Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa
File:                     8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa (raw, json)
Hash identifier:          QiEFN8yBEUfHKFLQxfiE2TmUBloFbGPk7dkET8pL9Hc=
Subject key identifier:   B5:1F:06:FA:0E:89:DA:CB:84:C2:3F:D8:43:84:7A:E7:81:36:38:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B25CC9EF81BA6534BED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa
Signing time:             Fri 05 Apr 2024 01:16:59 +0000
ROA not before:           Fri 05 Apr 2024 01:16:59 +0000
ROA not after:            Thu 04 Jul 2024 01:16:59 +0000
asID:                     6167
IP address blocks:        174.42.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:25:cc:9e:f8:1b:a6:53:4b:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:16:59 2024 GMT
            Not After : Jul  4 01:16:59 2024 GMT
        Subject: CN=5f107595-a044-460c-8f92-f4822d36e688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fe:20:95:59:7d:86:bd:b9:b5:b7:04:f5:e7:
                    63:4e:a5:1b:28:1f:9f:e3:e8:4a:76:e3:ea:53:ab:
                    bf:ab:03:30:eb:75:09:a7:75:48:61:4a:cd:9c:a9:
                    20:c7:32:df:ee:0a:0c:2a:28:ac:06:49:5f:be:37:
                    a5:eb:83:99:18:6f:75:c6:a6:b0:69:06:c7:99:ec:
                    d4:3e:52:9d:f3:cc:33:7e:3b:a0:88:2e:b6:32:24:
                    17:6f:c8:d2:d3:90:38:25:77:55:0e:90:d6:31:28:
                    61:15:87:8f:1e:f4:75:0c:cb:97:be:29:84:ed:61:
                    5b:81:4e:55:10:6f:a5:f0:1d:f3:fc:5d:1d:dd:8d:
                    6c:bf:95:38:d3:0d:ae:40:ad:a9:b7:e0:c9:5f:3e:
                    c8:0d:6b:b8:c4:38:bc:96:1e:88:a3:01:b0:dc:d2:
                    90:5e:2e:45:6b:4a:ee:65:9d:49:93:13:d2:ee:c9:
                    58:e9:ad:b8:7e:2e:08:7b:9b:43:f0:6a:32:20:ef:
                    42:ae:ab:45:76:55:22:a6:86:22:fb:31:17:a6:2e:
                    e7:c9:20:c9:2c:e1:2a:42:16:89:b5:3b:50:ee:b0:
                    6d:51:6b:0e:83:d4:d9:75:1c:ba:8d:70:27:a5:a2:
                    bd:5b:cf:42:76:4b:20:57:09:95:0a:ce:22:3a:3f:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1F:06:FA:0E:89:DA:CB:84:C2:3F:D8:43:84:7A:E7:81:36:38:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:5f:49:eb:e7:68:ce:6b:f8:ff:cf:e8:d4:2a:84:a8:79:
         e9:c4:b0:bf:1f:dd:94:98:54:77:d3:74:7e:17:fd:ed:4b:b5:
         ca:5c:bc:15:87:9c:e7:6f:18:41:f4:7f:91:c6:19:6c:9b:a6:
         ec:9c:e5:d4:4a:14:67:5a:07:0b:ad:fb:eb:bc:c7:36:37:70:
         bc:bc:d1:78:d5:24:41:a2:81:e0:35:72:79:57:f5:b2:54:21:
         9d:f8:bf:0b:9f:7e:80:0a:9e:ed:0c:33:aa:38:a2:e1:93:c6:
         a9:07:39:29:b4:ab:08:39:07:09:5f:c8:3e:24:f1:49:53:1f:
         a4:7c:35:3b:48:f1:f1:51:7e:21:e7:1f:5e:d0:19:56:93:59:
         83:c3:2c:75:13:de:39:f5:5a:a2:58:bf:60:88:d4:a9:95:bb:
         a1:b5:88:7b:9f:70:e5:55:4c:22:29:08:04:91:e5:a8:18:39:
         f3:4f:c8:fe:bf:b7:a5:13:5e:de:ec:ab:69:1b:63:32:ed:5b:
         4c:3e:19:00:50:36:f5:19:e1:41:0e:24:ce:f7:d8:fa:1a:3d:
         db:35:4c:06:e7:a2:86:da:9e:c8:9d:58:e9:3b:cf:76:fb:b3:
         48:bd:5e:57:4d:fa:ae:5a:57:ae:a8:6a:c0:f3:3c:41:6c:5e:
         2b:c3:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:37:19 2024 by rpki-client on console-fra.rpki-client.org