Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa
File:                     495291d5-df17-3d06-965e-bcc698922d0b.roa (raw, json)
Hash identifier:          jtzN0vtb5rG+7oh2aPpgmePI3NcG6TK3ghO6GPAK8ec=
Subject key identifier:   30:D0:30:A2:73:11:0F:62:F9:66:63:E2:E0:7A:0D:7A:F6:15:74:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858473095FA775B5B1DE243C26460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     0
IP address blocks:        199.170.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fa:77:5b:5b:1d:e2:43:c2:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=88942374-523c-4059-8690-7e227319a0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:0b:05:29:06:7d:8c:fb:61:9f:4f:74:5a:
                    fe:9a:0d:0d:bd:1b:fe:5d:26:0d:c7:46:35:d5:ec:
                    5f:b3:76:ad:23:9d:d3:90:8b:d4:dd:bc:c0:62:39:
                    1d:2d:23:c5:86:23:1f:cc:16:d5:ff:46:73:5d:1b:
                    0a:91:ec:ee:bf:12:91:25:5d:d3:73:51:f9:83:c3:
                    70:d3:0c:03:33:91:4b:21:e8:6c:d8:77:6a:63:04:
                    67:ef:e9:af:dc:38:a5:eb:d7:3b:b4:b5:b7:aa:69:
                    0e:6f:96:2c:58:75:e8:d4:f5:18:84:1f:ab:a1:63:
                    61:f0:bf:38:ce:7d:65:ed:61:89:f7:da:95:53:12:
                    e3:6d:9c:42:9c:eb:6b:44:99:ab:2d:dc:e1:3e:f4:
                    f4:ee:b7:75:6d:df:a7:1e:d8:09:a5:ea:fd:28:8e:
                    14:99:c8:dd:f3:98:49:38:81:40:62:6d:6b:47:ea:
                    68:18:51:c0:58:0b:89:35:28:c9:9d:4f:08:fa:a2:
                    ef:3f:dd:fb:f7:8e:cb:9d:7b:69:e4:06:af:ba:3c:
                    c1:83:d7:53:34:17:85:41:55:1d:7f:df:8f:04:8f:
                    8b:e3:84:ed:89:66:3a:99:43:e1:ef:13:e3:15:7a:
                    4d:d9:f9:63:86:bb:5e:f0:2c:81:8a:37:af:dd:a2:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D0:30:A2:73:11:0F:62:F9:66:63:E2:E0:7A:0D:7A:F6:15:74:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.170.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:b8:47:b6:67:c6:ab:cf:2c:3f:fc:dd:ac:e9:3f:42:95:
         f3:5f:4b:4a:de:eb:2e:91:e6:f0:52:6a:8f:b1:2e:2f:85:38:
         26:92:7d:1a:56:c8:c3:bd:33:98:53:56:b3:f1:05:6a:4a:52:
         b8:f6:fc:c3:f5:40:1c:4c:0a:b1:bd:fa:2e:e8:30:3b:06:29:
         19:4f:c0:11:96:81:00:d9:c5:4e:6c:3c:69:74:ed:5b:17:1d:
         53:e7:ac:a7:46:f4:4e:6e:92:d1:10:02:7c:4c:bf:34:89:8d:
         96:a5:8e:de:da:02:82:ab:8d:77:f4:e0:c7:d9:b6:18:19:23:
         a9:c4:c5:ec:e0:cf:96:60:d6:4e:83:30:28:98:4c:22:93:e3:
         81:0f:45:58:2e:a5:4e:bc:a1:4f:f9:66:30:ce:1e:b5:0f:9b:
         22:52:3b:13:e9:17:cb:e7:9f:48:cf:21:c7:85:39:41:e2:61:
         93:cb:03:2f:44:03:e4:43:2e:21:be:8a:df:2f:fb:5e:3b:ff:
         82:3d:fb:ca:c4:fd:a3:8e:d7:f8:ce:fe:ae:1f:ae:6e:bb:91:
         75:28:4e:ae:cc:1b:5b:66:fa:0a:c7:aa:3f:8d:b7:78:0d:60:
         f7:26:70:c5:fa:12:c5:cb:08:67:2a:2b:6e:80:93:4c:17:7b:
         af:37:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:39 2024 by rpki-client on console-ams.rpki-client.org