Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03667078-108e-3ea9-9a1f-8241a4a14d4a.roa
File:                     03667078-108e-3ea9-9a1f-8241a4a14d4a.roa (raw, json)
Hash identifier:          HuMVdbZgfIo8EOsK29i0g6xCPodtzbfa6F4SYAvgdKs=
Subject key identifier:   35:08:27:F7:80:89:4C:3C:E2:EC:FD:4C:83:B0:8C:DD:6D:9C:B4:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0D3C029772673997AA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03667078-108e-3ea9-9a1f-8241a4a14d4a.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.224.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:0d:3c:02:97:72:67:39:97:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=bbcca38f-6522-446a-9138-cafb8a937037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:fe:88:a2:b4:cb:87:74:68:d1:89:fc:4a:
                    3a:8e:68:88:50:3f:9b:a9:48:af:ea:32:8a:10:82:
                    f2:f7:80:e5:ba:e2:10:b0:16:67:03:b8:04:20:6a:
                    48:ec:6b:8e:90:de:e3:4c:fd:5f:be:30:ee:b6:59:
                    29:51:5c:f5:07:73:fe:14:b9:e8:bf:1b:ca:b5:30:
                    91:b9:9b:fa:ec:28:09:4e:22:bb:52:6a:ff:32:7a:
                    50:b4:1d:20:eb:32:0b:95:19:0b:97:32:1e:8a:36:
                    33:b1:bc:73:4e:28:99:cf:36:b3:9f:41:ac:6d:4a:
                    a1:9b:5e:53:ee:98:a3:32:f0:97:eb:c9:6d:02:47:
                    d5:82:ea:1d:ce:b8:cd:44:c6:58:3a:08:4d:41:c0:
                    b7:b9:ab:6d:c3:7b:d8:91:b0:db:39:d0:1e:ea:35:
                    2d:94:fd:03:20:0b:b4:4f:2f:91:17:6f:f4:b1:6e:
                    38:e3:07:14:3f:a7:78:2c:94:8f:d9:87:01:a9:ae:
                    cd:12:13:95:1e:35:52:e2:62:a3:28:3a:61:1f:e8:
                    2b:3f:62:a8:c8:8e:29:83:d6:d3:50:85:27:24:84:
                    1f:77:df:0c:4e:a9:47:6a:06:df:f6:5d:ad:dc:51:
                    a3:0f:d4:38:ac:65:77:2b:37:d3:69:44:97:cb:e7:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:27:F7:80:89:4C:3C:E2:EC:FD:4C:83:B0:8C:DD:6D:9C:B4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03667078-108e-3ea9-9a1f-8241a4a14d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9f:d4:2d:a5:e0:89:74:3c:d4:1f:d5:9a:ad:e1:73:5d:62:
         d2:68:e5:6c:f1:0f:39:6d:c5:5c:b4:32:eb:16:ef:73:e1:09:
         bc:f9:c6:3c:91:ee:69:93:b5:90:90:08:00:32:94:eb:20:2a:
         fc:e0:74:6a:a0:a5:63:2a:0b:8d:68:3c:e4:9e:86:fd:e4:9a:
         fd:88:fd:b0:12:60:95:1d:ca:b9:81:c5:72:91:3a:84:bf:96:
         20:a0:32:5a:83:66:72:ed:1e:1f:52:7a:5a:cc:e8:da:a3:63:
         e7:c0:47:22:ce:b5:76:25:6e:84:6d:34:52:db:96:7f:9d:f9:
         71:0b:53:b0:15:76:cd:2e:71:a3:30:6f:ad:52:5a:df:a2:6a:
         90:bf:e1:79:3e:fe:46:c4:31:d9:66:96:7f:ac:33:c1:a8:8b:
         ce:e6:f2:f7:d1:e8:77:8d:1b:c7:4b:35:84:74:68:4e:4b:ff:
         12:36:e3:03:85:c1:a8:a4:d6:b9:73:57:08:d6:2d:d0:c8:c5:
         60:53:79:f2:b9:03:52:63:83:e9:97:8a:eb:a3:8a:90:cc:28:
         4a:4c:8e:3e:1e:b2:eb:00:68:10:5f:a6:f6:00:5e:82:14:d3:
         31:d0:01:45:20:2a:af:8e:50:f1:cd:a3:45:b4:6d:94:d2:6b:
         4d:25:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:14 2024 by rpki-client on console-fra.rpki-client.org