Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a166748-3aac-396f-a93f-1c0ba8761f76.roa
File:                     9a166748-3aac-396f-a93f-1c0ba8761f76.roa (raw, json)
Hash identifier:          EZVm09eKhfyEoo9IjKpMNWUMd3p01lpLNnjoL6NJomU=
Subject key identifier:   E5:8F:3C:B9:6B:95:E4:A9:69:B4:88:F0:13:82:23:76:74:E5:1D:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0443A5ED6622732B1D60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a166748-3aac-396f-a93f-1c0ba8761f76.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.213.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:04:43:a5:ed:66:22:73:2b:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=2dc56ab7-277d-4484-83b2-b66ccf853c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:f2:03:eb:d0:c8:ab:e7:97:27:d8:13:44:
                    1d:e1:15:a0:8d:1b:a9:dd:fd:ec:ad:58:18:f7:ae:
                    c1:4d:8c:ea:ae:4f:0f:35:28:e4:9c:33:cd:e4:1b:
                    81:a4:17:58:6b:dc:7c:46:43:f9:88:29:cd:e6:88:
                    1f:19:de:b1:7a:54:0e:7c:08:33:e4:a1:c1:68:a2:
                    d3:4a:e3:c7:c0:19:01:c6:de:62:56:ae:7d:4f:b6:
                    cf:1e:6d:70:52:78:38:55:5a:e9:7d:e8:58:35:15:
                    cc:a2:bb:bf:a9:e2:5d:f6:3e:f5:27:d9:91:51:b9:
                    24:43:f9:af:4b:94:cd:94:aa:38:0a:5e:95:4f:8f:
                    46:bd:d4:89:9b:82:93:c6:70:25:6a:d7:13:65:1f:
                    8e:04:a2:bc:dc:62:89:98:3a:6a:95:cf:53:6e:f4:
                    a5:76:b6:2f:0d:4f:a9:f1:36:c1:a3:e8:3a:63:c8:
                    20:7a:48:56:b9:e7:60:fd:5f:74:76:0e:bd:4d:2a:
                    50:23:de:ea:ed:af:c2:04:93:a8:d3:07:15:9a:7d:
                    03:fb:43:1a:77:ad:71:bd:c6:4d:f3:98:13:88:eb:
                    d5:a8:c6:52:26:e2:a5:4a:da:4c:04:6f:5b:ab:81:
                    d5:f8:5c:43:d5:ca:0b:a5:6f:16:86:34:75:1a:e2:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:3C:B9:6B:95:E4:A9:69:B4:88:F0:13:82:23:76:74:E5:1D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a166748-3aac-396f-a93f-1c0ba8761f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:19:03:22:de:e7:88:aa:50:5f:4f:94:6c:26:11:48:f8:45:
         30:4a:85:fd:08:a4:67:18:0d:a4:f0:e4:91:85:73:a6:1f:4f:
         a4:41:e1:24:79:99:0d:43:3a:60:b1:9e:45:c1:8d:d2:5c:8f:
         00:08:11:a0:31:e4:e7:e4:23:13:ae:68:2b:0b:b4:2c:20:57:
         2b:97:07:9f:b5:35:9e:04:e7:2b:91:2a:e5:64:94:41:41:d5:
         22:e5:a5:d6:de:99:c8:a7:0c:59:1d:8b:ee:0e:a0:5f:53:bb:
         75:da:21:54:36:f0:33:c7:49:93:90:ed:5b:98:34:e9:c3:8f:
         c5:37:a5:83:25:f4:6b:14:17:48:5d:b8:2c:03:78:9b:92:df:
         62:16:7a:45:52:20:25:f0:b5:95:6b:6e:aa:28:40:df:9d:a0:
         72:e2:8a:5e:4a:c1:c9:67:72:20:89:fe:69:13:49:d0:de:be:
         30:f1:d3:02:d3:8c:88:8b:5d:79:59:fd:dc:e8:f7:a1:b5:61:
         e0:f3:1f:de:71:2c:33:6f:07:cb:e0:27:2a:7c:a7:f5:12:bd:
         0e:28:c8:59:d4:e8:b9:79:7d:95:6c:f8:53:b5:64:ad:05:25:
         61:90:16:0b:73:90:ca:fa:3e:ee:ae:39:1a:ae:8d:15:89:d4:
         6a:ca:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:44 2024 by rpki-client on console-fra.rpki-client.org