Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa
File:                     4eec6853-240c-3225-909a-b2c6a1b55a8d.roa (raw, json)
Hash identifier:          FQYa8eX5bo6a/3L5kl1j0e6p+eUQnnHRV0/HfAwEpzk=
Subject key identifier:   98:5B:E5:F5:F1:11:74:16:FF:84:6D:30:3C:1C:6B:13:85:EC:68:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858470120491920545DE31AE13B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.210.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:49:19:20:54:5d:e3:1a:e1:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=6c6041e9-725d-4121-9e2a-37c806749dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:94:a5:99:48:53:76:41:07:5a:75:48:dd:
                    ea:1c:05:13:04:8d:68:c7:c8:68:25:b3:9a:68:bc:
                    97:eb:76:bf:45:df:9f:36:c7:9f:09:a8:ba:59:8e:
                    c3:6e:c3:01:08:fb:2e:f5:89:a7:9a:81:fa:dc:6f:
                    f7:7c:a7:82:49:99:8e:79:5e:05:46:2e:23:e7:82:
                    19:91:16:cd:7a:54:dd:42:d0:3d:a9:49:c4:6e:a0:
                    fa:fb:88:b7:cb:ad:bb:f7:a5:96:c6:3f:cc:8c:ff:
                    fa:e5:76:ad:e1:10:f4:73:be:82:dc:93:9f:e1:5c:
                    35:58:e5:4e:20:83:c5:81:03:5d:e9:80:31:a0:36:
                    99:1e:fb:92:fa:09:a4:b7:ed:70:3d:2f:5b:a0:2f:
                    4c:59:9d:43:9c:2e:17:39:ce:3b:0b:40:f3:9d:37:
                    b6:d3:3f:b4:78:2b:fd:df:5b:ed:c9:35:75:84:aa:
                    e6:7c:9d:6d:c3:24:50:9a:ae:54:cb:19:f3:5b:d2:
                    ea:d3:df:ba:ec:89:bd:f8:3e:77:39:21:af:ef:f6:
                    22:e3:01:a2:ec:94:13:b0:b8:72:bf:12:6b:1d:35:
                    b8:b2:2e:d7:a8:96:2b:05:b2:51:aa:1f:0c:21:be:
                    df:a6:1d:2b:1e:12:8c:1c:ac:43:5a:a9:98:a5:28:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:E5:F5:F1:11:74:16:FF:84:6D:30:3C:1C:6B:13:85:EC:68:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.210.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:bc:a6:d2:0a:a2:89:f3:96:13:4d:00:4b:2d:bc:1f:e3:
         38:9e:47:e1:a4:72:3e:fb:5f:68:a2:59:75:2c:9a:a0:42:db:
         4e:58:07:1b:06:14:27:f5:fa:54:78:10:fb:46:3a:a6:8d:03:
         a2:99:d5:6c:96:c0:e0:ed:ca:27:84:99:7b:be:1e:59:6e:07:
         bc:34:b3:22:f4:cc:5c:69:40:71:13:e1:ad:2a:9d:32:71:1f:
         cd:13:f7:13:32:53:b7:3f:1d:b8:cc:a0:64:44:6f:dd:49:22:
         08:9e:57:9a:33:49:5a:39:e2:fa:bc:32:2c:69:da:f7:70:17:
         c2:53:e7:62:f3:82:3a:bd:5c:de:59:ba:e0:97:af:ba:c8:c5:
         25:63:47:3b:1d:ea:aa:8c:2a:0d:4c:c3:3b:15:66:3b:3f:49:
         4b:4b:ab:97:8f:fe:b9:29:92:7b:37:a4:ca:5c:0f:0a:dd:c2:
         4d:34:f1:e5:c8:d1:bc:27:7c:28:6c:4f:6c:84:a0:83:0e:56:
         50:ae:85:f5:73:64:87:17:8d:02:55:c2:44:87:9b:f2:54:fa:
         67:bc:79:29:64:6b:43:f6:88:2f:12:a4:1b:40:39:4b:4e:e4:
         de:c0:e8:7f:4e:96:2b:5d:4f:22:20:5a:55:e1:2b:60:73:60:
         cc:77:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:25 2024 by rpki-client on console-ams.rpki-client.org