Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c9bca8a-656e-3f0a-b3e6-78d0bc2a1827.roa
File:                     0c9bca8a-656e-3f0a-b3e6-78d0bc2a1827.roa (raw, json)
Hash identifier:          7oTROL47rdsMQvNEgrb3Qa3xEbheiySJR7p1YcnaqQ0=
Subject key identifier:   2A:0C:97:8C:16:C1:4B:85:64:F7:F4:F1:10:DA:74:F9:8E:C7:82:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D0FDA263E5B7A6151200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c9bca8a-656e-3f0a-b3e6-78d0bc2a1827.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.227.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d0:fd:a2:63:e5:b7:a6:15:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=97a478c0-9b0b-4c09-bc8a-7c8fcc6a2a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:e6:d0:0a:e6:23:a5:6a:62:3a:a8:74:cc:
                    31:0b:f8:62:fd:9f:ae:2d:7c:92:14:77:41:ba:11:
                    e4:f7:90:a3:db:17:49:af:90:02:28:08:ae:2e:f4:
                    85:76:1f:e3:32:9c:cf:77:d0:bf:c3:e8:52:a0:03:
                    88:db:93:a1:5f:5e:c8:80:20:7f:bc:e6:a5:57:27:
                    8c:9f:9b:cd:04:a9:73:08:d0:05:a0:46:d0:8d:59:
                    78:1d:5a:ba:1b:49:d6:f0:51:12:fb:16:01:07:b6:
                    b8:ad:52:18:22:e2:ab:35:a3:2f:4b:7a:3f:46:82:
                    a4:3b:67:d5:d2:43:a2:b4:cb:7c:69:99:52:4a:2a:
                    fd:8b:a9:7e:74:78:02:35:7e:45:f5:64:90:c1:95:
                    2a:5a:09:2e:2f:14:c0:b5:a2:08:ac:cd:2d:bf:ba:
                    db:7b:f1:8f:eb:c2:81:81:1d:da:17:bc:6a:ca:d2:
                    61:23:e9:c6:df:29:32:bc:5e:a2:b5:21:51:87:09:
                    67:f6:38:db:68:08:da:e0:92:11:02:8b:f6:7b:b5:
                    e8:15:ba:13:f6:75:4a:b9:49:4b:27:4b:ee:73:c4:
                    3a:3a:cf:7b:db:48:61:2a:8f:bf:4e:2e:4b:c0:d9:
                    6b:48:00:a6:79:14:38:0a:81:36:df:bc:21:4d:82:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:97:8C:16:C1:4B:85:64:F7:F4:F1:10:DA:74:F9:8E:C7:82:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c9bca8a-656e-3f0a-b3e6-78d0bc2a1827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.227.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:44:0e:df:37:b3:a2:d5:41:ed:07:20:89:c5:4d:f3:f7:
         1e:9f:6e:4a:8c:00:7a:f3:17:ee:09:e7:b7:84:d9:dd:7e:9e:
         ff:d2:38:fd:b8:d5:71:48:aa:cb:50:61:61:c6:17:66:bf:63:
         67:34:07:c3:ef:db:c7:a3:54:31:27:5c:8d:e6:52:44:e8:c0:
         15:38:56:c3:83:f1:a4:32:ca:64:52:b9:2d:76:0a:6a:1b:49:
         47:39:7c:06:e6:24:29:64:db:32:55:fa:92:5c:a1:e8:11:00:
         89:8c:e6:2f:30:05:85:7d:62:f6:91:dd:dc:a2:d0:12:15:5a:
         fe:39:62:75:06:78:61:4c:8c:a2:c1:7f:8f:1d:cb:62:21:03:
         1c:59:15:e7:25:93:83:ab:5b:24:82:92:35:e3:09:18:d7:b2:
         26:64:e1:51:e3:c2:04:d8:b0:e4:d0:8e:a3:24:b4:1a:1a:19:
         40:c0:58:04:42:6f:fb:e0:61:f5:be:d6:c9:58:3b:67:fb:93:
         2e:d4:dd:c7:da:8c:a6:b6:9c:ef:d9:47:dc:96:15:f7:e4:d5:
         ff:ea:ae:a8:78:52:3e:31:50:a9:4b:81:69:87:7e:82:67:df:
         69:31:79:bd:81:31:80:c2:74:2d:72:31:66:8e:19:fc:ac:5d:
         cd:44:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:25 2024 by rpki-client on console-fra.rpki-client.org