Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70a54bc9-b9d7-33b1-8059-c4add53b5db7.roa
File:                     70a54bc9-b9d7-33b1-8059-c4add53b5db7.roa (raw, json)
Hash identifier:          blQqx0z4NZhgG5QybFM2Rz0yAucBeOnxzxVTpfn401M=
Subject key identifier:   59:80:22:19:CF:86:3F:A6:4A:B7:D7:0D:96:1C:7C:CA:26:67:AA:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835EB0A950C90BE65196680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70a54bc9-b9d7-33b1-8059-c4add53b5db7.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.248.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:eb:0a:95:0c:90:be:65:19:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=27f90b92-fd43-4759-9b17-fb80bc3b4d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e5:d9:b1:40:ce:b7:8f:47:74:ba:c7:38:f5:
                    27:75:cc:b6:4b:a4:79:36:99:28:f9:82:bf:ba:82:
                    d1:ca:51:3c:0a:b3:1f:8b:51:32:49:43:c1:9b:8d:
                    72:ac:cc:83:c0:59:46:34:be:20:e8:1c:8b:57:6b:
                    a1:ca:19:61:2d:3a:00:d3:00:1e:7c:b8:b1:13:32:
                    2c:7f:8c:a1:07:46:2a:91:c2:ca:b3:e9:93:0f:1b:
                    9b:c4:ab:92:c9:2b:fe:c7:cf:52:66:3d:6e:e8:5b:
                    39:0d:28:5f:8e:a2:4a:56:54:f8:7f:c1:52:2b:02:
                    e5:b8:75:37:d8:b2:5f:95:26:c7:b3:ba:a2:4c:b1:
                    f8:19:82:02:52:fc:a4:a8:cc:0c:06:be:34:ff:5e:
                    b7:18:99:87:a7:0b:f1:45:eb:c0:1c:0e:aa:2d:56:
                    1e:03:07:f6:3a:76:29:d4:c8:92:f8:38:f6:6f:c8:
                    08:e7:96:0d:26:20:f0:4f:1a:12:61:0b:15:ca:8d:
                    ca:fa:cc:8e:05:52:22:c8:d0:9b:8e:f8:4a:36:5e:
                    a4:39:13:5d:9e:fd:54:51:13:d9:ab:0b:b9:06:2d:
                    cf:d3:f6:f3:1f:49:6a:06:6c:f0:17:04:51:c5:60:
                    1c:4b:c2:7d:a9:d0:86:fd:45:9b:48:6f:76:d0:1b:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:22:19:CF:86:3F:A6:4A:B7:D7:0D:96:1C:7C:CA:26:67:AA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70a54bc9-b9d7-33b1-8059-c4add53b5db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.248.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:99:eb:7d:79:80:eb:f1:a8:f0:bb:e2:ad:23:2c:e2:ba:0f:
         e3:8a:68:81:41:83:41:e2:16:e8:38:15:95:0a:10:c0:9c:4a:
         13:9b:18:0a:d8:4f:fa:61:df:54:b6:63:d5:e2:1b:d5:d2:d8:
         0f:be:a4:c1:6f:5f:a1:e6:87:8a:e4:b6:eb:73:1a:ab:ac:a4:
         3f:30:bb:be:1d:48:ee:1c:ef:c2:66:dd:5a:4a:ba:c1:e3:6e:
         58:a0:ad:6e:cb:5e:20:d3:a7:97:66:94:b7:5d:d4:56:3a:2e:
         d3:d8:6e:90:16:f0:d7:f8:ed:7d:fa:11:70:1e:a6:0d:c9:ad:
         bd:c6:0c:f1:69:09:b1:99:91:a3:c6:fb:fb:4c:35:83:ac:fa:
         b6:da:ac:60:13:1b:26:a1:03:30:06:3f:29:c4:87:59:0b:19:
         f8:c2:62:d9:d2:b1:bb:5f:9c:69:85:be:fd:55:f3:48:3f:fb:
         2a:93:94:1f:b7:ef:c8:7c:49:3b:77:c8:eb:76:73:a0:fa:4d:
         22:2b:91:9b:29:d6:3b:bc:08:f6:1f:90:27:ba:fe:ac:11:c9:
         5e:1a:7c:de:df:d7:78:31:0b:1f:8e:f6:ed:3e:f3:46:5e:45:
         dd:b6:b5:be:1a:7c:9d:e0:61:3c:37:d8:ae:f9:6e:fa:86:6b:
         5d:62:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:36 2024 by rpki-client on console-fra.rpki-client.org