Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b49fb6e-f834-366a-a602-7df81e860d6f.roa
File:                     7b49fb6e-f834-366a-a602-7df81e860d6f.roa (raw, json)
Hash identifier:          2iXnCNI188pl/h4AmnZn+iJcl0e76z7LctRK/1inznk=
Subject key identifier:   6F:00:28:D3:74:14:D4:AA:24:2E:90:85:B3:B2:13:2F:CA:96:07:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1F9FCAE6ACB7E9A11F8A680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b49fb6e-f834-366a-a602-7df81e860d6f.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.200.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fc:ae:6a:cb:7e:9a:11:f8:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=f5281590-ddfc-4ab6-b06f-a437ae1a1849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:fc:ba:30:97:31:a9:5e:a8:b1:c3:81:1c:
                    12:2b:8e:69:7e:cd:42:40:57:59:62:7a:9d:55:1d:
                    35:5d:1b:76:c8:ff:b9:78:54:6a:24:03:5c:c4:bf:
                    55:41:75:f2:e3:8f:53:c5:25:0a:c0:f7:b5:75:89:
                    d1:b8:31:55:28:70:95:62:5b:c3:3c:10:0a:87:31:
                    d8:cf:9d:22:5a:38:8b:ce:7b:66:d7:6e:2d:0b:2c:
                    8b:6e:47:bb:c7:23:7d:27:b4:31:43:36:a1:15:8b:
                    0d:e2:74:15:8b:05:8b:1a:1c:51:31:bf:1c:19:e0:
                    68:b4:25:6b:5c:67:01:e1:2e:1b:16:1d:ff:52:3c:
                    37:d5:4f:42:8b:1d:a2:17:0b:cd:92:e0:73:1c:dc:
                    06:50:ab:2f:5c:7a:48:e5:cd:5c:5a:0b:c8:b9:ba:
                    e2:0e:5c:1f:3d:21:b5:e2:d5:00:45:aa:eb:9c:4c:
                    77:c4:e3:11:1c:fd:a0:3d:11:70:55:ed:0d:e1:39:
                    be:99:36:03:d1:1e:aa:11:c1:45:5f:cc:bc:31:22:
                    42:48:f7:4e:5d:e8:56:82:b8:e9:15:a6:5f:d2:cb:
                    d1:63:84:f4:06:e3:d8:75:b2:0b:c3:f8:eb:b7:0b:
                    c8:e9:78:88:88:1c:1b:f5:f9:a8:e4:b3:55:f7:6e:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:00:28:D3:74:14:D4:AA:24:2E:90:85:B3:B2:13:2F:CA:96:07:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b49fb6e-f834-366a-a602-7df81e860d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ed:d1:6c:b9:15:b8:31:05:d6:7c:30:30:5c:ca:b8:2d:ba:
         47:e9:7c:d7:eb:9c:a7:e0:b7:5c:ba:eb:e2:53:a9:df:24:52:
         b8:b0:67:d1:bb:28:41:3a:e9:d1:6e:4f:34:df:8e:ce:ec:70:
         bf:f0:de:96:7d:9e:16:40:7a:aa:c6:73:e0:1e:9b:c1:63:cc:
         b4:5c:44:b3:52:88:08:9c:7e:38:aa:48:8c:1a:d0:0c:e4:16:
         38:4d:15:61:a7:f3:95:99:43:31:c6:0e:0b:ea:89:50:be:7a:
         7e:05:41:c4:48:af:64:76:9e:2e:2d:a1:87:4a:1c:ab:7b:d0:
         c4:4c:a1:94:de:f9:a1:8a:e0:a7:d9:62:16:c0:b3:c7:f3:52:
         d9:cd:1f:60:ef:17:90:22:cf:bf:ce:22:c9:7e:ef:b3:36:4f:
         f2:c6:fb:59:ec:ca:d8:3d:15:07:f0:db:4f:80:c3:b5:24:60:
         81:9e:dc:84:d5:d8:31:db:21:9c:4a:c1:f6:2d:b7:70:33:cb:
         da:e6:9c:e8:5e:6f:9c:42:1b:4a:0a:7d:46:3c:5b:e4:da:f8:
         f0:e2:60:84:0a:14:a6:e3:86:6d:01:98:f6:b5:70:69:4a:47:
         e7:16:89:09:8b:92:c2:10:ac:01:3f:16:73:7f:a1:5d:02:95:
         e1:8d:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:38 2024 by rpki-client on console-fra.rpki-client.org