Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
File:                     6c278590-b168-3097-9744-916cdc3a0492.roa (raw, json)
Hash identifier:          pCWeFz7JTcfG1s4ZCSa7KyhIdkrP839LPKy2LstF3Mw=
Subject key identifier:   90:DD:F9:D7:BE:66:47:BE:73:FB:25:1B:E6:87:C6:F3:BF:EF:BA:07
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858478CB684DD7AAE8914B27E81E0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     4181
IP address blocks:        146.174.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:84:dd:7a:ae:89:14:b2:7e:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=3e095ec1-ee0f-469b-b909-5dcc7c3a0306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e1:a1:68:3f:23:3e:8d:5d:ba:80:37:ad:63:
                    11:94:ae:e7:23:f7:d5:a3:c5:5d:fc:cc:fa:cf:08:
                    db:84:90:2d:3a:26:a1:f3:a0:9e:a5:4e:4a:f6:ba:
                    d2:12:d6:4c:04:6d:d5:f1:3a:18:96:66:a6:b2:ed:
                    63:bc:43:72:83:08:9c:24:55:99:98:35:6f:94:d2:
                    17:fc:d8:17:a1:3d:91:7e:bf:16:23:90:63:bf:4d:
                    0b:eb:e2:23:39:33:02:51:78:79:0f:95:96:8b:52:
                    8a:74:57:b9:ec:23:3c:71:36:dd:4d:2f:95:51:a3:
                    ef:89:cf:97:0f:af:40:64:17:1e:20:c1:48:04:00:
                    6e:cf:d7:c7:d9:27:fe:12:98:b3:40:df:af:c4:ba:
                    53:04:9f:22:87:25:e2:0c:2f:2b:81:37:2c:14:e5:
                    29:16:99:95:fd:14:22:3d:90:5c:48:57:d7:2c:53:
                    db:5a:b1:59:29:33:7d:5c:3f:9e:42:f8:a5:87:e7:
                    2a:11:42:88:c7:ea:ab:4f:1c:f7:dc:28:05:e0:4b:
                    c7:16:13:97:2a:87:57:c8:3c:49:78:5b:eb:ee:c9:
                    ff:55:b6:51:29:b7:bf:9a:d5:aa:1e:43:f0:6b:d1:
                    c0:71:7b:6d:3e:5d:79:aa:65:32:e0:5f:14:b8:77:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DD:F9:D7:BE:66:47:BE:73:FB:25:1B:E6:87:C6:F3:BF:EF:BA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.174.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:c4:1a:5d:b1:44:36:00:d3:9f:9c:1a:0d:f4:cd:1d:eb:
         b1:4c:6b:a5:46:af:6a:f6:26:3b:23:7e:ce:59:6e:6b:5e:3c:
         56:df:84:53:34:7d:a0:72:f3:2b:ee:6e:f7:bd:a9:41:38:74:
         e7:3e:bf:6b:93:db:1e:d9:1f:0f:2d:db:d8:60:a3:bf:ab:83:
         46:b6:bc:22:14:c5:ba:e5:1b:1a:38:13:6e:14:d5:be:ee:e1:
         1f:21:41:42:73:7a:d1:f6:e5:52:e1:0d:b6:20:fc:a8:e2:bb:
         f0:62:26:e5:27:46:db:b6:76:fa:65:fd:7a:c0:43:e3:02:21:
         88:31:23:39:e3:ab:fa:ba:85:d0:51:57:22:8a:c7:42:be:29:
         61:36:45:38:2d:ca:7c:a5:6d:cf:f7:da:82:27:31:f0:60:b4:
         01:8d:b5:58:47:12:a6:41:e4:aa:99:01:e4:1d:d4:74:1c:5b:
         bc:ca:b1:1a:dd:63:ba:96:00:fe:b5:ff:ab:58:71:03:1a:67:
         05:52:fe:d5:18:da:a6:2f:7f:9b:c2:d5:23:32:6b:1e:6c:fc:
         a3:1e:c6:6d:12:5a:be:d7:7d:2c:1c:4d:fe:d5:de:7a:fe:9c:
         11:e6:48:87:cf:be:49:7f:fd:19:51:fa:4d:d4:5e:ee:56:35:
         cf:b9:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:40:01 2024 by rpki-client on console-fra.rpki-client.org