Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bab93c-4aee-343c-ab40-14d9dae73731.roa
File:                     70bab93c-4aee-343c-ab40-14d9dae73731.roa (raw, json)
Hash identifier:          3QE4Q7ujba81eLkMTRjNZLXaHJ3AB5+AYZU41Xhaxmc=
Subject key identifier:   53:7E:C0:1B:04:32:82:E4:1C:9B:08:D9:6F:CF:5D:D7:A5:06:A1:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0C3FE7FCD0C6FC34F450
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bab93c-4aee-343c-ab40-14d9dae73731.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.219.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:0c:3f:e7:fc:d0:c6:fc:34:f4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=c3ae404b-9c12-4efa-a359-f8a276c0c9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:fe:0f:45:d2:c2:01:ee:f1:11:ec:a1:f6:
                    05:f1:cf:13:b3:25:17:d3:28:c0:f9:5f:f4:35:22:
                    41:37:3d:6f:25:21:29:48:c9:da:ea:ca:15:64:d6:
                    27:98:23:ac:0f:12:a5:8f:b6:a6:be:da:07:8f:99:
                    cd:08:b6:af:f3:e4:41:7b:29:ee:05:04:9c:c3:72:
                    45:d4:e4:28:60:fa:ce:9a:cb:79:34:05:b0:f0:12:
                    74:04:15:1e:ba:1f:38:24:1c:96:e0:7b:0d:5b:92:
                    4d:bc:1d:eb:ee:4a:dc:d7:70:49:33:d7:ca:59:71:
                    99:22:fb:1b:99:0f:35:73:98:57:11:cd:ce:34:07:
                    79:4a:a0:f4:ed:26:7d:b9:f9:53:fa:48:65:9c:e5:
                    c2:de:ee:a8:ed:1e:10:2d:bf:5b:cf:9a:2f:33:25:
                    67:3c:c2:78:0a:5f:07:8a:7d:0e:02:ec:9a:93:30:
                    ad:10:2d:de:4a:1f:bd:a5:2a:56:0f:cd:2e:72:16:
                    4e:d5:5d:9d:fb:38:3c:69:d1:82:f9:1f:49:52:aa:
                    2f:48:47:aa:b7:b8:5c:20:c7:08:43:d2:9c:7c:0d:
                    89:15:27:6d:3d:96:d2:fb:d5:a4:c4:bc:6d:30:4b:
                    b5:94:11:30:1f:70:03:bb:05:e5:b8:6a:a7:f3:a7:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7E:C0:1B:04:32:82:E4:1C:9B:08:D9:6F:CF:5D:D7:A5:06:A1:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bab93c-4aee-343c-ab40-14d9dae73731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:9d:87:91:cc:f3:d9:65:76:a5:6a:13:29:1f:98:c3:63:
         e4:60:1a:97:47:37:69:eb:cf:e8:aa:10:c7:5c:25:90:83:11:
         8c:e4:9e:65:df:5b:d1:0f:b0:32:09:89:ff:76:70:ba:e4:d0:
         33:64:e9:b9:49:76:be:a1:04:9b:f7:db:70:ce:66:ec:14:d3:
         60:6b:58:ab:8b:8e:f3:34:05:49:a0:d0:f0:bb:ce:d3:fa:ed:
         17:bd:fa:a2:cd:c5:d0:bc:03:10:16:40:15:2e:d9:3f:f0:47:
         e1:3b:98:01:91:19:46:90:6e:e8:a6:87:94:7e:c6:f4:72:ce:
         44:4a:1f:0f:0f:6c:29:fe:a0:15:ea:3c:d7:32:2f:f6:25:90:
         c0:50:77:dd:fb:a6:0d:92:e3:21:88:6e:e5:f1:5b:91:93:f9:
         4a:c2:02:f1:6b:b8:82:97:e2:95:6b:e8:f2:11:ce:5c:f4:bd:
         a6:0d:ae:f5:58:31:76:c0:5e:12:f9:36:b1:e5:21:2f:f5:53:
         1b:82:7e:49:76:a1:b1:f9:15:fb:6f:ba:ee:9f:43:15:ad:89:
         5e:57:b7:2f:56:f4:9a:cc:c3:91:e4:7f:2a:36:5c:36:65:36:
         6e:ab:18:b3:c3:e3:95:7f:d1:19:f2:43:fa:c0:cc:fd:f1:4b:
         cc:2c:5f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:34 2024 by rpki-client on console-ams.rpki-client.org