Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa
File:                     3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa (raw, json)
Hash identifier:          FS6x7XY3hNeQ8ZBD3N3FlOWoArQESI1gKlEOww/U4MU=
Subject key identifier:   45:16:F8:3F:F0:F8:BB:0E:ED:A0:4F:D7:A9:88:B0:E5:02:F3:13:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0571144A6E05D693BF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.214.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:05:71:14:4a:6e:05:d6:93:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=eb79a8dc-42f7-49b2-933c-10fd34e77091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b0:f8:9c:1c:11:ca:de:18:b8:1b:c9:a8:bc:
                    bb:56:73:fc:76:2d:83:6f:e4:21:91:92:18:75:ca:
                    fe:9f:94:92:01:c0:5a:e2:43:98:30:5c:75:51:66:
                    e6:aa:5d:e9:8d:e7:40:a0:37:b9:3c:a9:23:ac:c6:
                    9c:f6:78:15:af:af:47:f6:a5:0a:ff:74:60:ce:ea:
                    07:ee:8d:67:2d:cc:a5:29:4f:87:89:36:54:02:a5:
                    38:c2:72:22:47:9f:18:a0:61:2e:72:c6:c2:98:da:
                    3b:0c:8b:89:bb:50:89:cb:41:15:07:be:34:4f:1e:
                    13:da:b9:fd:de:37:91:df:92:75:8b:ae:14:8a:e0:
                    f8:b8:d1:0d:3c:af:c2:43:6d:98:8c:3c:9d:f5:1e:
                    de:dc:ec:4c:ad:63:c7:9b:a0:27:c4:83:b5:31:65:
                    14:af:58:a2:fe:cb:bf:bb:b5:ec:de:23:d3:64:c7:
                    ed:c9:c6:bf:f4:17:e1:23:e9:af:fb:66:ca:75:98:
                    c1:92:49:94:94:73:a2:8f:37:64:6d:86:e7:b6:16:
                    86:16:ec:2c:f6:4f:22:fd:34:a2:f3:15:45:e9:df:
                    ca:7c:8e:5f:79:ed:39:65:e0:47:36:30:b3:44:2d:
                    26:74:92:07:0e:28:15:26:69:22:14:00:ac:d5:7a:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:F8:3F:F0:F8:BB:0E:ED:A0:4F:D7:A9:88:B0:E5:02:F3:13:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3b:41:09:df:5b:ac:03:ed:b9:d4:b5:a4:81:75:26:bd:56:
         cb:33:88:49:82:1f:69:43:bd:1f:2f:e9:fc:0d:ad:99:04:63:
         26:66:7c:ee:57:b9:91:0d:81:31:58:77:72:25:17:df:5e:82:
         0a:f1:5b:ab:f1:87:83:94:a7:07:06:37:6b:8d:b8:f2:7a:31:
         7c:34:e7:57:33:d9:af:1f:c6:0e:ba:51:bd:c8:4d:5a:ae:77:
         93:0a:27:b7:32:ae:73:37:70:7a:84:12:9f:01:1f:75:97:e2:
         0d:62:46:a6:72:ef:41:01:60:b7:be:f5:fb:e7:1a:da:09:75:
         a9:19:12:50:68:b4:ba:1a:5e:71:de:59:e6:fe:82:e0:e9:33:
         8d:e4:c9:a7:3b:fc:83:b3:d7:ed:e8:a4:1b:f5:b6:6d:cf:83:
         3a:7b:10:34:a3:17:6b:4f:f6:bd:b7:a5:2d:35:e2:aa:67:e7:
         5e:6f:25:4f:4e:49:2b:2c:cb:ea:60:e6:94:64:e4:53:ff:6d:
         9e:81:9f:b3:e9:e8:ff:49:55:b0:30:e8:a2:bc:b9:cb:09:54:
         a9:ae:25:52:8c:fb:e6:0a:c3:0c:df:f9:59:65:0a:ef:73:5f:
         5e:28:00:ae:4e:64:7f:d8:ef:98:50:1c:0d:5d:e4:05:e2:13:
         91:9c:8c:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+gVxFEpuBdaTvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
ZWI3OWE4ZGMtNDJmNy00OWIyLTkzM2MtMTBmZDM0ZTc3MDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrD4nBwRyt4YuBvJqLy7VnP8di2Db+QhkZIY
dcr+n5SSAcBa4kOYMFx1UWbmql3pjedAoDe5PKkjrMac9ngVr69H9qUK/3RgzuoH
7o1nLcylKU+HiTZUAqU4wnIiR58YoGEucsbCmNo7DIuJu1CJy0EVB740Tx4T2rn9
3jeR35J1i64UiuD4uNENPK/CQ22YjDyd9R7e3OxMrWPHm6AnxIO1MWUUr1ii/su/
u7Xs3iPTZMftyca/9BfhI+mv+2bKdZjBkkmUlHOijzdkbYbnthaGFuws9k8i/TSi
8xVF6d/KfI5fee05ZeBHNjCzRC0mdJIHDigVJmkiFACs1Xq3/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUW+D/w+LsO7aBP16mIsOUC8xNkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M5NTFmYjYtY2RjNi0z
ZGY1LWI3MjAtOTQ1ZTJlNjA5ZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIY7QQnfW6wD7bnUtaSBdSa9VssziEmCH2lDvR8v6fwNrZkEYyZmfO5X
uZENgTFYd3IlF99eggrxW6vxh4OUpwcGN2uNuPJ6MXw051cz2a8fxg66Ub3ITVqu
d5MKJ7cyrnM3cHqEEp8BH3WX4g1iRqZy70EBYLe+9fvnGtoJdakZElBotLoaXnHe
Web+guDpM43kyac7/IOz1+3opBv1tm3Pgzp7EDSjF2tP9r23pS014qpn515vJU9O
SSssy+pg5pRk5FP/bZ6Bn7Pp6P9JVbAw6KK8ucsJVKmuJVKM++YKwwzf+VllCu9z
X14oAK5OZH/Y75hQHA1d5AXiE5GcjN0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:26 2024 by rpki-client on console-fra.rpki-client.org