Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5fe7284-8fb6-3181-bd34-640d38b471d5.roa
File:                     f5fe7284-8fb6-3181-bd34-640d38b471d5.roa (raw, json)
Hash identifier:          BvQHNHRTrEAhfWz1taQE/F2pi1qiR3685QQmW77AxCE=
Subject key identifier:   D5:90:30:3E:0A:D9:4C:46:BF:CB:3E:15:CE:8F:E2:43:6F:E1:3D:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847521619F0B1A6A743E4ACFB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5fe7284-8fb6-3181-bd34-640d38b471d5.roa
Signing time:             Tue 24 Sep 2024 13:00:40 +0000
ROA not before:           Tue 24 Sep 2024 13:00:40 +0000
ROA not after:            Mon 23 Dec 2024 14:00:40 +0000
asID:                     7470
IP address blocks:        173.222.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:16:19:f0:b1:a6:a7:43:e4:ac:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:40 2024 GMT
            Not After : Dec 23 14:00:40 2024 GMT
        Subject: CN=050e4e26-2cb8-4f16-b8bc-cec26a559e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:df:c3:a1:f1:6c:ec:87:65:fb:21:f3:f4:
                    33:89:31:84:cd:32:a9:8a:ec:33:a0:7d:18:bb:09:
                    33:9a:d7:64:4f:d4:72:c8:16:67:a9:4a:f8:32:eb:
                    d2:f0:12:66:93:92:14:df:dc:09:f6:8e:fc:d9:29:
                    35:26:b4:b3:7f:94:b5:44:22:1b:a7:cd:33:97:b4:
                    fd:79:e0:a1:1d:a3:85:10:01:63:8f:f0:df:79:9c:
                    ae:92:13:dd:77:74:cb:29:93:11:da:b9:9d:95:b2:
                    74:5c:e9:76:08:f8:63:31:dd:32:35:fb:71:26:15:
                    11:23:c9:dd:61:dc:5c:d4:97:5d:f9:a6:4e:60:d1:
                    f6:7b:ee:ba:6b:b3:cf:db:66:66:41:ea:18:61:7e:
                    ae:f4:e0:79:1f:59:3a:6e:1a:33:84:da:90:0a:a2:
                    a9:cf:52:fc:42:93:30:33:e2:4c:8d:f6:ee:29:28:
                    c0:b8:78:63:78:ad:7d:9d:d5:37:26:76:c4:40:a8:
                    c9:1f:b8:dd:e5:4e:01:fe:ae:e8:34:aa:14:3d:f3:
                    b9:5d:08:cd:b8:63:b1:f3:7d:c5:6d:de:4d:4e:84:
                    1f:81:89:b7:12:38:fa:01:19:64:a7:79:ad:34:3d:
                    c2:b7:d9:38:85:94:88:a0:13:6f:bc:43:86:47:59:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:30:3E:0A:D9:4C:46:BF:CB:3E:15:CE:8F:E2:43:6F:E1:3D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5fe7284-8fb6-3181-bd34-640d38b471d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:c3:90:71:5a:12:ce:ef:aa:b4:ef:75:63:5b:dc:91:4b:
         d5:8c:51:4b:82:a8:d3:14:64:6d:20:cb:7c:5f:d3:54:a4:db:
         c0:01:8e:4b:0b:1a:39:92:e9:c5:0e:eb:6e:cf:8a:39:2c:63:
         1a:9d:e3:45:21:7d:10:9e:9f:28:94:b6:16:89:e7:21:12:ed:
         21:5e:5b:93:ae:60:04:20:35:73:f5:f6:34:98:22:c1:ed:60:
         7b:02:ce:ed:11:d2:9b:aa:08:da:c1:98:bd:74:09:c3:75:20:
         5a:1a:05:eb:d1:26:6a:6e:d5:af:7b:f3:8f:68:31:5f:73:6c:
         f9:b4:47:80:b7:27:75:0e:4a:52:03:56:7d:2e:f2:e8:54:7b:
         0b:9a:f5:6a:fb:47:8f:57:87:1b:3a:4f:c6:67:fa:3f:06:b4:
         79:03:2f:96:47:bf:fc:1c:d3:3e:cb:f5:39:92:0e:17:f6:1c:
         fd:1f:99:95:6e:51:bf:3f:e4:71:0d:bf:7b:9f:ba:38:5e:2e:
         80:36:f5:36:59:4c:c8:fa:93:5f:b1:e9:9a:c8:b1:5f:f0:27:
         ef:d5:e9:34:b8:f8:bf:5b:da:84:d9:33:ea:c9:0f:52:06:0f:
         d4:b5:e7:20:47:33:bf:fd:0b:6d:af:04:46:56:25:00:e4:8a:
         e7:36:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:03:36 2024 by rpki-client on console-fra.rpki-client.org