Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b7c57e4-6e56-3054-b95b-19d7498f4ee1.roa
File:                     1b7c57e4-6e56-3054-b95b-19d7498f4ee1.roa (raw, json)
Hash identifier:          67pqak5YAt43YKNqvTbghB7XGWGFsI+ZDIwl5BkwgRc=
Subject key identifier:   F0:2B:16:07:DE:BD:74:66:52:69:D3:93:DC:90:8C:5C:17:62:02:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858470120523B326A1209A3175760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b7c57e4-6e56-3054-b95b-19d7498f4ee1.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.218.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:52:3b:32:6a:12:09:a3:17:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=f38c0626-5f14-46f2-8dce-b45d486b26e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:35:64:f2:b6:38:1e:22:8a:19:0b:ec:71:f1:
                    1f:71:0d:66:2c:bb:87:dd:7c:4b:64:12:e2:4b:70:
                    54:27:5d:4f:d2:74:f6:d9:43:bf:3a:a5:ac:2b:f5:
                    f0:5c:4f:e5:18:e6:94:1e:f2:5e:f7:05:c5:fe:91:
                    76:8d:d1:bb:16:2b:1e:4c:02:25:6b:92:46:7c:2b:
                    06:0d:35:e6:8a:f2:1c:6a:8d:44:31:e5:c7:ff:a4:
                    65:b0:d4:67:e2:be:8b:25:db:a3:78:a4:16:3d:4d:
                    aa:67:d6:1c:3c:5c:4c:85:db:d4:95:2e:8f:41:a2:
                    83:8b:60:b8:c1:7d:25:7d:75:78:b7:f6:69:b4:56:
                    23:6d:c0:15:18:4f:a2:28:92:d1:40:00:a6:7f:cc:
                    fe:c7:b3:fb:3f:3f:b1:51:3b:b5:49:14:d7:13:cd:
                    85:95:0e:50:ae:c8:69:7a:8d:79:2e:f2:5f:b3:a9:
                    da:69:d3:c5:17:7a:2e:43:fa:e4:6e:66:ee:6a:63:
                    67:0c:01:15:b5:00:b8:ea:7f:99:de:52:28:4e:42:
                    26:26:03:31:3a:03:9e:f7:2f:73:1e:f3:43:5f:c0:
                    2a:fd:7a:39:39:46:3d:39:bb:7e:77:92:1f:ab:6a:
                    59:5b:0a:42:4f:0f:50:05:ed:14:b4:21:e6:13:26:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2B:16:07:DE:BD:74:66:52:69:D3:93:DC:90:8C:5C:17:62:02:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b7c57e4-6e56-3054-b95b-19d7498f4ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:48:50:be:af:81:ef:df:98:ae:64:6a:ed:d6:4b:a5:c8:
         8d:1b:d0:e2:7f:a6:93:9a:0b:57:8d:bf:9d:17:c5:e7:34:6d:
         c9:4a:13:b4:b8:8b:24:7b:16:ae:2a:12:32:dc:94:9f:92:c5:
         55:ea:95:16:df:35:0f:bf:4d:8b:87:35:72:55:d4:30:25:ed:
         23:d0:3c:c5:5a:87:05:1a:ad:e0:1a:31:c9:d2:12:6a:5b:51:
         76:0e:8f:b6:d7:ce:dc:12:6e:a3:f5:bc:15:c5:16:93:9b:52:
         9d:4b:c1:ee:19:a1:90:9f:d4:a6:4d:13:a8:9a:b7:f1:b4:d2:
         3d:7a:cf:17:e5:cd:b8:9c:fe:be:90:1d:c7:a1:d7:04:b5:3e:
         e6:1e:c8:32:f4:d3:6b:2a:21:b7:9c:9c:d4:71:9a:7f:78:5d:
         e2:97:6b:03:2a:0d:ed:72:a3:ac:cb:f5:11:98:ce:1c:6f:95:
         0a:6c:dc:a9:c1:f9:33:c4:f9:57:6e:ff:80:33:65:2b:f7:6a:
         6c:9d:81:a2:11:e2:84:2a:84:70:ed:5e:d2:f5:d8:be:0f:e5:
         a1:80:98:b1:2c:c7:ad:d0:d6:61:f6:88:1a:3a:32:a7:df:0b:
         85:db:6c:af:0e:f5:44:b5:1e:3d:a1:17:9e:a0:2c:15:07:88:
         26:49:7e:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBIFI7MmoSCaMXV2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjM4YzA2MjYtNWYxNC00NmYyLThkY2UtYjQ1ZDQ4NmIyNmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zVk8rY4HiKKGQvscfEfcQ1mLLuH3XxLZBLi
S3BUJ11P0nT22UO/OqWsK/XwXE/lGOaUHvJe9wXF/pF2jdG7FiseTAIla5JGfCsG
DTXmivIcao1EMeXH/6RlsNRn4r6LJdujeKQWPU2qZ9YcPFxMhdvUlS6PQaKDi2C4
wX0lfXV4t/ZptFYjbcAVGE+iKJLRQACmf8z+x7P7Pz+xUTu1SRTXE82FlQ5Qrshp
eo15LvJfs6naadPFF3ouQ/rkbmbuamNnDAEVtQC46n+Z3lIoTkImJgMxOgOe9y9z
HvNDX8Aq/Xo5OUY9Obt+d5Ifq2pZWwpCTw9QBe0UtCHmEyZk0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPArFgfevXRmUmnTk9yQjFwXYgJ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWI3YzU3ZTQtNmU1Ni0z
MDU0LWI5NWItMTlkNzQ5OGY0ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrtqYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKKSFC+r4Hv35iuZGrt1kulyI0b0OJ/ppOaC1eNv50Xxec0bclKE7S4
iyR7Fq4qEjLclJ+SxVXqlRbfNQ+/TYuHNXJV1DAl7SPQPMVahwUareAaMcnSEmpb
UXYOj7bXztwSbqP1vBXFFpObUp1Lwe4ZoZCf1KZNE6iat/G00j16zxflzbic/r6Q
Hceh1wS1PuYeyDL002sqIbecnNRxmn94XeKXawMqDe1yo6zL9RGYzhxvlQps3KnB
+TPE+Vdu/4AzZSv3amydgaIR4oQqhHDtXtL12L4P5aGAmLEsx63Q1mH2iBo6Mqff
C4XbbK8O9US1Hj2hF56gLBUHiCZJfvI=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:29 2024 by rpki-client on console-fra.rpki-client.org