Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c228e069-a646-319e-84ad-8a2e4074432f.roa
File:                     c228e069-a646-319e-84ad-8a2e4074432f.roa (raw, json)
Hash identifier:          OUSyiitGf/TohmMnYlKyh4DA7iKmuXBffEp7ULlZZxU=
Subject key identifier:   53:2A:E0:D4:B1:68:3D:F9:6E:18:9A:09:C7:AA:32:DB:7D:92:DC:CD
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844F9FAB8C774C899DEA2A314C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c228e069-a646-319e-84ad-8a2e4074432f.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        74.112.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:b8:c7:74:c8:99:de:a2:a3:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=f5ed62d4-b42c-4d76-88ad-a67db9389325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:80:12:1e:5b:39:dd:f6:19:1a:09:63:44:
                    94:d5:80:cc:f4:d2:99:c2:34:f4:51:70:4f:5d:5b:
                    62:3b:f0:3e:b8:cb:1a:39:f5:8b:6a:98:09:c2:79:
                    d8:6f:b0:d4:a6:a5:de:4f:11:77:61:2c:21:b1:d9:
                    90:53:66:65:f7:6d:93:ec:39:a8:94:5f:16:ad:1e:
                    6f:df:98:a8:2d:e6:e5:71:d6:c1:9d:8c:74:84:0f:
                    c8:bf:2f:59:04:59:13:90:40:af:6e:81:5f:3d:7a:
                    d7:9c:63:37:0b:22:ef:11:25:e7:4d:98:f1:df:92:
                    53:52:fa:e0:73:a9:7d:71:ed:0b:b0:09:15:0b:86:
                    d1:b9:01:f8:84:5b:15:95:eb:c6:5c:d3:c4:ea:d6:
                    ca:7f:3c:73:80:72:93:56:a9:73:79:5f:6d:49:9e:
                    bc:94:19:c1:9b:ca:af:af:56:2a:5c:82:80:a5:36:
                    93:89:0e:85:4e:9c:8c:ff:8b:f9:66:9c:70:ae:78:
                    32:60:8e:64:20:6e:d6:da:2e:91:90:94:66:5f:01:
                    ba:6b:46:01:6c:1b:aa:61:d1:73:a2:ff:d4:51:97:
                    c0:f7:52:2b:83:b0:79:96:cd:88:cf:83:75:49:9f:
                    c5:8e:53:5c:d0:bd:c3:2c:4e:f2:bf:aa:5f:73:25:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:E0:D4:B1:68:3D:F9:6E:18:9A:09:C7:AA:32:DB:7D:92:DC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c228e069-a646-319e-84ad-8a2e4074432f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:37:2e:c2:13:05:68:e2:a1:b5:28:e9:07:e1:4b:5c:33:04:
         fb:1a:26:a2:6c:22:02:30:ed:ec:7a:92:80:dc:b5:e2:4a:71:
         29:f2:4f:90:5f:cd:f2:b7:ae:54:c5:96:f2:0e:7b:ad:7c:78:
         b2:2d:86:05:de:fa:d1:5d:02:79:79:b6:44:79:5d:eb:fa:ff:
         a1:ee:c6:ef:89:86:23:3f:be:88:ec:37:aa:19:7f:31:4a:8a:
         9d:46:6f:31:10:4d:1e:fe:7d:d7:24:52:44:f9:f0:c2:1e:ed:
         b0:a3:92:1d:30:62:54:8f:11:83:87:99:6e:7e:ac:ca:c1:9e:
         73:e1:bb:cd:6f:3d:79:49:f7:7f:d4:67:89:69:b1:8c:b5:1e:
         14:ab:6a:94:c1:da:4a:59:1b:76:8b:70:fa:39:c2:ee:18:a0:
         35:34:84:1d:8f:1c:27:d1:9f:69:e1:2d:42:97:31:96:72:d4:
         16:a0:76:c4:6f:cf:2a:65:5e:0d:a1:0b:d7:32:43:77:96:d4:
         7f:60:54:c8:5c:89:9a:2d:41:90:77:a9:18:5c:8f:1b:e0:16:
         1b:41:e5:cf:cc:7a:6c:92:35:31:15:e0:55:e9:87:7f:be:a1:
         c6:24:ae:43:7e:e4:f2:21:a5:c6:03:5c:91:48:ff:b5:e7:46:
         0c:e0:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:38 2024 by rpki-client on console-ams.rpki-client.org