Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/cd0ab7eb-2876-394e-8e27-fd7a17611d42.roa
File:                     cd0ab7eb-2876-394e-8e27-fd7a17611d42.roa (raw, json)
Hash identifier:          ustKeiAJB58j6iOlhkkxhM/eoTYRq1Nn1K3nN8SiiZ0=
Subject key identifier:   DD:B6:4E:46:FB:1C:7D:4D:F1:56:99:45:E4:62:3E:B5:EF:6E:3C:DC
Certificate issuer:       /CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
Certificate serial:       010D0C9F432858480EA50672B228D964B88744E0
Authority key identifier: 4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/cd0ab7eb-2876-394e-8e27-fd7a17611d42.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        74.112.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:06:72:b2:28:d9:64:b8:87:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=b28f8488-f1a1-4ef4-ad05-a623098ae6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:d7:dc:ed:e5:e9:16:ee:b9:bd:70:e2:58:
                    4e:7d:e4:30:10:32:10:03:72:c0:6a:a2:ad:d9:3c:
                    86:c8:9a:4e:37:61:ed:57:5b:94:ad:66:38:68:2d:
                    69:f9:a3:68:d6:a9:71:86:5d:e7:bf:97:88:10:8c:
                    6d:ca:4d:6b:6a:84:31:6b:f7:40:3b:35:d6:a2:67:
                    bb:bf:61:fd:d5:2f:76:70:dc:ba:86:b6:55:7b:ec:
                    56:1b:bc:d9:eb:15:35:91:16:6b:33:90:bc:53:f9:
                    81:7d:db:9c:a4:1b:45:94:f5:98:5c:a6:5b:13:cd:
                    6a:4b:f3:c0:7f:61:59:70:b2:ad:b9:d1:40:56:b6:
                    ac:8d:a5:29:bb:91:0e:02:20:cb:85:44:f1:a5:91:
                    ff:6c:62:ad:01:8c:59:35:c0:f3:ae:36:bf:e0:48:
                    42:78:8a:f5:51:f0:11:5b:50:8b:79:83:74:cd:18:
                    d4:67:c4:c8:4e:e6:4a:cb:af:61:0c:2e:ef:1a:23:
                    64:27:8a:57:46:e5:91:12:45:98:da:e0:c5:d5:a8:
                    c3:66:91:19:9d:9b:d3:78:cb:c9:fb:0e:71:20:2b:
                    ad:83:98:3e:63:db:87:a5:35:4b:97:c7:7f:b2:01:
                    0c:f1:7f:8e:ca:ac:df:29:09:ea:64:48:40:07:26:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B6:4E:46:FB:1C:7D:4D:F1:56:99:45:E4:62:3E:B5:EF:6E:3C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/cd0ab7eb-2876-394e-8e27-fd7a17611d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:a1:b1:f6:ce:da:fa:77:a3:99:a3:18:74:5a:5e:3f:d0:
         f7:5e:77:0a:6c:e7:5a:18:ef:82:98:a2:c3:c5:d0:38:a5:bb:
         94:ae:3b:83:a1:c1:15:b7:18:5f:87:47:6f:f8:9a:6c:bb:24:
         62:62:40:a9:80:f2:ac:09:a9:53:d0:21:ab:52:94:46:5b:09:
         84:e6:84:95:eb:ab:4d:0e:69:e4:d0:a1:f2:1c:dc:1b:50:ec:
         1b:5f:fa:e6:cd:1b:7b:67:2a:66:22:bd:5e:d8:bd:47:6b:48:
         10:71:70:e6:75:4e:e0:a7:87:42:4b:2a:15:33:a4:cd:d0:e2:
         39:5e:34:db:ea:5e:35:d8:4b:9a:fd:fc:f7:1c:98:84:b9:ef:
         6f:0f:e5:40:9f:98:c3:4c:d0:df:91:84:e2:3a:ef:42:b7:a4:
         f1:7a:4f:d0:d9:9f:7a:40:f6:29:5e:33:af:c6:db:bc:40:a7:
         30:a4:eb:32:f6:de:b1:a6:97:1d:32:1b:71:41:26:da:af:f5:
         1a:c0:bd:13:a4:2f:b4:88:f4:b5:b2:e5:0c:90:89:94:f1:72:
         85:17:e2:4f:e6:03:77:59:b3:64:76:4e:db:03:21:27:3d:1f:
         ca:75:1c:80:e9:2e:36:87:70:e3:88:50:c2:f0:88:78:51:57:
         d2:8d:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:28 2025 by rpki-client