Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/550f0249-c9c0-33e5-862f-f3578ae9ad65.roa
File:                     550f0249-c9c0-33e5-862f-f3578ae9ad65.roa (raw, json)
Hash identifier:          nDo/dzx6pHoBhd0yH/Y4PMkkGYiaLT2lFlvTmm2zXdg=
Subject key identifier:   8A:E2:5A:D1:D6:2D:5A:65:00:C1:E0:64:3E:63:76:E3:91:6A:B4:86
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844F9FAB3819EDE7DA766AA9D00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/550f0249-c9c0-33e5-862f-f3578ae9ad65.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        74.112.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:b3:81:9e:de:7d:a7:66:aa:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=22753e0d-cf12-4766-bb25-d1f3e202000f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:6d:63:29:df:04:61:7d:bb:40:63:d0:d5:
                    7d:0c:b8:b3:2d:e1:a8:49:29:72:40:4d:73:71:de:
                    4b:d1:e9:c5:84:5c:4c:6d:0b:fd:4a:50:7a:ec:48:
                    4f:34:8c:88:68:6a:20:f8:fa:0f:22:a6:85:bb:71:
                    70:45:9c:80:35:d5:2d:f8:ec:63:40:d0:28:e9:fa:
                    36:3d:91:ef:25:7e:81:ab:68:f9:a4:44:47:f6:83:
                    07:f0:32:18:ee:f9:af:c2:43:82:1c:2d:4e:1d:e9:
                    eb:7c:12:d3:15:27:9e:3f:72:f6:4b:b1:8e:95:d9:
                    3c:c8:24:ef:ce:16:08:02:0f:30:c6:31:ec:e9:3c:
                    86:3d:31:69:3c:0f:65:51:f5:7c:0a:6b:79:87:4d:
                    05:1d:af:cc:67:6d:b1:4d:c0:d2:44:73:b6:1d:32:
                    3b:39:a5:c2:68:fa:11:aa:bd:6b:46:4e:32:22:a2:
                    c5:13:97:52:08:7d:e3:0a:9b:db:61:a8:14:f2:19:
                    54:2c:fd:03:25:41:9d:ec:54:af:3d:fc:e0:fb:af:
                    51:4e:43:4b:61:8e:6b:46:c3:dc:6a:7c:cf:ad:9d:
                    c8:5a:ab:34:e8:b3:d4:e9:9e:78:9e:4c:f8:44:8b:
                    88:2a:f1:a9:ea:b4:51:e5:f5:17:06:59:cd:41:36:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:5A:D1:D6:2D:5A:65:00:C1:E0:64:3E:63:76:E3:91:6A:B4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/550f0249-c9c0-33e5-862f-f3578ae9ad65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:51:e5:e7:e7:af:aa:37:37:f0:89:74:60:23:cb:83:20:
         a8:4c:26:f6:72:f2:e8:9c:54:64:54:c6:1b:56:96:b3:b0:7c:
         c1:4f:7d:2b:bc:4a:8c:91:2f:c5:71:3a:cc:5a:c6:45:3f:d2:
         4b:08:57:af:1c:88:f8:32:73:7d:a7:ba:6d:0b:bf:5e:41:86:
         86:25:f2:91:73:30:64:1f:f5:9f:79:f8:85:8d:e2:02:02:b7:
         a8:cd:1b:cc:f6:dc:53:fd:be:2f:a9:3f:61:72:90:60:4e:5f:
         af:06:67:31:65:d2:f4:b6:aa:79:40:ea:b8:19:e0:49:f1:9a:
         b3:93:6e:3b:d0:91:6e:35:bb:ce:fd:24:75:76:10:40:c8:ff:
         85:de:8a:67:75:8f:22:39:f5:11:65:d5:3e:50:2e:c8:e3:69:
         12:fc:53:13:09:0a:82:0a:43:2c:51:8a:35:cb:42:68:31:62:
         0f:e0:3b:21:d6:b2:d0:bd:4c:7c:71:97:0d:96:68:42:e7:64:
         72:3a:c4:da:02:48:69:4b:5d:7d:18:d0:80:1c:8a:e1:8a:42:
         14:d2:73:8f:82:af:cf:95:d6:ec:39:c5:ff:31:5a:f4:06:11:
         c6:7c:63:f1:17:13:28:9a:e8:42:ac:bc:f3:5b:31:96:e9:47:
         b5:dd:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:10 2024 by rpki-client on console-fra.rpki-client.org