Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79550968-e5ed-35a3-8f0f-89f1503234b8.roa
File:                     79550968-e5ed-35a3-8f0f-89f1503234b8.roa (raw, json)
Hash identifier:          47Gn4NGCnQXvvIegzUV1mwGfNIbd850+Q0SRP0GfoZA=
Subject key identifier:   45:8B:9D:61:4A:5A:63:21:F8:F4:F7:35:AC:E4:D5:E4:D4:EB:2E:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA00EA98562E24F7C0D9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79550968-e5ed-35a3-8f0f-89f1503234b8.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.206.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:00:ea:98:56:2e:24:f7:c0:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=55430dd5-3a3b-4b0d-8466-025ac2aa9f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ed:d4:b0:44:34:71:5a:22:45:e0:95:c1:57:
                    21:8a:7c:38:a7:d6:4b:4a:fc:fa:8d:79:99:06:86:
                    17:88:a0:7f:31:8d:88:e2:be:c3:ee:17:44:58:70:
                    61:fa:83:86:d7:25:95:dd:82:36:b5:b3:55:47:5a:
                    28:55:27:20:84:ef:a8:55:e6:cd:e8:40:fb:1c:4c:
                    79:52:13:73:b1:0e:23:42:74:f4:51:84:a5:b0:28:
                    60:76:2b:ea:b0:a0:1b:bc:6a:f0:40:fd:70:9e:7f:
                    49:aa:85:e8:e7:70:0b:e2:6a:82:24:30:8d:f2:be:
                    9e:8c:09:1c:53:83:dd:ea:40:cc:92:4f:80:1a:e7:
                    34:e8:b2:73:29:c5:6e:b4:3a:e0:ae:29:e0:ef:38:
                    3b:d8:c2:1a:aa:f4:6b:5e:cb:a0:a4:db:1d:30:17:
                    c7:93:c1:e0:20:3d:72:92:5d:5c:c8:69:9f:13:57:
                    5b:95:d1:0b:55:05:f7:93:75:ef:96:5b:eb:b2:51:
                    67:fa:bf:63:0c:d9:04:7c:b4:e7:da:aa:a6:6e:f4:
                    93:13:af:22:9e:0b:82:82:9b:c1:87:c4:82:be:28:
                    b2:7f:0d:c5:d7:22:1d:07:51:35:3d:d7:fc:02:bd:
                    76:a5:b2:c4:9a:c5:8a:67:57:14:5a:7c:1c:8e:81:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8B:9D:61:4A:5A:63:21:F8:F4:F7:35:AC:E4:D5:E4:D4:EB:2E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79550968-e5ed-35a3-8f0f-89f1503234b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.206.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:53:2a:2c:ae:a5:76:4a:41:42:51:6d:83:d7:e7:e4:09:5f:
         a3:fa:40:86:96:89:fe:dd:ed:e7:e5:8e:22:d5:6e:1f:55:38:
         14:28:c9:30:dd:95:6e:2d:86:d8:ba:c5:26:c4:6f:34:dc:12:
         dc:e3:d0:43:d0:56:4d:c4:a4:87:66:41:73:a2:1d:d2:e8:d8:
         97:42:85:65:9a:a7:e7:ba:05:43:28:42:e4:88:b0:27:2f:9e:
         48:d2:d5:dc:ff:12:30:d6:07:fb:d7:cf:c3:d8:94:a4:d0:12:
         a5:c5:d7:2e:8c:33:06:da:cd:00:87:ee:83:6f:f3:da:6e:d8:
         0c:d6:0f:28:4a:f6:47:ed:b6:c7:af:e9:0c:64:5e:d1:37:42:
         b9:ad:10:53:b6:dd:79:3b:1c:c8:74:dc:35:81:ef:e1:35:05:
         d9:58:a4:fa:1e:89:ea:61:4d:1e:c7:0f:95:fb:0d:b7:4c:11:
         3a:e1:c5:b4:f0:4b:7f:3f:d8:ba:a4:20:47:3e:d5:bb:7d:a5:
         9d:5b:c9:24:e9:52:4a:c6:0c:ef:08:c3:64:08:c9:22:ae:c8:
         15:79:f9:24:50:ec:18:6c:fa:e5:53:d0:b6:ca:34:ef:3c:2a:
         98:a3:f5:90:ff:03:35:b1:fa:f8:ab:32:ee:e5:87:d4:3e:c5:
         f3:62:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:38 2024 by rpki-client on console-fra.rpki-client.org