Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa
File:                     52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa (raw, json)
Hash identifier:          /S8tInOuz5v79kvOAvJe5VPDxCbtpqM72TQZNrViYbs=
Subject key identifier:   0E:23:BF:B7:86:95:4C:04:DC:0C:8B:A9:B6:BE:1B:5E:44:C5:5C:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E449C9EABCDD3A4F02A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.239.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e4:49:c9:ea:bc:dd:3a:4f:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=9812ceec-53ae-4b6d-9849-8ceaddd224ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:7a:25:17:13:63:5b:dd:78:f8:90:b9:19:
                    33:77:57:89:c3:f9:4b:d7:1d:14:56:b1:e3:fb:97:
                    2e:9c:4a:58:fd:47:27:4f:f8:ff:5c:fe:47:2b:f4:
                    81:be:76:9b:1f:42:50:cd:31:72:af:df:50:23:d5:
                    bf:90:e3:f5:4c:4d:c0:c8:0e:58:ff:82:fc:49:e4:
                    1d:c7:7b:e6:c5:fb:e6:b2:dd:29:51:7d:15:74:79:
                    79:33:ce:7e:3d:86:d0:30:52:bf:65:80:0a:68:27:
                    a1:6a:a1:06:70:69:e8:de:9f:ab:1f:09:a1:c2:c4:
                    62:e4:1c:1b:99:a7:6a:75:a1:00:a0:04:89:f9:c9:
                    40:4e:75:82:bb:66:40:ec:f0:17:38:79:7b:f8:ec:
                    ae:a3:9e:ca:78:31:dd:a5:e3:12:47:23:c8:fb:2d:
                    cf:21:25:f9:a8:50:87:bf:b8:f8:6c:2f:98:38:6d:
                    c7:86:b5:aa:e6:5e:75:b8:a2:19:47:31:14:69:e5:
                    b8:8c:33:b0:b0:c3:43:67:bc:57:8a:88:a3:d6:16:
                    a4:e4:c4:df:26:15:08:d1:50:90:79:23:f2:11:8e:
                    fd:37:1e:66:11:23:f2:98:25:cd:fb:9f:63:cb:17:
                    5a:3b:ff:56:23:13:32:e7:bc:7c:a0:86:8f:36:77:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:23:BF:B7:86:95:4C:04:DC:0C:8B:A9:B6:BE:1B:5E:44:C5:5C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.239.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b5:48:83:9b:8a:9b:99:e0:3c:bf:76:a6:92:aa:c4:04:b5:
         e0:db:ba:a8:60:68:47:8e:4a:00:ae:de:91:f3:0f:5f:63:03:
         a7:f8:01:9b:f8:bb:c2:94:65:8c:55:8f:2e:ec:32:e1:af:4c:
         ac:7e:97:2c:79:ab:7e:67:10:ad:a5:7c:5b:f9:a6:28:a5:fc:
         a9:c2:e2:f1:c5:0c:db:8d:c9:d7:c5:1a:b1:2d:ab:ad:4b:c3:
         e1:2e:e3:b9:35:03:ab:3e:c6:40:6d:19:64:f9:6e:68:97:05:
         42:72:09:0c:b7:ce:9d:ca:73:59:b8:14:2d:2f:dc:03:36:5a:
         f7:28:c5:eb:fa:48:ec:f3:de:75:f6:d6:9f:db:c8:43:5f:4e:
         5e:8c:3e:e0:18:2a:c3:b5:c5:05:92:89:fa:ff:fe:e2:7e:78:
         f3:b5:95:29:e9:ce:0f:b8:e3:9b:ba:0a:08:a2:f6:fa:bb:b3:
         f0:31:92:08:3b:ed:f2:cd:3a:8e:3c:78:1d:3e:44:63:6b:36:
         e6:8a:64:d3:79:4f:6a:24:e8:3f:e3:e1:51:31:1c:d7:9e:e0:
         0e:2f:67:3f:c0:a1:13:1b:5b:3a:e5:1c:b3:3a:dc:62:e9:40:
         c4:f9:c6:d6:db:9f:6b:3a:6e:eb:bd:84:80:ce:57:4b:4d:fd:
         ea:86:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:30 2024 by rpki-client on console-fra.rpki-client.org