Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059c855-97cf-3f6b-a74f-6e690061df08.roa
File:                     9059c855-97cf-3f6b-a74f-6e690061df08.roa (raw, json)
Hash identifier:          7EgPSQtSOR4ttX/iL1JqdMDEfYAMzJNIlYIKLhAse04=
Subject key identifier:   FA:B9:9C:7C:A6:60:7F:13:4D:54:F4:C0:7F:B9:29:0F:17:ED:20:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA121456FDFE8256A76580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059c855-97cf-3f6b-a74f-6e690061df08.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.210.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:12:14:56:fd:fe:82:56:a7:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=5b49e1fe-5e19-41ad-aaac-3b5f95b10795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:f2:d1:74:89:b3:3b:48:97:15:21:37:bc:
                    a7:55:0a:67:52:9d:e9:c8:b9:25:c9:28:85:2a:50:
                    93:14:a4:09:72:44:21:57:ea:4b:92:93:bc:b1:1f:
                    e1:28:2b:bc:23:64:d4:a8:ce:9e:ca:a5:04:be:03:
                    48:30:2f:d4:53:5d:bb:4e:8e:09:ad:e0:3f:3e:d5:
                    20:a0:9b:8f:b4:3d:c6:d4:d0:6f:f9:fd:86:ed:51:
                    b5:ca:ae:61:b3:c4:16:56:f5:4f:d8:4f:3e:5b:60:
                    16:82:ef:66:f6:54:cb:fd:9a:5e:0b:e0:8f:06:36:
                    1d:cf:81:dd:8f:64:d8:7f:5f:b8:7c:a5:84:89:ca:
                    35:c0:9c:3d:95:69:3c:1d:f3:7a:4e:98:d5:ce:74:
                    53:e5:42:94:e9:ef:ce:59:c0:32:9c:6c:13:f0:06:
                    b6:19:08:58:96:71:64:4d:1d:e6:a5:d1:d5:ba:81:
                    ac:be:b3:1c:3d:f0:00:cd:7a:0a:76:1d:97:34:22:
                    27:cf:68:cb:ea:f2:03:cb:32:1e:b9:da:55:e2:00:
                    94:0f:bd:25:b7:a3:cb:62:de:a4:02:c2:7a:f0:f8:
                    2b:0c:2c:9b:42:41:f5:86:10:78:9b:88:aa:59:cc:
                    09:58:08:86:c6:61:05:46:7c:18:6e:9b:e2:f3:b2:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:9C:7C:A6:60:7F:13:4D:54:F4:C0:7F:B9:29:0F:17:ED:20:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059c855-97cf-3f6b-a74f-6e690061df08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.210.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:49:aa:05:ca:f0:da:2e:20:27:30:78:90:2c:45:27:0d:52:
         24:5f:26:5f:d5:51:15:d6:14:71:90:af:8a:1a:ea:fb:85:c5:
         8a:a3:a1:f8:19:dc:15:c3:f2:0f:88:7b:2d:92:53:23:12:ba:
         81:e8:56:74:45:ae:ee:b5:f0:bf:ab:62:0a:76:33:1c:95:32:
         c3:24:70:2a:84:6f:cd:89:7a:d2:d1:5c:37:e2:67:35:18:ad:
         f5:72:43:02:97:bd:eb:00:b2:a2:e9:74:4c:c0:ac:79:2d:86:
         0d:d6:26:5a:92:be:da:f0:b9:69:c7:6d:b6:5a:c5:6a:e4:f7:
         77:d8:24:7d:14:e8:a2:6e:5c:dd:9b:fb:ea:a6:b7:40:a6:73:
         26:a6:da:14:ab:45:f4:01:4b:d1:90:b5:bc:cb:51:51:5b:c8:
         ec:ee:99:51:c3:75:11:b0:8c:df:65:ed:9d:80:96:48:79:bc:
         72:d4:a8:82:18:15:c8:9b:59:89:df:ec:3d:7f:c4:02:3f:2e:
         05:80:57:e0:65:90:0e:34:10:a2:b6:3c:76:70:27:20:85:9a:
         4d:98:d9:1b:6b:0e:ff:df:92:eb:a8:a7:4e:d7:5a:44:67:71:
         37:14:51:f8:48:37:7e:4e:a4:c7:4c:ac:e7:59:67:76:b8:34:
         1d:21:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:42 2024 by rpki-client on console-fra.rpki-client.org