Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4923457b-0f1f-3e35-af6e-52b493c63720.roa
File:                     4923457b-0f1f-3e35-af6e-52b493c63720.roa (raw, json)
Hash identifier:          ri5eJFaBFNyBF0uuEyRiEbGxlyM7Urb/wmBYvJN8xTw=
Subject key identifier:   FD:39:A9:4C:7D:3D:F4:86:FF:6D:95:F3:D7:03:C2:E5:22:88:B8:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E1EB35BD5E500DCFEF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4923457b-0f1f-3e35-af6e-52b493c63720.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.235.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e1:eb:35:bd:5e:50:0d:cf:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=e5929c7f-406e-46d5-a4d3-f23325d9cee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:58:84:9f:b9:ca:00:29:3e:63:61:6b:b0:
                    6a:8e:d7:3e:51:5b:5e:b0:e7:96:b2:d0:e5:bd:ca:
                    d3:1c:81:98:47:b4:63:de:90:6f:8c:ff:70:98:3b:
                    f1:9b:64:55:21:84:23:2b:d8:03:2c:9b:f1:0f:6d:
                    64:fc:25:60:25:6a:a9:54:e7:ae:a2:ef:c0:fc:6d:
                    6e:6d:d1:6e:95:d4:ca:34:fc:60:6a:67:32:bb:5f:
                    24:64:16:f3:41:79:62:ac:4b:2d:d7:d9:3f:82:49:
                    56:c0:55:de:b6:df:1a:62:39:d9:e3:e5:ad:98:0a:
                    24:cf:c6:20:2a:e1:b8:9c:da:7a:e4:51:f1:9b:77:
                    10:bc:43:0b:d4:5d:aa:89:b3:a5:ce:60:de:2b:00:
                    3f:cc:04:27:3e:95:9b:61:44:c1:69:fe:e5:0a:9f:
                    95:27:e1:7a:e0:84:1f:2f:34:4a:4e:86:1d:8f:e8:
                    ee:55:34:77:76:3d:f0:e8:60:9b:16:f3:96:91:61:
                    f3:cf:5c:72:de:d9:0d:03:eb:53:01:00:02:93:a6:
                    43:c9:24:2f:30:a7:df:04:58:16:37:30:cc:55:a3:
                    ec:a6:09:d8:ae:76:c6:38:74:9a:01:df:4e:47:7a:
                    a2:ee:6a:ad:f9:89:07:66:4d:25:58:d8:05:1b:34:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:39:A9:4C:7D:3D:F4:86:FF:6D:95:F3:D7:03:C2:E5:22:88:B8:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4923457b-0f1f-3e35-af6e-52b493c63720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:ad:15:cd:74:d3:ec:05:44:8c:05:53:8b:e1:81:07:5e:
         62:f6:50:d9:ce:cd:d8:45:fb:3b:91:24:06:fa:2c:dc:20:76:
         7e:4d:b8:ea:7a:bc:7d:37:ba:d6:1d:c3:73:d0:bd:2d:cc:46:
         20:ae:f9:28:90:f3:ee:e8:3b:fb:c3:f3:8f:3e:48:32:8f:26:
         a0:e2:3d:42:80:40:df:b8:af:42:10:4e:0b:00:c2:d8:c8:7c:
         42:44:b3:70:ff:f5:c1:76:e5:69:44:a6:3e:33:16:a2:26:40:
         89:8a:81:cd:34:df:80:70:39:ec:b0:94:6b:b7:21:4d:5f:dc:
         66:72:59:e5:f7:a9:48:6b:33:1f:1d:70:08:3a:d1:8a:bc:a0:
         9b:f9:ab:62:f7:eb:1a:14:82:74:e2:bb:1b:05:ec:dc:53:6f:
         50:95:81:b5:fb:a5:df:c0:cb:e2:57:b4:86:a2:63:a5:e2:97:
         67:3b:2b:9a:0f:6a:33:ab:88:04:57:94:db:33:d4:3c:c9:99:
         84:6f:1e:32:74:20:60:8c:3d:1a:73:c1:24:16:c6:7a:81:b9:
         ae:01:a4:b4:0c:3d:e5:43:b1:e5:5d:46:e0:90:d4:a2:7f:d0:
         b4:68:05:27:84:23:2b:40:09:71:23:e0:d4:14:c4:8a:20:1c:
         69:06:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:43 2024 by rpki-client on console-fra.rpki-client.org