e:2c:d0:65:53:32:9e:e0:f4:15:
         7b:e0:04:83:bc:4f:81:a9:39:78:15:2a:a7:4f:fb:5b:38:6c:
         a0:ca:69:35:34:cb:fd:b1:2a:c6:c4:41:7b:c4:c5:54:69:13:
         c1:ce:86:ac:0d:3f:21:82:f0:56:41:07:f9:7e:b5:97:45:8c:
         f1:f0:f1:45:8e:48:c2:bc:7c:cd:a0:60:6e:77:53:ee:e8:d6:
         13:28:e8:6a:22:d1:c3:31:6c:5e:0d:be:35:65:6c:c0:eb:88:
         0f:a3:b9:a5:10:9f:23:ba:0c:17:7c:07:3a:b7:5b:1c:12:32:
         9a:32:ea:72:df:d8:e5:2e:3a:1a:c7:a6:44:7c:27:d4:91:19:
         b3:9f:4e:99:63:87:6a:09:9d:85:a6:0c:a6:a9:64:9c:f5:4c:
         1f:30:7a:18:7e:15:93:58:27:f0:1d:a1:cf:27:f9:a7:ee:44:
         32:5a:11:d1:6d:0a:db:0f:3a:38:b8:81:22:ec:2b:b5:7f:19:
         4c:d0:79:62:6c:65:04:18:f6:75:0a:08:df:ed:02:ae:42:67:
         77:a9:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:23 2024 by rpki-client on console-fra.rpki-client.org