Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/6c7cca51-8969-3175-b769-34fcbaf38ba7.roa
File:                     6c7cca51-8969-3175-b769-34fcbaf38ba7.roa (raw, json)
Hash identifier:          YqJfq2/6lGiM7ESv+Y2PbAiC/fBYSxlNk7Mz/kGqrD4=
Subject key identifier:   6D:3B:4B:8B:88:67:4B:C4:56:D4:C0:B6:9B:1C:22:AD:0C:D8:C8:F4
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844F9FAB8E3140A25FD0790F370
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/6c7cca51-8969-3175-b769-34fcbaf38ba7.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        74.112.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:b8:e3:14:0a:25:fd:07:90:f3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=4e31a2f1-8edf-415a-9105-369dab22d8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:27:bf:30:e0:09:34:f5:15:45:6f:f5:96:
                    0c:10:a2:a3:53:be:ac:81:0b:75:d6:ab:f0:b4:72:
                    7f:96:1e:92:1c:bb:ff:df:d2:5c:d0:c2:3a:9f:62:
                    cf:c5:a9:fb:e3:70:ec:d2:e7:e2:b5:a1:ec:5b:78:
                    a7:e5:5d:db:18:6c:f0:80:09:9e:4c:87:ab:06:24:
                    d4:8c:4d:5a:87:d9:eb:80:5c:84:1c:99:5a:d2:18:
                    b3:be:7f:15:8e:27:bb:87:39:73:0f:c9:6c:62:df:
                    ee:6e:8a:2c:19:fd:61:3d:1e:8d:e1:2e:d5:31:f9:
                    89:97:c8:12:bd:fc:e2:bb:60:13:28:5b:3d:9d:2e:
                    2e:da:19:87:dc:b6:4a:c5:a1:03:9f:33:13:e4:74:
                    f2:06:9d:09:da:11:d9:c0:2d:87:7a:8c:b7:92:68:
                    e9:35:ac:b6:87:21:39:c2:87:f8:93:ef:b0:4c:54:
                    9f:ee:af:c1:d9:42:6f:54:27:ab:5c:ac:05:42:f5:
                    29:a7:46:4d:01:51:6c:87:da:ff:5b:30:dc:d6:8e:
                    54:da:41:97:a0:63:65:5f:66:33:d5:7d:8f:23:3a:
                    1c:d8:43:9d:e2:cd:f5:0b:4e:f0:c2:d1:90:dd:1b:
                    3d:ac:90:3a:8c:35:8d:30:ad:5f:5d:d5:99:a1:66:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3B:4B:8B:88:67:4B:C4:56:D4:C0:B6:9B:1C:22:AD:0C:D8:C8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/6c7cca51-8969-3175-b769-34fcbaf38ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:79:d6:68:1c:79:f7:f5:ca:33:0e:b8:6f:a4:14:af:e4:dc:
         3a:e2:20:aa:7d:3c:1d:8c:8f:41:d1:89:80:93:2a:7c:d2:52:
         87:b3:36:c2:00:c3:24:72:12:d6:c5:e6:e0:cd:54:de:c5:2e:
         a4:db:a6:93:ce:af:6b:14:76:1f:3b:0f:eb:23:44:8f:cc:27:
         90:f9:7d:6e:35:aa:ad:63:e4:18:14:62:17:34:51:1c:5b:14:
         40:ef:de:8c:81:f7:b3:9a:6f:15:13:03:91:78:a1:53:47:07:
         8b:47:14:2d:24:af:23:a7:3c:79:e8:aa:d2:94:ae:c9:e4:d4:
         2e:55:15:b1:89:77:cd:df:5a:42:7a:a2:7b:20:32:f0:b5:d5:
         5f:b6:65:ed:28:42:a9:8c:50:ce:31:09:9b:4e:df:28:c9:b5:
         54:eb:e1:63:97:dc:52:7f:f0:46:dc:63:ce:6b:e4:a4:7e:5e:
         a4:07:de:6e:34:d8:95:c2:94:a2:97:81:62:06:0d:cd:40:b2:
         a6:31:c0:41:45:25:0c:dc:a3:9b:f5:b9:a4:a4:c9:44:9a:bf:
         0b:5e:bb:cc:d3:3f:a8:c8:52:91:7d:52:c1:93:35:7d:9f:c3:
         42:d3:9c:5a:f2:c8:69:1a:ec:92:4d:a4:6f:e9:be:be:07:08:
         c4:d1:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:58 2024 by rpki-client on console-fra.rpki-client.org