Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f1cfc1a-6bfb-37a2-89cf-ad0851098fb7.roa
File:                     9f1cfc1a-6bfb-37a2-89cf-ad0851098fb7.roa (raw, json)
Hash identifier:          UeeZ4uG2dzCQeNq3is/4SfFiNxHBatV3KcsDCod3DTE=
Subject key identifier:   88:A3:CC:E8:93:10:65:F0:50:0A:6C:DB:D7:7B:FB:C0:AA:7A:99:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E64C3BCD6AAEE836B043
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f1cfc1a-6bfb-37a2-89cf-ad0851098fb7.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.241.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e6:4c:3b:cd:6a:ae:e8:36:b0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=ab4cd769-cf7a-4c59-b1a3-af69ca8ff292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:10:c8:d6:11:9e:9f:4d:a4:7e:9c:44:c5:
                    d1:53:83:af:72:aa:a5:c6:c0:6e:68:a5:bc:86:cb:
                    08:06:d4:6b:50:3c:e7:cb:98:8c:d9:63:94:a3:ef:
                    42:7e:06:67:af:3c:b3:04:4f:41:7a:df:24:dc:22:
                    de:42:23:3c:69:87:25:55:58:6c:7d:bd:2c:ab:00:
                    16:01:de:a7:65:c2:41:d0:57:8c:d6:14:9d:8a:d9:
                    43:01:2f:28:1f:61:2a:c2:c1:82:b2:be:e0:d7:11:
                    6d:f1:02:2c:b7:44:27:c8:1b:12:17:11:d0:8e:b6:
                    43:6b:0c:b3:ab:23:04:82:1d:bd:57:cc:7f:cc:a8:
                    53:c3:95:06:73:68:f0:c4:85:33:7f:f8:52:89:2b:
                    57:87:c8:e8:ec:15:b4:ed:33:62:e9:ad:e8:4f:02:
                    ea:ca:76:d8:7a:00:1a:98:45:9f:26:9f:5d:38:fc:
                    bb:fc:ca:02:13:c7:e1:a1:9e:f1:85:4e:9a:ae:e9:
                    e0:d3:64:46:6a:e8:f7:a9:82:0f:9d:72:f4:ba:7e:
                    a8:ac:6c:f6:07:0b:06:58:3c:be:55:94:08:cb:a3:
                    42:3c:2c:cd:74:4f:8b:4e:31:c2:ea:bc:d5:d3:89:
                    83:4d:ce:a6:1c:45:ac:3d:41:2e:a0:7d:fe:6e:f2:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:CC:E8:93:10:65:F0:50:0A:6C:DB:D7:7B:FB:C0:AA:7A:99:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f1cfc1a-6bfb-37a2-89cf-ad0851098fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c3:01:35:ce:54:59:14:06:a3:96:8c:64:bc:9c:16:38:a8:
         7d:b2:82:47:6d:0d:7a:14:6d:53:97:d4:77:00:ca:94:65:f0:
         4a:c4:13:a3:30:03:a3:21:5d:6e:1a:5c:72:8b:56:93:27:ad:
         f4:56:3f:e9:c6:2c:d3:9b:40:d0:0b:18:ea:dc:72:da:20:22:
         e4:cb:0e:de:b6:f7:e5:3a:65:43:9f:97:7d:3e:43:06:e6:83:
         0a:1e:9c:5f:98:db:58:ff:f3:13:5e:22:c3:4a:0a:fe:f5:20:
         97:7b:51:d8:2d:b9:f3:a7:47:32:32:8c:57:17:38:c1:a5:37:
         dc:2e:f8:85:16:d8:6e:eb:95:95:8f:4b:9b:a6:d0:4e:49:50:
         93:f1:df:14:27:2f:b5:ff:7f:4d:6a:de:d0:51:d4:7d:49:be:
         ea:ff:74:3f:40:3c:c9:22:70:9a:bb:7c:e7:3c:74:1d:b0:45:
         75:c4:cf:34:39:fd:b9:a7:ee:75:53:97:88:06:45:c4:33:17:
         7a:bb:c3:3e:3c:3b:e4:76:df:82:80:58:2a:ee:4f:9a:52:46:
         f1:77:d6:55:c4:5a:00:d0:26:2a:4b:d8:98:6a:0b:fa:dc:2a:
         e2:6c:7e:94:e1:11:64:bc:03:f5:37:f5:3b:87:f6:88:31:69:
         b9:18:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org