Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72c24aa6-2db6-3c55-8b37-dc58be77faaa.roa
File:                     72c24aa6-2db6-3c55-8b37-dc58be77faaa.roa (raw, json)
Hash identifier:          GYhqS0Ww3FRxItjGCq/BHT1iWMFjjQPn9Uthg9shPqQ=
Subject key identifier:   43:27:E3:33:33:1B:1C:EC:CA:A6:FF:96:7B:CF:F1:9F:3F:F1:53:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E68981479F80C3BA1440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72c24aa6-2db6-3c55-8b37-dc58be77faaa.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.241.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e6:89:81:47:9f:80:c3:ba:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=ee2463c2-2196-4458-9eb5-0516c05143f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:ce:20:7b:8d:71:37:6b:44:11:fd:f7:a3:
                    6d:f9:df:1b:a8:9e:b5:52:fc:cc:ce:d6:27:66:b6:
                    c4:f5:65:cf:9d:02:e1:4e:72:b4:bd:d2:85:15:42:
                    f6:bb:e9:7f:b1:c0:55:bf:87:25:bc:33:e3:7a:ea:
                    f6:f2:96:1e:3a:10:ea:dd:fc:80:37:da:47:e9:ac:
                    58:cb:83:2c:a1:c9:aa:8b:94:06:b9:d1:38:4a:77:
                    40:ed:f4:a3:f7:6c:d3:1a:e4:67:fd:ac:3d:3b:3d:
                    39:aa:90:7d:da:cc:6b:15:d6:8d:aa:30:d1:c1:b9:
                    48:63:59:ce:7b:4d:65:ed:77:c1:84:27:82:4f:98:
                    94:23:25:58:df:12:8e:3b:e5:e5:07:38:7c:04:64:
                    ce:28:b9:ad:4a:33:2e:dd:8e:c0:04:c8:ba:5d:c2:
                    78:25:11:4b:6d:12:68:3c:d5:5e:91:6e:95:81:ae:
                    27:d2:ed:24:f5:22:d6:54:fb:ee:cb:1d:bf:4a:f7:
                    f2:93:79:ee:c3:91:30:f6:42:0c:49:aa:91:b6:f0:
                    f5:e6:67:65:81:cc:b4:45:70:bc:59:9a:9a:26:ab:
                    6f:0a:97:e1:99:ce:de:98:55:56:a0:95:70:41:31:
                    bb:6c:8d:6f:3c:0c:18:db:2f:37:7c:86:56:a3:f8:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:E3:33:33:1B:1C:EC:CA:A6:FF:96:7B:CF:F1:9F:3F:F1:53:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72c24aa6-2db6-3c55-8b37-dc58be77faaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:a9:c7:ac:36:2a:69:92:eb:22:50:9b:27:49:9a:44:ab:cf:
         9e:d3:18:ed:7a:75:86:52:c1:ec:d4:1e:e0:d3:11:91:32:2a:
         43:8d:38:54:33:70:1d:56:b6:c7:2f:0c:e7:31:07:f4:4c:ad:
         6e:15:5d:ae:47:da:79:9c:fd:bf:6f:5b:02:66:f6:28:19:c3:
         26:b8:0f:13:98:f5:4a:13:a6:fa:13:4e:8f:7a:00:d4:83:7a:
         b0:2c:36:28:fc:17:d1:05:0c:0a:b5:8d:b6:1e:21:1b:c4:41:
         dc:e8:0e:ec:79:41:5b:d2:83:cf:41:6b:7a:35:d0:96:7d:95:
         94:ef:63:5c:d4:27:f9:37:c7:45:07:6a:6f:4a:ed:fe:a6:b0:
         a0:09:7d:de:ee:52:dc:4f:ef:61:9c:c1:6d:1c:fb:e6:64:9e:
         90:15:a3:94:04:95:e4:a6:37:8d:3f:37:79:6f:f2:de:80:6e:
         64:4c:d4:32:2e:27:49:a9:00:7c:3f:70:e6:08:00:a9:3f:6f:
         e5:f9:34:07:6f:2d:62:58:4e:fd:79:bf:0d:2b:8b:93:c6:88:
         c3:f3:04:7f:e7:3f:75:8d:60:c6:67:0e:b7:18:5b:81:ba:3e:
         d9:4f:87:f6:00:5e:08:00:a1:32:ba:c4:b5:6d:bf:a3:c7:b7:
         9d:c3:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:55 2024 by rpki-client on console-fra.rpki-client.org