Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fbd651-057f-32e6-867b-78f05560e1d3.roa
File:                     a6fbd651-057f-32e6-867b-78f05560e1d3.roa (raw, json)
Hash identifier:          WZQwjh9AE7qDu7Pnduhk7jESm7edWuiijkrDkm+LA1k=
Subject key identifier:   2E:A3:99:22:28:A5:1A:CE:83:60:EA:E7:0C:4E:7D:84:7E:B5:11:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D2A13D75D23366597C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fbd651-057f-32e6-867b-78f05560e1d3.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.228.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d2:a1:3d:75:d2:33:66:59:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=854b5f08-9905-4d07-8fcb-788cb0f4a8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:2b:b8:9a:81:78:28:0c:de:2d:d9:ee:ac:
                    61:5b:48:0c:65:d9:65:01:d3:4f:4f:97:67:8f:d8:
                    73:72:d9:0b:26:f0:b4:29:fe:68:6a:fe:fc:bc:e8:
                    21:66:df:23:d7:38:2d:b9:65:b5:c9:da:39:dc:2b:
                    25:2b:78:ba:93:05:ae:91:85:c4:a2:54:6b:4f:f9:
                    c3:c3:f6:57:9e:6e:76:da:84:a0:df:99:8f:5d:2f:
                    f1:40:44:ee:cb:0a:05:92:13:e8:bd:2a:cb:27:77:
                    79:85:9c:c2:b5:2d:22:78:45:6f:a1:1a:9b:da:ac:
                    55:68:46:7a:a5:51:80:81:de:04:c4:ff:03:11:e8:
                    89:6c:24:f4:17:c0:74:93:db:e2:d7:db:95:20:f7:
                    4c:43:cd:ae:69:88:d2:68:49:28:39:c7:2c:1f:7c:
                    e9:f4:33:4d:94:9e:e8:d7:cb:b3:fd:c3:a9:b5:c6:
                    de:c0:c4:57:4e:9f:5e:5a:3c:4c:b9:8d:e6:8e:37:
                    37:f3:01:c3:86:72:d8:dd:25:2d:25:e0:16:e7:4e:
                    e4:f0:66:29:47:60:45:20:a1:d7:51:7b:01:b3:06:
                    0f:e9:74:1c:03:81:7b:f8:8c:b2:13:ee:76:d9:01:
                    ef:e3:8b:1c:a9:1b:a5:05:fb:91:52:92:3c:75:e4:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A3:99:22:28:A5:1A:CE:83:60:EA:E7:0C:4E:7D:84:7E:B5:11:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fbd651-057f-32e6-867b-78f05560e1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.228.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:aa:0c:c5:c9:7b:3a:1f:fb:2c:40:4c:be:a3:b0:42:f3:
         9a:37:dd:fe:ae:2c:3e:af:cb:c5:cb:72:0f:46:a9:99:de:fd:
         65:88:8b:eb:76:23:20:8a:43:2e:14:6b:c6:2e:20:0d:40:f5:
         61:6e:17:46:ff:2e:e3:fd:c6:6b:47:39:fe:5e:14:eb:df:4a:
         30:28:18:38:af:5b:f8:ee:ab:45:49:c0:47:cd:85:4b:55:5c:
         6e:ea:96:ba:43:bb:77:0d:87:22:67:7f:b7:6e:d0:30:32:14:
         00:94:db:5a:30:c3:ca:e0:8c:f6:60:12:b8:cc:cb:97:24:a8:
         44:2e:ab:3f:64:1b:2e:e9:25:b0:2b:87:9f:15:9b:46:bb:40:
         a2:01:54:c4:0e:09:33:0e:05:82:b7:b2:8a:2c:77:cd:e0:67:
         64:7d:01:00:54:8c:29:e2:54:ef:4b:17:88:59:44:a9:b2:bb:
         ae:e3:ca:3e:96:11:16:be:09:9e:1a:7a:71:0a:e6:f8:0d:c9:
         fb:42:54:ea:0f:d7:45:0f:ee:a5:71:0e:f4:f9:33:64:81:05:
         58:0b:89:b6:04:71:31:06:fa:73:fb:fc:e2:65:be:4c:fd:c0:
         6f:ef:ad:72:5e:18:b0:e8:34:20:81:8c:c3:2e:03:b4:e1:17:
         93:16:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:46 2024 by rpki-client on console-fra.rpki-client.org