Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa
File:                     81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa (raw, json)
Hash identifier:          qctBxh4ZnZLGS9OmEahlY0XNx0UUHZUSCzfPnnwoR4Q=
Subject key identifier:   0A:3E:60:33:7C:69:DA:F3:FC:33:2E:FC:34:C1:67:EF:A4:7F:4D:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D2E0A682039D65E7DE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.229.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d2:e0:a6:82:03:9d:65:e7:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=47f9ac0e-ca99-44b5-aeeb-fff15e94502c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:fb:fd:fb:9b:42:27:7d:98:c0:b4:82:79:
                    78:16:d2:f1:81:b3:9f:52:31:df:33:7d:38:6d:0e:
                    3f:da:29:26:05:11:fc:7a:d0:8d:d8:49:74:dd:a0:
                    8e:b4:07:99:5d:dd:51:52:f4:31:e0:bb:ad:8d:48:
                    62:9c:d4:c3:9e:ff:1c:ec:c6:2f:83:f9:9c:e6:bc:
                    eb:25:e2:24:b9:0d:06:5a:6d:af:91:4b:90:83:11:
                    6d:08:15:bf:cc:94:16:58:93:11:17:bb:82:47:61:
                    ee:2d:dd:83:53:5d:77:a0:3b:fa:58:5a:69:ed:29:
                    64:df:89:0b:20:e8:92:74:d9:14:60:f5:bd:1f:af:
                    4f:97:3e:de:fa:f9:ee:2c:3f:9a:cd:a6:2b:0d:95:
                    be:79:e2:10:14:b5:e2:83:ca:4f:42:e9:64:df:47:
                    62:9e:76:05:4b:16:16:a8:40:9f:49:e2:a4:0c:22:
                    ee:93:72:f2:0d:c5:4a:bf:d5:b8:11:29:d6:a8:4d:
                    40:ce:6f:d3:27:7a:4e:3e:90:d7:97:25:e7:08:29:
                    c8:6f:2c:25:13:c5:f2:37:46:3b:df:97:0b:84:7d:
                    7d:b2:10:3e:02:58:00:9f:b6:53:61:02:d9:8c:2b:
                    79:01:f6:8a:ff:85:9d:3f:63:43:1a:07:b1:f1:a5:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3E:60:33:7C:69:DA:F3:FC:33:2E:FC:34:C1:67:EF:A4:7F:4D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.229.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:34:0b:73:dc:3f:51:d9:41:7c:f8:ff:6f:55:4b:5f:7f:6f:
         fb:32:8e:3d:0c:69:c1:b3:b0:78:36:a1:f8:bd:f6:8c:bb:89:
         bb:46:9a:93:04:75:a8:47:42:ea:07:a6:1a:58:4c:0f:1d:fe:
         aa:77:0c:b0:22:e2:7f:af:5d:63:56:a3:e4:6f:2e:15:58:6f:
         de:80:2b:d6:aa:11:8f:e1:07:9d:fa:1b:56:d9:fa:f6:ea:12:
         11:8f:29:ad:94:1c:f8:2f:87:c7:dd:6c:4b:4b:dc:ab:37:1d:
         66:e1:b7:d6:21:a0:8b:94:67:1c:ba:8b:9d:ea:03:eb:a2:8f:
         69:4a:a1:91:aa:f4:a8:ef:75:17:ff:52:ce:bc:5f:bb:86:b2:
         b3:31:a5:57:e8:65:7c:d4:67:e5:32:cf:7e:eb:02:f7:0a:a6:
         ec:a2:28:03:ab:d9:a4:86:9a:5d:99:f9:b2:e6:ee:f0:68:b8:
         07:ec:da:cf:d7:d6:bd:07:05:6e:8d:d4:94:b1:99:dd:b7:08:
         80:87:18:59:18:15:7a:84:c0:69:fe:11:ce:9e:43:24:40:94:
         a5:38:d6:b3:49:b7:c3:97:e7:0a:8b:f0:f4:44:01:90:e8:82:
         37:51:b4:64:3e:7f:d4:21:bf:06:1e:ef:5d:13:bc:f5:27:f3:
         f7:a9:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:00 2024 by rpki-client on console-fra.rpki-client.org