Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fe880b3-ba8c-3072-bf61-78d479481e06.roa
File:                     7fe880b3-ba8c-3072-bf61-78d479481e06.roa (raw, json)
Hash identifier:          8ehdM75vbSPNOLGCgf6xh1Q1hZZ2gJJ11487qsJ0IF8=
Subject key identifier:   2E:B9:A6:D2:26:C5:BE:94:31:B9:A7:26:06:38:99:B3:3F:3A:52:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B051C36A156459999C480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fe880b3-ba8c-3072-bf61-78d479481e06.roa
Signing time:             Fri 05 Apr 2024 01:16:43 +0000
ROA not before:           Fri 05 Apr 2024 01:16:43 +0000
ROA not after:            Thu 04 Jul 2024 01:16:43 +0000
asID:                     22394
IP address blocks:        174.41.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:05:1c:36:a1:56:45:99:99:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:16:43 2024 GMT
            Not After : Jul  4 01:16:43 2024 GMT
        Subject: CN=769f6fdf-7397-4e76-8afd-c76f04202397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:73:87:f7:5d:b5:91:0f:11:8f:35:7e:53:1c:
                    62:93:cc:64:5a:32:a4:2e:7f:74:1a:be:6b:ed:28:
                    32:7a:47:cd:8f:80:dc:de:10:22:ad:ab:86:0e:38:
                    6a:a0:c0:36:9f:c2:6b:38:ce:6a:2c:54:2b:11:13:
                    76:96:31:be:b8:a3:a3:86:fd:98:ca:68:c6:fd:4f:
                    d0:6d:ac:e8:f5:54:8e:96:14:f1:6d:da:9c:a9:7f:
                    85:ac:a3:b2:ee:61:41:ed:16:da:5e:9a:e7:01:8d:
                    44:21:22:33:1e:df:17:3a:84:ec:46:9c:b0:a9:45:
                    c2:c8:9e:d2:90:fe:96:d2:6d:c3:ef:18:78:b4:25:
                    7f:34:0a:17:ad:7f:4b:08:a5:08:5b:a1:f8:05:05:
                    50:ee:81:51:02:03:dd:20:5e:18:32:db:53:67:a5:
                    8e:f7:4b:67:d2:bd:b5:b7:89:72:b6:03:8d:70:57:
                    45:d1:a0:62:f4:4d:93:53:48:28:e4:ae:0f:3d:c9:
                    19:6b:89:11:c1:e4:35:4f:bb:40:11:bd:63:d1:8a:
                    d5:5d:14:45:51:74:a7:b9:71:36:c9:2a:f2:e8:28:
                    9d:7c:b2:10:9e:4c:f2:38:4a:ab:45:19:3e:5e:10:
                    ff:40:ec:8e:9c:8e:4c:6e:32:cb:26:4c:17:5e:2f:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B9:A6:D2:26:C5:BE:94:31:B9:A7:26:06:38:99:B3:3F:3A:52:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fe880b3-ba8c-3072-bf61-78d479481e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:93:76:ff:16:36:7a:87:f7:1c:ec:ea:18:b7:ee:b8:24:8b:
         f7:8a:a3:9a:9d:1d:c8:1f:c1:9c:e2:bd:28:e8:2b:51:8f:38:
         97:4c:ff:0c:37:39:dd:df:e3:01:a6:b3:32:ea:08:53:d9:9b:
         1d:54:69:97:1e:7b:9e:b2:85:cd:13:82:95:01:4b:ab:31:ee:
         f3:35:3a:4c:36:ad:40:df:8f:9d:80:32:e1:6d:3e:c8:3c:f3:
         4c:0f:79:27:91:1f:6d:c0:a7:a9:4a:3d:e3:3c:86:a4:36:86:
         c6:49:24:e2:6f:cf:13:68:1c:08:0b:ae:1d:02:5e:27:0a:a9:
         0a:8c:30:7b:a9:08:25:15:9c:ab:73:7c:09:d8:66:60:2f:ed:
         16:c6:46:ba:9b:c2:c4:16:e2:0f:89:18:3f:9e:eb:1c:ee:ec:
         45:8d:9f:fa:d8:fd:e0:85:c5:87:1d:ea:9c:ba:fe:f2:95:37:
         c7:d2:83:42:f7:2c:0a:1b:bc:3d:74:49:84:33:b0:36:ac:fd:
         20:b6:52:9f:47:b5:37:85:79:12:54:04:d5:2d:d6:10:6f:a6:
         36:62:07:e8:88:e3:c2:c5:90:a6:ea:13:6d:79:7a:1f:49:9f:
         0c:13:62:fe:2c:9f:8d:f6:85:0c:1a:c8:a8:eb:bd:06:b3:c2:
         6c:8e:e4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:25 2024 by rpki-client on console-fra.rpki-client.org