Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa
File:                     3419ba6c-0f82-38ec-9e54-036464ac2036.roa (raw, json)
Hash identifier:          NaHSiiunSXvxNTXUEWAjZV2j14OU9Og3LyldCJqd4FI=
Subject key identifier:   31:6B:85:98:D6:25:27:1B:79:63:9F:74:3B:B6:65:DB:68:DA:AC:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA1585C709E9E3710A7040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.224.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:15:85:c7:09:e9:e3:71:0a:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=50d1bb84-f77c-4356-a187-33b585c5ae71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:71:fa:b5:c1:6c:be:d2:24:f7:11:66:ee:
                    66:ed:04:b6:03:b0:5b:30:17:cc:da:1b:a9:33:44:
                    98:ea:a4:87:ef:a2:07:ed:d7:9e:5f:1c:6f:04:1b:
                    2b:f2:28:8c:fa:03:40:5e:dd:6f:f2:55:43:75:ff:
                    fb:bb:bd:61:a3:4e:22:26:fb:a0:a9:34:0f:fd:5d:
                    56:8a:7c:34:1c:a4:d1:91:76:6d:94:4e:ab:d4:42:
                    38:33:2b:b8:6b:cb:f1:4c:74:5e:88:6f:2f:13:52:
                    83:f4:a8:34:fe:d5:ca:25:4c:38:fe:34:11:a4:d5:
                    42:60:77:01:42:4c:29:db:30:a5:da:0a:39:e6:c2:
                    6c:b6:37:a5:6b:04:28:50:00:0c:b3:51:53:50:f6:
                    57:8b:65:e1:8d:1a:35:44:4b:58:55:3a:58:42:65:
                    19:09:85:55:40:7c:34:92:0b:95:37:32:3c:2d:6f:
                    89:75:de:dc:20:75:50:5d:b7:dc:25:5e:a9:e4:e5:
                    cd:c0:30:eb:43:d8:63:1f:4d:d3:2b:3d:6f:75:ed:
                    c9:10:3e:90:2e:08:b0:0c:3b:a0:a7:e9:60:cf:34:
                    5d:02:41:9c:4d:0d:3c:c5:30:21:bc:f1:68:54:58:
                    89:4f:6c:aa:3c:9c:29:b7:3f:0f:cf:e2:5a:55:38:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6B:85:98:D6:25:27:1B:79:63:9F:74:3B:B6:65:DB:68:DA:AC:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3c:3c:83:0b:81:47:52:b4:ca:78:54:91:7b:b8:eb:6d:9a:
         dc:4d:bb:a6:bc:80:92:a7:e5:fa:c6:18:87:94:07:1f:7f:06:
         e2:ca:b9:b1:9f:1a:78:93:2a:31:d7:de:f5:00:b0:37:79:77:
         f4:ab:09:17:8f:15:97:0f:b0:83:03:ce:c8:30:7c:4c:e9:47:
         b3:f3:00:03:51:87:7b:6e:1b:5f:8f:aa:4b:8f:90:0b:91:c0:
         2b:0f:d2:37:73:f6:83:e1:c9:d3:1a:fa:27:93:c1:bb:7d:65:
         1a:5f:de:96:32:dd:92:c9:07:e8:24:47:98:8b:c0:1e:7f:78:
         e3:f4:6b:f8:c5:7f:5d:0d:bd:b6:b5:68:7a:ab:ec:d4:9d:d2:
         72:28:e3:a4:24:15:d4:48:11:f7:87:78:f5:d4:35:7b:ed:be:
         6a:83:17:ee:ba:03:9c:8d:76:72:6b:a9:4c:97:ef:e9:7a:30:
         3e:23:ed:76:74:cf:72:3f:c9:f2:36:b7:fe:9f:97:32:ed:3f:
         6f:44:26:d7:cf:e8:03:9c:69:0d:df:43:c6:13:e8:ea:73:b4:
         e8:3c:11:4d:70:e4:aa:4a:8e:51:3b:36:11:f2:9f:87:0c:4e:
         91:2f:9e:34:aa:a9:8e:e5:ea:5c:2c:f9:dc:c0:a9:6a:ee:de:
         99:e1:7b:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+hWFxwnp43EKcEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
NTBkMWJiODQtZjc3Yy00MzU2LWExODctMzNiNTg1YzVhZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGRx+rXBbL7SJPcRZu5m7QS2A7BbMBfM2hup
M0SY6qSH76IH7deeXxxvBBsr8iiM+gNAXt1v8lVDdf/7u71ho04iJvugqTQP/V1W
inw0HKTRkXZtlE6r1EI4Myu4a8vxTHReiG8vE1KD9Kg0/tXKJUw4/jQRpNVCYHcB
Qkwp2zCl2go55sJstjelawQoUAAMs1FTUPZXi2XhjRo1REtYVTpYQmUZCYVVQHw0
kguVNzI8LW+Jdd7cIHVQXbfcJV6p5OXNwDDrQ9hjH03TKz1vde3JED6QLgiwDDug
p+lgzzRdAkGcTQ08xTAhvPFoVFiJT2yqPJwptz8Pz+JaVTjiHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFrhZjWJScbeWOfdDu2Zdto2qwGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQxOWJhNmMtMGY4Mi0z
OGVjLTllNTQtMDM2NDY0YWMyMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg8PIMLgUdStMp4VJF7uOttmtxNu6a8gJKn5frGGIeUBx9/BuLKubGf
GniTKjHX3vUAsDd5d/SrCRePFZcPsIMDzsgwfEzpR7PzAANRh3tuG1+PqkuPkAuR
wCsP0jdz9oPhydMa+ieTwbt9ZRpf3pYy3ZLJB+gkR5iLwB5/eOP0a/jFf10Nvba1
aHqr7NSd0nIo46QkFdRIEfeHePXUNXvtvmqDF+66A5yNdnJrqUyX7+l6MD4j7XZ0
z3I/yfI2t/6flzLtP29EJtfP6AOcaQ3fQ8YT6OpztOg8EU1w5KpKjlE7NhHyn4cM
TpEvnjSqqY7l6lws+dzAqWru3pnhe2I=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:24 2024 by rpki-client on console-fra.rpki-client.org