Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a27dbbea-587c-3b9c-a61f-2c859363a69d.roa
File:                     a27dbbea-587c-3b9c-a61f-2c859363a69d.roa (raw, json)
Hash identifier:          nONiEisLC88Popli6cseObEfCXWx/EJSRZI7M11pvSY=
Subject key identifier:   EA:90:0F:BF:25:10:5B:70:FD:16:F9:BB:08:C6:30:20:94:A1:0C:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA1518450FCCFE410B7380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a27dbbea-587c-3b9c-a61f-2c859363a69d.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.224.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:15:18:45:0f:cc:fe:41:0b:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=db532fe8-d68a-422a-9421-4386abf0992c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3d:a9:d8:dc:0f:56:0b:b0:a6:a1:f6:8a:f9:
                    c7:59:71:65:fb:b2:50:12:fa:5a:51:43:fb:1f:7d:
                    56:fc:1e:fc:98:1a:d9:08:4e:78:8a:e8:ae:f4:7c:
                    fc:30:91:4e:cd:48:b4:c9:a4:5f:c4:4f:3b:f1:56:
                    16:14:88:a6:3c:56:ff:03:1b:23:59:a0:56:e4:e9:
                    90:bd:4e:a2:d7:82:30:97:4c:d6:41:a6:44:7b:dd:
                    f2:cd:dd:b2:ad:6e:30:c4:e1:ae:00:b4:52:d6:4c:
                    2b:f1:88:a2:bd:2a:6b:cf:4f:5e:58:6f:f0:76:ec:
                    58:89:eb:96:82:9d:ac:c5:1a:39:c7:40:cc:18:97:
                    83:95:33:87:cc:d9:b0:6c:1f:0f:c7:32:4c:b0:98:
                    ae:42:c5:72:20:6d:c7:5c:36:db:c2:1c:bb:19:59:
                    92:dd:66:00:c2:48:54:b9:47:ad:8a:cd:8e:20:89:
                    01:fe:29:66:c6:36:53:1d:a9:0a:fc:58:2b:3f:9b:
                    79:53:2d:b7:7e:59:97:ed:8b:d4:40:f7:b0:99:65:
                    d9:9e:94:ff:f3:a8:f0:52:36:6c:d4:40:92:11:63:
                    c3:b3:c1:66:85:a6:15:e9:0e:48:38:9e:ce:8f:54:
                    b8:b4:4d:a3:c6:52:ef:4b:17:72:1c:f0:cc:53:d6:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:0F:BF:25:10:5B:70:FD:16:F9:BB:08:C6:30:20:94:A1:0C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a27dbbea-587c-3b9c-a61f-2c859363a69d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:d7:97:28:41:32:7a:62:31:fb:ae:bd:b3:1f:fe:04:a4:
         0f:7e:24:15:df:83:1a:56:03:8d:24:1f:54:d8:5b:d7:f3:3a:
         e6:87:06:81:22:e8:ec:7b:b5:fa:9c:9a:27:e4:3a:ac:00:f7:
         51:ff:33:2e:01:d9:61:61:ce:4a:94:8c:7d:ca:c6:58:d9:55:
         ed:5d:2d:c7:9c:7e:6a:e3:91:6c:ca:c1:8d:8f:ac:55:0b:20:
         e0:db:9e:6c:fb:46:a7:95:43:a8:41:19:03:99:68:81:87:4e:
         6e:3c:66:94:8e:f5:d1:db:53:31:eb:fc:02:17:be:35:26:8e:
         57:10:1d:57:af:4b:8c:0f:88:46:09:22:f1:26:e6:76:9a:a5:
         09:e0:47:58:41:16:e1:d3:e3:36:8c:cd:62:95:3a:e7:b4:cf:
         bd:fd:8c:82:3f:aa:d3:e3:ac:d2:9c:1b:b0:29:69:60:c3:9a:
         d7:de:a3:34:c0:1b:b9:26:6b:84:eb:8c:ac:1e:5e:9d:c7:11:
         64:14:04:08:15:cc:75:c8:a7:29:18:e9:40:88:a7:0b:c4:37:
         3e:34:15:30:17:5f:df:03:59:c3:5c:87:dc:90:37:43:43:16:
         c3:ff:a1:9a:48:6f:3f:dd:02:44:7a:8d:d9:f3:11:50:dc:55:
         2a:2b:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org