Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44b88bee-193c-3993-a114-cbb1a936f503.roa
File:                     44b88bee-193c-3993-a114-cbb1a936f503.roa (raw, json)
Hash identifier:          2zk/UrB1y653yM/GfvhgZEXxBZBsFT6kB2TnQ+VrraQ=
Subject key identifier:   CC:5A:AD:33:F7:12:62:95:1B:8D:DD:D9:CA:EF:5F:E8:92:E6:9C:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA13D4165548172264FC20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44b88bee-193c-3993-a114-cbb1a936f503.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.213.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:13:d4:16:55:48:17:22:64:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=36398059-3f5c-42d4-b887-481b476f26e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:85:88:10:f9:99:c6:59:10:d9:01:fc:25:
                    24:1c:24:16:e1:44:44:66:b0:07:4c:55:47:8f:a3:
                    30:62:5f:a1:43:6e:41:69:32:cc:82:9c:0b:c0:c5:
                    0f:64:70:a9:d1:f1:e3:1c:cd:01:0b:d2:88:4f:2d:
                    32:ef:a6:5b:2c:70:65:46:7c:36:71:a9:65:e6:73:
                    53:09:75:89:b3:b9:57:38:58:1d:ee:5d:c8:e7:8b:
                    66:74:7b:e6:dc:3d:ce:4a:81:1a:64:0d:04:13:2d:
                    8d:20:15:28:bd:cf:57:69:bc:69:c4:73:d3:62:85:
                    96:a6:aa:b2:52:ac:5e:48:51:74:29:57:0a:0d:f7:
                    f1:dd:42:e3:b1:d3:f8:a3:39:a2:94:e0:7f:59:cd:
                    74:40:d2:28:f4:a8:53:22:36:cc:64:96:c2:dd:f1:
                    fc:ea:d5:55:a0:20:7b:ee:11:e6:27:df:df:eb:bb:
                    59:94:2f:04:0e:0b:6f:59:92:db:02:85:b7:17:61:
                    ca:2b:15:34:b2:f5:9c:7c:e1:f8:d7:f3:0e:cc:62:
                    32:7f:44:2f:b0:73:b8:c3:59:f8:c5:5f:c5:9c:c3:
                    dd:b7:09:aa:c1:89:aa:e0:48:2a:d4:3b:13:42:68:
                    74:f0:4a:15:71:56:02:31:c9:84:03:5a:94:0b:da:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5A:AD:33:F7:12:62:95:1B:8D:DD:D9:CA:EF:5F:E8:92:E6:9C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44b88bee-193c-3993-a114-cbb1a936f503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:9d:6a:ef:2c:66:fb:a8:4f:d8:c0:f5:0c:ca:30:a2:4f:
         82:8b:05:17:fb:54:88:70:43:ff:a5:3a:6e:ba:bf:73:92:9c:
         de:95:52:01:04:52:ee:94:73:e1:34:28:31:95:c6:61:82:5d:
         11:58:3f:46:33:32:44:49:ce:54:c6:69:20:df:4b:c7:c3:dc:
         0b:2f:21:ab:b4:9f:5d:6c:81:1f:72:1e:df:4c:44:ea:16:45:
         1f:c1:38:bb:96:c6:74:0c:e8:ba:1b:7a:8a:3f:ba:9d:8d:11:
         f4:b3:91:70:d8:bc:0f:fb:cc:2f:7a:bc:74:1f:f7:99:db:18:
         4e:0f:a2:d3:68:5c:60:41:79:42:f7:15:80:f9:c4:de:8f:1c:
         3d:19:38:a4:4e:23:af:bd:c6:77:ee:a2:88:6a:fc:c3:2a:b0:
         33:c7:67:6c:85:46:77:30:fd:52:14:5b:5e:29:20:0d:a6:5e:
         85:24:ba:16:cb:3e:62:7b:1a:b6:be:f5:49:5c:9d:41:94:e1:
         0a:b9:c7:42:8b:46:fa:bc:22:f4:9a:db:5c:17:51:f3:77:66:
         02:f9:bd:86:d2:1b:b9:31:96:84:44:ec:cf:a2:f7:30:10:19:
         6e:66:b0:c8:88:22:dd:25:50:b2:a6:22:27:af:96:0d:24:d4:
         f7:07:2e:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+hPUFlVIFyJk/CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
MzYzOTgwNTktM2Y1Yy00MmQ0LWI4ODctNDgxYjQ3NmYyNmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPeFiBD5mcZZENkB/CUkHCQW4UREZrAHTFVH
j6MwYl+hQ25BaTLMgpwLwMUPZHCp0fHjHM0BC9KITy0y76ZbLHBlRnw2call5nNT
CXWJs7lXOFgd7l3I54tmdHvm3D3OSoEaZA0EEy2NIBUovc9XabxpxHPTYoWWpqqy
UqxeSFF0KVcKDffx3ULjsdP4ozmilOB/Wc10QNIo9KhTIjbMZJbC3fH86tVVoCB7
7hHmJ9/f67tZlC8EDgtvWZLbAoW3F2HKKxU0svWcfOH41/MOzGIyf0QvsHO4w1n4
xV/FnMPdtwmqwYmq4Egq1DsTQmh08EoVcVYCMcmEA1qUC9qLPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxarTP3EmKVG43d2crvX+iS5pxjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDRiODhiZWUtMTkzYy0z
OTkzLWExMTQtY2JiMWE5MzZmNTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtUkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwMnWrvLGb7qE/YwPUMyjCiT4KLBRf7VIhwQ/+lOm66v3OSnN6VUgEE
Uu6Uc+E0KDGVxmGCXRFYP0YzMkRJzlTGaSDfS8fD3AsvIau0n11sgR9yHt9MROoW
RR/BOLuWxnQM6Lobeoo/up2NEfSzkXDYvA/7zC96vHQf95nbGE4PotNoXGBBeUL3
FYD5xN6PHD0ZOKROI6+9xnfuoohq/MMqsDPHZ2yFRncw/VIUW14pIA2mXoUkuhbL
PmJ7Gra+9UlcnUGU4Qq5x0KLRvq8IvSa21wXUfN3ZgL5vYbSG7kxloRE7M+i9zAQ
GW5msMiIIt0lULKmIievlg0k1PcHLtQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:27 2024 by rpki-client on console-fra.rpki-client.org