Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa
File:                     c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa (raw, json)
Hash identifier:          0jvAdg3iDFBVACdqTfxKpg4u7SkomllBhp0yDsO6lKQ=
Subject key identifier:   99:BE:65:9F:8D:24:9E:50:E3:E0:17:43:B1:C6:F1:06:C2:EF:BE:56
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844F9FAB453F2B7227733A3C300
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        74.112.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:b4:53:f2:b7:22:77:33:a3:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=01088b14-4820-4a7a-b54b-6b2a6266d6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:e0:98:cc:92:a7:65:0a:b9:a8:ab:b5:3a:
                    64:be:a7:68:87:82:e1:c4:5e:9b:7b:62:ad:2c:8d:
                    cb:e8:82:cb:16:5c:d1:f9:c8:59:1f:05:eb:c1:ea:
                    8e:a7:d7:ef:b8:9e:17:f7:73:e5:5f:49:60:16:9c:
                    e0:7e:aa:93:8d:af:66:af:b1:1a:b9:54:79:3f:4b:
                    c5:a4:bf:29:18:2b:91:0c:f5:bc:12:13:8d:e6:05:
                    cd:14:d3:4e:d2:84:eb:1b:52:6e:2c:f8:4b:4d:87:
                    92:e1:89:f5:e9:61:76:a3:34:21:be:ca:03:ea:db:
                    34:d9:b6:09:02:9c:40:02:0e:89:48:ba:29:e0:75:
                    9c:9c:43:3c:76:77:32:92:e4:83:18:5c:96:18:bf:
                    d6:0a:ac:15:5e:44:03:3e:9d:e4:27:98:a3:c7:9e:
                    55:e3:b2:7f:9d:9d:c0:b7:a9:db:f7:ac:5c:d8:24:
                    c9:4c:a7:91:77:96:24:54:35:44:4a:fb:92:91:35:
                    ab:cf:5e:45:4f:67:8d:11:a7:8e:b8:4e:f6:c8:e8:
                    34:e1:ed:cb:0f:ce:a3:6f:28:45:36:80:a8:74:ea:
                    00:61:3e:58:f8:35:a2:2d:b0:06:b7:c6:91:b4:7c:
                    3f:4e:7e:a9:2f:75:da:73:cd:f8:4f:ed:30:01:55:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:65:9F:8D:24:9E:50:E3:E0:17:43:B1:C6:F1:06:C2:EF:BE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:54:a3:5e:e7:14:77:52:f2:4c:32:c5:90:ee:c2:28:0d:0c:
         14:64:42:69:97:ed:ec:22:37:bb:2d:e1:a5:0f:c0:43:67:0f:
         88:f1:50:37:24:76:36:20:81:b5:bd:56:54:95:72:db:3c:9c:
         82:be:56:ca:e2:6b:3a:78:47:d7:5a:58:8d:cb:e2:42:87:8b:
         d4:f1:5c:35:63:c8:25:16:38:11:db:5c:c7:6c:e6:0c:14:b0:
         99:03:57:89:18:1b:fe:a0:15:e1:5b:98:4f:0f:a4:54:cd:8f:
         4d:3e:85:6c:5f:7f:08:7b:49:12:87:7d:8d:18:2b:f8:83:76:
         e7:9b:ae:34:33:30:0f:f8:7d:9b:af:77:d9:1c:77:74:39:63:
         0d:1d:76:0b:fe:9c:ed:df:ac:1e:25:30:56:d8:88:2f:be:ae:
         9a:40:55:c6:cc:3a:3e:24:81:98:3d:0b:34:3f:87:c5:37:7a:
         ab:36:11:9c:96:b4:40:7f:17:a7:1b:49:b3:03:24:0d:2d:79:
         d2:c4:49:5c:fd:51:ef:2e:4c:ac:e8:87:fc:a1:60:fe:d7:c9:
         39:05:6a:81:de:47:9f:2f:8c:62:6a:10:38:65:cd:db:6a:42:
         cf:b4:25:f7:25:c8:0f:e2:9d:32:58:31:95:49:c9:fd:ea:c1:
         01:44:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:56:02 2024 by rpki-client on console-fra.rpki-client.org