Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/26f2c188-3a43-37c3-9d59-27b0b5ebe5c3.roa
File:                     26f2c188-3a43-37c3-9d59-27b0b5ebe5c3.roa (raw, json)
Hash identifier:          eUz3KIuBmOM1qjzguwgGCzqMzDcJjlmFMxSwnD7KI48=
Subject key identifier:   69:AD:67:C2:A6:A1:C5:9C:D9:F0:CC:53:16:99:A3:49:E5:AF:EE:58
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F432858479AABF13E91AC2C3A977DDC40
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/26f2c188-3a43-37c3-9d59-27b0b5ebe5c3.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     7992
IP address blocks:        173.238.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f1:3e:91:ac:2c:3a:97:7d:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=6fb5602f-4652-4ea0-a49a-d654d0d54035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:5d:65:85:0f:23:46:44:fa:40:36:4c:61:
                    fb:6c:e3:f6:72:d5:0f:f9:12:9d:98:f6:bc:f1:55:
                    fb:3d:1f:4c:f4:e7:9e:08:b5:1f:19:85:4f:34:51:
                    93:f1:bb:cf:06:38:ab:ba:63:e3:22:92:3c:88:2d:
                    27:87:71:60:4f:02:03:e7:28:03:31:c3:8f:7c:ea:
                    82:95:76:7d:07:38:ae:cb:f9:b5:c8:c7:20:0f:8d:
                    28:ed:65:80:95:42:89:a1:2e:81:0f:f3:fd:49:cd:
                    2c:65:a3:e4:bf:dd:c0:9c:a3:05:a6:23:73:5a:15:
                    49:3f:db:7e:08:ed:32:12:a3:9e:0f:67:23:c3:96:
                    0f:7b:13:d2:1c:a7:e4:c1:50:39:70:e1:6d:2c:6a:
                    96:d4:5e:98:2c:73:be:90:45:2e:a8:90:81:45:ce:
                    cd:b5:4d:b5:43:c2:40:c0:d9:a8:fc:4a:c2:96:f5:
                    a8:32:ba:6b:a5:4c:fd:0d:0d:38:41:15:d8:a8:1d:
                    41:a7:af:06:22:3b:68:d4:7f:32:8b:ec:8e:d2:19:
                    b5:f9:d5:ba:00:19:0c:da:8e:a9:2e:9b:d2:6f:06:
                    9b:e4:f0:1e:0b:e2:95:84:52:fd:e4:6a:a1:5d:ac:
                    26:47:bd:9f:03:2b:a3:7b:b8:5b:d7:01:d8:cf:5b:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AD:67:C2:A6:A1:C5:9C:D9:F0:CC:53:16:99:A3:49:E5:AF:EE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/26f2c188-3a43-37c3-9d59-27b0b5ebe5c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:de:86:f7:f2:e0:18:6e:03:c0:78:af:d5:38:9b:ea:cf:76:
         94:16:e6:37:69:77:40:d6:65:79:2a:28:e9:8c:5d:d2:06:d6:
         d8:94:c1:65:4d:67:87:36:af:a7:82:6e:d2:00:40:35:87:c8:
         ec:49:f0:12:42:eb:ba:85:a7:10:57:fa:f9:88:0a:20:52:93:
         cd:98:e0:1c:63:8e:ca:64:15:51:af:e2:0a:be:17:ff:4f:a9:
         fa:e7:1d:c4:b5:b5:fe:fc:29:a0:aa:b3:ea:dd:4c:f3:b4:7a:
         70:d0:04:19:66:bf:86:69:94:63:4f:50:d1:a6:ad:10:c9:b3:
         d8:4a:7d:68:00:25:44:6e:e3:fa:48:b4:29:0d:01:b3:36:67:
         a9:3e:78:6b:91:ff:16:71:6d:8a:ed:68:25:b9:7e:e5:55:d9:
         50:24:d6:db:4c:a6:52:c2:21:f6:8c:5a:ea:d5:d6:7d:26:0a:
         64:1b:24:24:11:10:26:f8:77:36:83:30:14:b6:6e:a1:98:9f:
         e9:fd:77:d7:cf:9e:39:29:f8:09:e7:34:0f:cc:90:e2:58:a7:
         38:66:85:d7:22:1c:c9:a1:c9:aa:19:27:bc:b9:67:1b:70:12:
         26:60:c4:0f:74:ad:b8:a2:4e:88:98:ca:87:2f:6b:eb:c6:4f:
         91:1d:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org