Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4842a8fc-b410-30c4-9b00-93da957eac25.roa
File:                     4842a8fc-b410-30c4-9b00-93da957eac25.roa (raw, json)
Hash identifier:          hzmrG0ZgGzulk3cQ7YHqu088WZaEret69o0MZkqXoac=
Subject key identifier:   A4:FA:F6:EB:A4:BE:6A:EA:D1:B1:B7:E9:B4:FA:57:18:93:29:9E:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858470120460E1F69C44F92AE4F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4842a8fc-b410-30c4-9b00-93da957eac25.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.204.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:46:0e:1f:69:c4:4f:92:ae:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=9b70e5cd-0900-4c2b-82c7-779fb3572d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:4e:92:7b:6d:0a:bd:09:50:06:a4:e9:49:
                    f3:e9:95:02:b8:10:d7:a9:1c:8b:ab:88:b2:96:4d:
                    1b:c8:c2:56:73:fa:c7:a5:93:f1:ea:1f:fb:e7:32:
                    e6:44:9d:bb:04:70:b9:c2:04:36:12:c3:ab:04:7e:
                    1e:a5:57:16:16:a8:16:25:e0:16:9e:ea:c3:b5:77:
                    15:44:5d:5b:eb:a2:a4:dd:a4:cc:e3:54:e1:e6:3d:
                    63:e5:e6:47:14:7b:ca:ac:33:a3:88:1c:cb:56:73:
                    83:d3:bc:3d:20:bf:ad:33:4f:03:f0:43:d8:02:50:
                    ea:87:34:b8:29:0f:63:b0:f2:52:03:15:0a:29:10:
                    03:20:f1:d7:f5:7b:5a:a5:61:c3:be:81:e9:4e:c6:
                    e8:f1:35:2d:8f:e2:9e:ba:96:b2:c6:2f:15:15:0f:
                    20:37:ee:ac:5a:0e:78:36:47:ca:d8:6f:8d:5d:ce:
                    d1:26:cd:25:17:44:8f:86:af:6b:f5:53:da:07:fd:
                    32:b9:fc:85:91:e9:cf:7d:45:01:fe:7e:ad:19:ef:
                    ba:b0:2f:50:7d:eb:6c:a9:fd:ff:0c:00:49:41:a2:
                    93:4e:c4:e6:d0:81:b8:0c:30:f1:5f:89:24:bf:16:
                    27:a4:aa:22:ed:6f:d4:e9:a5:5a:bf:28:06:84:de:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:F6:EB:A4:BE:6A:EA:D1:B1:B7:E9:B4:FA:57:18:93:29:9E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4842a8fc-b410-30c4-9b00-93da957eac25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.204.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:52:4b:38:eb:d8:21:9e:0e:9f:df:39:08:78:9f:d1:c7:58:
         9e:b0:57:a6:d3:f8:3a:27:f8:db:36:40:15:1b:23:a0:0d:93:
         7a:40:df:74:1d:d7:f7:c4:38:a8:2a:7b:2e:3c:30:60:7e:54:
         75:01:95:83:ad:6f:e8:63:27:ba:1a:0c:21:94:b1:9d:c7:c7:
         95:70:fc:e7:9a:46:bf:96:31:6f:e8:a6:ff:71:17:a1:06:41:
         51:60:97:fb:8e:63:fb:fe:ce:30:7d:76:6e:a7:35:5b:28:3e:
         98:37:2d:e7:56:7e:c4:ff:cc:ff:a5:9c:f0:41:95:e0:67:0f:
         94:85:59:67:74:ae:25:d0:0c:1f:33:0a:ff:cb:e8:4f:2a:93:
         f9:a2:86:08:ac:ec:bc:14:eb:39:5c:fc:b9:2d:52:97:f4:52:
         63:75:1f:03:91:e7:b6:12:78:11:85:a4:1f:bd:93:26:ca:1a:
         77:1c:f8:b0:6e:91:55:45:17:18:54:67:22:38:cc:1d:0f:78:
         1c:b9:27:e4:af:c4:8a:67:b4:8b:b5:36:fd:21:63:22:08:09:
         a3:08:ff:f1:e0:c8:64:10:44:29:27:85:23:28:f3:05:2d:4e:
         09:22:07:ae:13:4f:6c:09:00:42:b6:0f:0b:82:a7:2e:33:86:
         12:7d:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:23 2024 by rpki-client on console-ams.rpki-client.org