Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a230ed25-d859-3052-9382-b75c99d283a4.roa
File:                     a230ed25-d859-3052-9382-b75c99d283a4.roa (raw, json)
Hash identifier:          wRdw07OTiRM/aNMin2lQ0c+gVjpyKvIuhC7UJyYxptU=
Subject key identifier:   34:EC:D3:8A:A7:47:53:A8:3A:E6:2C:03:65:EB:C0:1E:AF:6B:2E:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F42F5816A3EEA96563A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a230ed25-d859-3052-9382-b75c99d283a4.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.250.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f4:2f:58:16:a3:ee:a9:65:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=654ca4ca-34a8-4821-88c0-a54c12d5cf53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:16:6c:cc:cf:8b:7e:36:01:71:f8:a8:6e:
                    8b:a3:cc:fe:f4:17:52:89:84:5f:1d:bc:7f:bc:cf:
                    cf:c9:cb:70:20:6c:d5:b8:07:8b:ac:8a:6e:c9:8c:
                    05:5b:25:39:86:03:e8:52:3b:a8:c1:2c:ac:d1:6a:
                    c8:70:05:11:6b:4a:23:d4:1f:ad:1a:e4:e8:38:27:
                    c0:e0:9b:88:24:14:ef:fd:2c:c0:21:d9:c2:5f:0a:
                    4b:7f:57:3f:b1:39:96:7e:c7:16:f8:5c:54:f8:ba:
                    46:b9:38:73:66:03:41:2f:92:5f:87:c6:53:d1:9f:
                    5c:9b:7a:f4:6e:9b:85:d6:2d:7a:dc:f6:aa:19:2d:
                    ad:53:ea:97:9e:05:ba:c9:9f:a3:6b:f3:d3:24:f5:
                    ab:0a:a9:81:65:ea:70:ac:54:89:14:0f:0c:70:70:
                    e3:60:4c:b1:b9:12:09:e7:81:46:aa:53:43:9b:b0:
                    d7:f4:66:09:ac:bf:23:78:e3:c6:f2:8e:8a:a3:97:
                    b6:b0:f1:b2:33:44:e0:6a:d0:63:5b:07:69:fd:49:
                    18:63:f6:fb:0e:bb:e7:c8:4b:32:14:59:ee:e4:c5:
                    3e:24:fe:2d:db:2c:6f:54:f7:8e:a9:db:2a:f5:1a:
                    43:d0:69:7c:0c:97:a3:20:c5:50:13:c8:e3:db:b5:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EC:D3:8A:A7:47:53:A8:3A:E6:2C:03:65:EB:C0:1E:AF:6B:2E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a230ed25-d859-3052-9382-b75c99d283a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:13:39:2f:17:38:e5:33:c4:7b:42:d0:22:73:74:ce:f4:05:
         2d:90:2e:a9:b4:dd:c0:f9:4e:e4:15:77:cf:54:76:2c:5c:8c:
         25:14:59:4e:6d:82:59:15:40:ec:a8:89:0e:6d:51:7a:84:5c:
         bc:19:26:12:44:7d:a0:4d:e4:87:cf:38:98:c6:8f:d5:68:b3:
         ae:2e:56:0f:16:a5:d7:80:4e:41:06:70:55:d8:b8:5e:4a:f9:
         16:50:db:28:9f:e3:c4:03:aa:e7:8c:22:42:85:b1:cc:db:33:
         18:f3:f1:c1:ec:4f:5a:f6:d7:70:8e:0f:74:d7:98:03:e7:72:
         68:eb:ae:d4:75:ae:5e:4b:70:f2:d7:e9:cc:df:2f:08:ec:44:
         09:e1:b4:93:0e:01:3e:3a:b4:0f:1b:3c:c7:53:2b:4e:87:e4:
         ab:a4:43:91:3b:dd:66:fd:de:eb:86:56:88:b8:c6:c4:36:87:
         a1:8d:06:9b:52:7c:03:5d:02:0a:1a:90:6c:94:b6:17:5e:46:
         6d:83:f9:5f:d1:58:7b:72:81:1a:8e:10:42:8d:b2:15:ee:b1:
         72:16:a7:e7:10:d2:52:d5:da:19:9e:da:35:27:b5:f6:2f:2c:
         c5:c9:e0:81:0a:b0:64:79:f7:a7:d7:59:aa:02:4e:7a:1f:63:
         94:f1:29:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfQvWBaj7qllY6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
NjU0Y2E0Y2EtMzRhOC00ODIxLTg4YzAtYTU0YzEyZDVjZjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG0WbMzPi342AXH4qG6Lo8z+9BdSiYRfHbx/
vM/PyctwIGzVuAeLrIpuyYwFWyU5hgPoUjuowSys0WrIcAURa0oj1B+tGuToOCfA
4JuIJBTv/SzAIdnCXwpLf1c/sTmWfscW+FxU+LpGuThzZgNBL5Jfh8ZT0Z9cm3r0
bpuF1i163PaqGS2tU+qXngW6yZ+ja/PTJPWrCqmBZepwrFSJFA8McHDjYEyxuRIJ
54FGqlNDm7DX9GYJrL8jeOPG8o6Ko5e2sPGyM0TgatBjWwdp/UkYY/b7DrvnyEsy
FFnu5MU+JP4t2yxvVPeOqdsq9RpD0Gl8DJejIMVQE8jj27WMzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTs04qnR1OoOuYsA2XrwB6vay5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTIzMGVkMjUtZDg1OS0z
MDUyLTkzODItYjc1Yzk5ZDI4M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrvogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwTOS8XOOUzxHtC0CJzdM70BS2QLqm03cD5TuQVd89UdixcjCUUWU5t
glkVQOyoiQ5tUXqEXLwZJhJEfaBN5IfPOJjGj9Vos64uVg8WpdeATkEGcFXYuF5K
+RZQ2yif48QDqueMIkKFsczbMxjz8cHsT1r213COD3TXmAPncmjrrtR1rl5LcPLX
6czfLwjsRAnhtJMOAT46tA8bPMdTK06H5KukQ5E73Wb93uuGVoi4xsQ2h6GNBptS
fANdAgoakGyUthdeRm2D+V/RWHtygRqOEEKNshXusXIWp+cQ0lLV2hme2jUntfYv
LMXJ4IEKsGR596fXWaoCTnofY5TxKS0=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:09 2024 by rpki-client on console-fra.rpki-client.org