Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/462993b9-598d-32b2-b704-e35fbd9c953a.roa
File:                     462993b9-598d-32b2-b704-e35fbd9c953a.roa (raw, json)
Hash identifier:          akLk6mMb2dk2J8XMa6zc8J7b+G6p/cdzKzkDSjfo2JE=
Subject key identifier:   6F:5F:EF:03:18:25:09:BA:89:FC:19:39:C6:9C:92:5E:87:99:24:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F1E07393569A78BCB300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/462993b9-598d-32b2-b704-e35fbd9c953a.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.249.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f1:e0:73:93:56:9a:78:bc:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=9a5ef18f-6781-49a2-ba0a-2db13d0bbb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:17:57:90:01:d5:e5:f5:0f:a1:a2:80:2d:15:
                    f6:67:67:da:92:4c:21:44:d7:19:e9:48:26:1e:19:
                    90:19:0a:e6:eb:03:c4:50:86:3a:92:1e:a7:d4:e8:
                    13:eb:58:31:68:3b:c5:80:3a:93:75:f1:90:df:59:
                    e6:ad:fb:12:bb:ca:53:33:ca:17:dc:33:b8:4e:17:
                    33:8b:0a:85:ed:1c:4b:e6:62:76:13:df:9b:a2:e4:
                    39:d2:5c:92:fb:f4:79:ae:e0:f0:2d:38:fc:bc:e4:
                    a6:96:2e:a5:5a:f3:eb:0e:3b:57:fe:d1:72:2a:91:
                    10:57:4e:10:ba:63:5d:d9:26:08:96:1e:d0:07:aa:
                    72:c6:1f:fe:84:24:1f:33:d2:2b:2f:63:cd:fe:46:
                    92:38:ae:70:ac:2f:7e:b0:5a:63:8c:ae:55:75:61:
                    c9:7d:35:0e:3b:24:2a:ed:c7:38:c6:26:37:43:fd:
                    2d:31:16:51:bd:3c:b0:53:42:e4:39:75:67:18:20:
                    5e:b6:de:3a:fc:8e:9e:bf:a4:d8:07:fb:dc:da:18:
                    4b:99:33:21:72:ea:94:91:59:55:74:cb:d7:be:5f:
                    60:5a:5f:96:c5:e3:08:88:3c:24:63:58:24:92:0e:
                    e3:16:87:cd:15:9c:cd:16:96:20:d4:b6:b2:63:5f:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:EF:03:18:25:09:BA:89:FC:19:39:C6:9C:92:5E:87:99:24:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/462993b9-598d-32b2-b704-e35fbd9c953a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:39:33:7d:0d:45:de:59:f6:7b:0a:85:9a:75:29:7d:57:a2:
         1a:b2:0d:a7:cd:3f:76:61:ea:47:d3:82:bb:8d:24:d0:63:40:
         c4:95:e0:2d:74:96:8e:72:d8:16:12:03:da:83:31:e8:15:79:
         54:c1:51:6b:88:b4:24:48:e2:ba:ed:74:b1:38:69:68:f7:ae:
         9c:8a:60:53:7c:0d:25:ee:e6:cf:bc:6f:5e:80:47:78:4f:06:
         bd:62:c5:ce:2a:3d:24:e4:9b:68:07:05:40:0f:58:e4:ef:8b:
         10:b1:0a:7a:42:f3:b1:e7:94:51:a1:18:02:c2:fc:aa:b3:77:
         14:0d:ac:8d:14:57:11:94:7e:f8:f3:0f:00:ce:2b:aa:9d:fa:
         35:16:5e:fd:d8:12:33:e6:42:7f:41:32:e0:39:45:8d:fa:31:
         0c:a9:3e:53:88:9a:e1:56:32:e6:58:8a:01:9e:f1:47:8a:4c:
         1b:b2:5d:73:6a:50:42:81:39:60:0a:46:15:22:f2:9f:4e:e3:
         71:a1:e0:a8:15:42:5f:95:71:eb:79:bd:68:ab:3b:ee:8c:75:
         4f:46:37:e4:39:22:8f:04:d5:c0:b3:a9:1e:cb:c5:d1:19:bd:
         21:80:ff:3b:c5:15:3c:a5:7d:34:8e:e3:36:b4:ce:b8:74:91:
         10:88:44:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfHgc5NWmni8swAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
OWE1ZWYxOGYtNjc4MS00OWEyLWJhMGEtMmRiMTNkMGJiYjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRdXkAHV5fUPoaKALRX2Z2fakkwhRNcZ6Ugm
HhmQGQrm6wPEUIY6kh6n1OgT61gxaDvFgDqTdfGQ31nmrfsSu8pTM8oX3DO4Thcz
iwqF7RxL5mJ2E9+bouQ50lyS+/R5ruDwLTj8vOSmli6lWvPrDjtX/tFyKpEQV04Q
umNd2SYIlh7QB6pyxh/+hCQfM9IrL2PN/kaSOK5wrC9+sFpjjK5VdWHJfTUOOyQq
7cc4xiY3Q/0tMRZRvTywU0LkOXVnGCBett46/I6ev6TYB/vc2hhLmTMhcuqUkVlV
dMvXvl9gWl+WxeMIiDwkY1gkkg7jFofNFZzNFpYg1LayY18rtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9f7wMYJQm6ifwZOcackl6HmSQiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDYyOTkzYjktNTk4ZC0z
MmIyLWI3MDQtZTM1ZmJkOWM5NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvkwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc5M30NRd5Z9nsKhZp1KX1XohqyDafNP3Zh6kfTgruNJNBjQMSV4C10
lo5y2BYSA9qDMegVeVTBUWuItCRI4rrtdLE4aWj3rpyKYFN8DSXu5s+8b16AR3hP
Br1ixc4qPSTkm2gHBUAPWOTvixCxCnpC87HnlFGhGALC/KqzdxQNrI0UVxGUfvjz
DwDOK6qd+jUWXv3YEjPmQn9BMuA5RY36MQypPlOImuFWMuZYigGe8UeKTBuyXXNq
UEKBOWAKRhUi8p9O43Gh4KgVQl+Vcet5vWirO+6MdU9GN+Q5Io8E1cCzqR7LxdEZ
vSGA/zvFFTylfTSO4za0zrh0kRCIRN4=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:42 2024 by rpki-client on console-fra.rpki-client.org