Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82aedb2e-5e93-39c5-9815-a90a931a3145.roa
File:                     82aedb2e-5e93-39c5-9815-a90a931a3145.roa (raw, json)
Hash identifier:          p8H7mGIf39pnHqxKQfYi9emKML0DQ+PmGsB/HNghRc8=
Subject key identifier:   41:34:9D:96:9E:7D:1C:36:48:B3:EC:19:11:CA:A2:DE:8F:FA:6E:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0322BB615C667F43BE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82aedb2e-5e93-39c5-9815-a90a931a3145.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.213.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:03:22:bb:61:5c:66:7f:43:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=6697abcb-9c1e-48d2-afb4-81a4b7a34d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:fb:d2:fb:d9:f3:f6:de:92:f3:66:3c:81:
                    c6:e8:bd:8b:14:ca:f1:fa:a5:eb:e1:76:16:5d:1a:
                    ae:6f:32:01:56:c9:a2:00:ab:03:e6:ce:52:b4:c1:
                    7b:cf:76:35:ae:76:db:9f:bc:e0:83:2d:3f:f5:e8:
                    a0:91:35:10:b5:d3:08:70:b3:6c:60:76:22:6d:fd:
                    ef:07:11:97:03:0d:9f:3f:4e:a2:94:e0:87:db:60:
                    b5:c0:a9:3d:1b:d6:9c:eb:fe:68:fd:5b:bd:38:9b:
                    d3:58:d1:95:c5:44:13:de:22:4e:ae:ad:73:77:6f:
                    68:9f:97:34:4a:aa:44:f3:2b:4d:8e:e7:34:a3:fc:
                    a0:6b:f3:09:c6:b6:16:23:53:9a:50:11:89:7a:53:
                    51:be:f7:f2:ba:95:7f:39:28:70:e3:31:16:55:55:
                    e4:82:2f:b9:ed:0a:cd:6a:f3:6f:8f:dc:fb:f9:16:
                    25:d8:d6:f2:e2:81:31:af:0b:ec:6c:65:c4:42:65:
                    35:b7:9b:dd:c6:83:0f:87:72:e3:02:b3:c0:e1:40:
                    27:c9:f7:c4:5c:05:6a:3a:e1:e5:6b:26:77:fa:3b:
                    b3:69:74:ab:d7:8d:e0:cf:26:dd:9b:5d:6a:53:e0:
                    a7:2e:09:42:f7:e8:89:f6:b6:92:e1:a4:c7:27:a0:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:9D:96:9E:7D:1C:36:48:B3:EC:19:11:CA:A2:DE:8F:FA:6E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82aedb2e-5e93-39c5-9815-a90a931a3145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:5d:63:92:38:32:4c:e9:c0:c1:a9:0a:b0:2d:13:3f:e2:
         b7:cd:90:3a:04:e4:a7:ca:2d:63:1d:d4:74:de:b5:a8:70:96:
         c9:bb:09:99:96:62:05:8f:62:5a:c1:aa:6a:84:ef:36:5f:4f:
         88:86:48:e5:f6:e9:96:48:69:35:3d:2a:30:9b:a7:e1:33:5f:
         37:e3:1d:49:78:b5:9b:10:f3:80:6c:57:ee:27:ba:6f:cf:f0:
         c4:b0:0b:74:34:1f:40:22:e6:7c:5e:df:7c:48:56:6c:f5:5c:
         58:7f:4d:05:59:f2:0f:eb:40:ba:ea:90:30:8d:5d:4a:ec:9d:
         89:37:49:81:31:e5:a8:4f:77:34:52:7c:cd:b3:5e:f1:71:8a:
         98:97:87:89:d4:3c:90:d8:46:07:a1:cc:74:8f:b9:ee:53:c8:
         08:51:3c:cf:c7:cf:da:0b:8b:7c:5a:4d:ac:cc:3e:0d:80:15:
         ac:b0:39:31:98:53:60:04:35:70:f4:a0:18:01:ee:5a:d8:18:
         18:15:54:0b:96:8b:7d:27:f8:2b:2d:cf:c4:e7:71:8c:0a:fa:
         34:2f:3d:75:5e:5d:4c:bb:fe:35:1b:42:db:0c:fc:06:f6:7c:
         3f:4e:da:99:6f:52:4f:2b:13:ca:f4:b6:44:38:37:07:fa:6d:
         41:4d:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:40 2024 by rpki-client on console-fra.rpki-client.org