Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa
File:                     220d0e56-fc3d-3262-b19e-0960e7257296.roa (raw, json)
Hash identifier:          fpc6ngL4ck6Z1wVlGnU4BvNTLemGKa2GkL0u7bdH9Eo=
Subject key identifier:   BD:E9:65:4E:4C:68:34:D9:00:63:45:B0:74:3C:A5:EC:DF:04:D3:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E20CCC157822603017C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.235.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e2:0c:cc:15:78:22:60:30:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=2dc89336-502f-4ac1-8fd5-51e05ccc892c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7d:3a:17:71:9f:f6:0f:b6:15:97:c6:0b:db:
                    5f:c1:77:c6:99:7b:2e:92:36:06:31:9c:56:8b:b3:
                    da:05:23:80:ac:1b:77:31:c5:f4:d6:ac:f8:b1:ed:
                    43:56:81:45:65:3a:f2:55:e6:b5:ea:67:1a:2c:4d:
                    78:6e:83:a6:13:d1:ba:f0:e3:8c:1b:a9:e3:03:b9:
                    27:56:b2:ab:f8:1b:c7:b5:c4:d8:40:c7:15:d1:a8:
                    b2:e9:01:ae:d9:26:4f:fd:07:59:42:cf:ab:2c:1b:
                    5d:67:a6:a3:99:9d:ab:2d:80:e1:23:40:b7:b5:4a:
                    41:df:1f:07:5f:3b:d5:44:33:4e:10:c9:db:76:c3:
                    75:a7:9a:e8:82:8a:69:47:4a:6d:8e:e4:a9:1c:1e:
                    f7:92:04:fc:44:53:38:b2:d7:7e:5d:4e:49:dd:bf:
                    f8:02:c1:16:db:80:eb:fa:63:ee:b7:ae:08:b2:eb:
                    b6:71:5f:ae:ab:f0:10:e6:21:08:dc:92:07:01:a9:
                    70:3d:5f:5b:ec:e5:3a:62:f7:e9:39:d3:aa:2d:76:
                    f7:e5:2f:7d:d0:91:ee:e6:ae:8c:b1:55:4e:b8:83:
                    71:10:44:58:21:e3:9c:d1:e5:3f:92:26:f9:35:a8:
                    e0:3a:18:53:27:d0:84:be:a1:30:7b:6d:d7:59:d1:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E9:65:4E:4C:68:34:D9:00:63:45:B0:74:3C:A5:EC:DF:04:D3:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:60:37:0a:95:ed:0f:3b:e8:bd:86:7f:b0:da:25:2f:e4:
         25:94:8a:97:61:7b:bc:da:e7:a2:2a:06:46:ed:fa:9c:d0:85:
         76:0e:e0:7d:70:22:e1:63:b7:65:b5:c4:a3:3c:15:42:ea:68:
         7d:5e:49:c9:1b:a7:be:91:da:da:cc:b5:d3:37:a8:7e:34:26:
         84:ab:4b:61:7f:3a:6a:55:7e:af:5f:a1:09:3a:94:c3:95:df:
         b5:97:56:cf:e5:2c:3a:50:e6:c0:87:b9:07:b1:20:ec:01:e1:
         ba:79:5a:7e:27:41:03:96:db:f2:1f:8f:75:9a:eb:91:e1:77:
         54:58:c1:03:1f:b2:7d:03:e5:65:d1:bc:a1:cf:ea:b7:10:94:
         63:10:84:79:4a:6c:3c:0b:be:7e:55:66:5a:29:8a:ee:70:ae:
         e5:75:86:fc:c4:67:aa:8b:5d:88:19:25:31:a2:6a:9c:0b:ba:
         24:f9:d0:a0:00:89:ed:31:ca:97:9f:aa:88:9c:a8:bb:3b:01:
         9a:67:7b:cf:05:55:40:55:70:da:ec:49:e7:74:eb:23:59:62:
         2c:b2:ea:eb:20:d7:8f:70:c7:10:41:b4:a1:63:61:2c:74:07:
         50:f9:e1:3c:11:ee:7f:0f:4d:9d:cc:6d:df:0a:f6:d9:39:85:
         cd:58:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:31 2024 by rpki-client on console-fra.rpki-client.org