Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
File:                     7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa (raw, json)
Hash identifier:          U7cKyk4gQPKufr2ttAtXByLoKqnG5TCXstPWxI5vs+g=
Subject key identifier:   F3:46:C4:EF:AF:93:C5:81:E5:1E:A3:69:31:01:FE:CB:AF:1D:D8:FE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628ECA9DF56463B9BED49480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     395227
IP address blocks:        71.86.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:ca:9d:f5:64:63:b9:be:d4:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=951a0344-23b8-44ae-9f2b-9cbb67960370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:db:27:c7:95:32:54:2c:35:c5:45:a0:7d:
                    24:53:62:77:b6:7c:75:98:ca:a5:2f:38:cf:63:51:
                    74:82:e6:2d:a4:32:c1:5e:ce:ff:cf:14:2c:d1:70:
                    88:7e:96:af:f9:5d:59:b6:ef:73:9a:a5:0a:60:01:
                    0a:e1:67:14:cc:18:d8:b7:2b:49:79:7c:af:fb:4b:
                    26:94:25:01:9a:50:da:5b:a4:d4:d6:54:0d:0e:da:
                    7c:f9:ee:ac:91:85:17:2f:e3:e6:b3:a2:38:de:45:
                    fd:bf:8a:f2:32:c4:57:a4:99:69:8d:6d:d8:39:d8:
                    56:47:26:32:30:75:24:f8:66:12:c4:6c:41:4a:a2:
                    46:de:f6:3d:9a:2a:67:2f:dd:52:40:2e:1f:dd:f3:
                    7a:91:f1:70:f3:a4:4a:b7:fd:10:1a:f8:9b:ae:77:
                    b1:d9:3e:8a:c8:27:46:c9:2d:75:07:05:70:bc:d9:
                    9f:dd:13:65:56:96:12:12:eb:75:d1:32:e6:67:96:
                    db:b4:8d:61:08:d1:03:dd:7c:64:30:5a:3e:61:dd:
                    d4:b3:50:95:53:c9:a4:a4:60:23:71:3c:9b:61:83:
                    c3:4d:b4:15:f9:4b:25:99:70:26:76:6a:50:4f:02:
                    d0:fa:79:ee:a0:c0:b9:b5:e3:1f:bb:d7:32:0f:8e:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:46:C4:EF:AF:93:C5:81:E5:1E:A3:69:31:01:FE:CB:AF:1D:D8:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:91:03:7a:15:28:2b:49:3d:69:73:8d:43:64:1d:f1:c5:
         3f:4f:6c:d3:8a:67:77:46:4c:18:50:d3:09:ad:94:12:f4:75:
         70:1b:e4:12:4d:93:cc:48:73:56:74:10:67:33:a2:79:ed:35:
         f9:3e:46:1f:c8:cb:08:32:21:78:dd:8d:09:7a:f7:5b:07:3b:
         6a:fd:4d:3a:f1:46:ea:ab:76:a9:47:ee:88:7c:33:b3:e2:33:
         f3:8e:99:c0:bb:40:41:77:63:f8:08:77:e2:2c:1a:3a:fb:b7:
         d8:a1:a0:38:83:3e:b6:de:a7:f2:8a:79:05:42:8f:4b:56:c5:
         eb:85:ff:54:0a:33:c9:cd:86:c9:45:52:86:3d:06:b2:cd:28:
         19:15:d8:0a:e4:7c:c8:bf:c7:2b:67:1e:82:1c:63:1b:da:f3:
         55:06:13:f8:4e:67:24:6e:b3:6e:72:7f:7b:d1:64:14:cd:29:
         98:5d:2b:fa:5f:7f:50:56:e7:c1:ac:0a:18:dd:bb:df:40:66:
         02:09:e5:25:0f:52:03:26:07:c0:fc:f2:25:78:e2:33:3c:fb:
         a7:40:cb:e9:da:63:b3:02:96:3c:c2:d5:cf:06:6a:d5:db:82:
         9c:4a:98:0a:d8:30:5c:b9:50:3d:f9:a9:d4:31:b3:fc:95:84:
         b3:7b:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:17:44 2024 by rpki-client on console-ams.rpki-client.org