Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa
File:                     8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa (raw, json)
Hash identifier:          GSR145S3MIYXu27UpMxhKueyVU2csoUvZbYIrY9AoZo=
Subject key identifier:   4F:1B:55:1D:76:ED:2A:8A:0E:5A:37:49:AF:EC:44:65:D6:06:B2:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847012051B920E8BFEB3E438600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.218.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:51:b9:20:e8:bf:eb:3e:43:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=aa9f9c68-d986-4f1b-9d83-6c3f996c4733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:11:cc:1c:4e:92:d2:38:a5:36:e2:6a:c9:
                    71:0a:0c:9f:6f:a5:45:8b:f6:54:9b:46:bb:96:dd:
                    c6:05:bb:b9:9b:9c:8d:99:e6:d3:4b:b4:9a:3e:76:
                    05:49:81:fe:d9:88:9d:74:69:29:3c:ae:ed:46:fa:
                    82:ba:24:61:9c:47:24:21:d2:11:da:be:b8:20:d1:
                    f9:29:f4:7b:6a:6d:7d:5d:ec:96:f3:33:51:f6:7b:
                    b3:d4:84:f4:e2:d2:e6:24:83:1c:85:7b:7e:9c:c7:
                    69:e4:f4:8c:84:e9:f8:c6:36:0f:c6:9b:e2:b9:85:
                    80:fa:40:ba:84:5c:10:e1:50:03:0f:fa:ad:c4:06:
                    93:d6:42:af:e2:da:02:bc:98:9d:4f:2b:33:c2:4a:
                    5b:aa:f5:e0:11:2b:58:d5:99:c6:f6:60:ec:60:84:
                    bc:cf:de:25:d9:c4:19:43:34:5a:17:1f:c1:53:c9:
                    12:55:5e:5c:6a:96:7f:b2:00:88:e7:6f:08:ec:db:
                    0b:a6:91:eb:f5:ff:7a:91:41:8b:bc:da:45:83:ac:
                    62:1a:e8:6b:f2:5d:41:1a:1e:a5:b9:b2:0d:1c:95:
                    0a:d4:c5:36:f2:c6:ee:15:0b:f5:b7:5b:71:f0:83:
                    44:8c:79:ff:96:58:24:40:2c:b7:81:ce:96:38:60:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1B:55:1D:76:ED:2A:8A:0E:5A:37:49:AF:EC:44:65:D6:06:B2:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:04:fd:dc:ee:e1:9c:6d:fd:73:ec:72:51:2a:4d:ac:8a:93:
         47:70:21:ba:f8:a4:d4:c3:86:20:01:30:7c:04:99:49:4f:aa:
         ec:1b:05:f0:b8:ad:8b:d6:17:46:ae:ac:4f:b6:75:af:54:c0:
         05:3a:d4:29:95:9f:a3:44:eb:2a:71:82:ff:a8:0b:c2:10:7a:
         6f:0d:87:20:f7:34:bd:b6:42:b4:3e:c6:f2:7b:1f:68:1a:b5:
         b1:22:2b:86:ee:64:d3:ae:77:3a:95:07:76:80:f6:c4:c3:93:
         94:43:06:e5:61:49:99:f4:ed:5c:38:98:dc:f2:e0:b3:20:4a:
         db:13:3f:f5:23:e1:bc:62:e4:df:02:4c:cc:de:4a:33:8c:9a:
         b1:0e:a9:b4:61:8c:cf:88:ca:1b:5f:dc:24:87:98:e9:13:08:
         2a:c7:49:18:2d:db:f5:6d:9d:51:94:a3:23:89:10:35:8c:cd:
         d4:1f:76:75:72:7c:23:86:88:40:00:0d:2e:c3:85:d7:8e:53:
         cd:47:cc:b1:fc:1a:5e:c0:ac:d0:11:9d:bb:be:b2:dc:99:94:
         15:fd:38:d6:d3:52:a8:ba:d8:0d:c8:d1:0a:4f:63:a8:69:cb:
         20:fe:5c:73:4c:8c:65:6a:77:98:90:8f:a4:0b:d8:7d:ac:3a:
         ce:b1:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:46 2024 by rpki-client on console-ams.rpki-client.org