Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa
File:                     b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa (raw, json)
Hash identifier:          GFDUFn7Jz75q9vFKZ8/M6oPFfsBxfA6Paoq0xvJxn8A=
Subject key identifier:   A4:73:AD:B5:CC:8F:61:32:E6:1C:10:D6:CC:34:87:97:64:C4:C4:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584730960A437AC830497AA0BD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     22394
IP address blocks:        174.41.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:0a:43:7a:c8:30:49:7a:a0:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=b928e618-20e5-4ba9-a00a-6f3b20955c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:ae:3c:67:99:99:16:ba:16:bb:f2:0f:e3:
                    e9:75:01:a6:55:97:d5:cb:bf:c8:de:ce:de:dc:59:
                    d4:90:ea:fb:af:32:2e:e8:c6:5a:d9:bf:af:bb:4a:
                    2d:99:e3:ae:a8:c3:64:57:46:98:4f:e5:1e:da:db:
                    f8:f0:86:e4:31:b5:80:5e:a3:ed:e6:57:fd:19:1e:
                    2a:de:5b:9a:59:1f:c2:28:91:a2:4a:a9:0b:51:fb:
                    29:51:34:9c:15:a8:1f:0b:11:a8:37:e2:d3:15:c5:
                    70:82:7c:9f:25:85:2f:fd:1b:98:48:68:6e:f4:e7:
                    b2:9b:bb:b8:ca:36:21:c7:11:5a:11:41:b8:e3:b2:
                    c0:8e:8b:21:4f:55:34:fd:43:c6:e6:02:48:50:46:
                    f4:64:37:77:43:d1:43:e2:88:46:f4:c0:25:59:61:
                    17:45:be:c5:5e:30:f0:89:3c:79:16:7f:71:82:d8:
                    dc:74:b2:d0:8f:91:dc:aa:7e:39:97:c7:11:77:e9:
                    1d:4e:9f:01:c7:2d:a3:05:e5:73:92:dd:39:f0:9a:
                    12:f1:29:ea:77:ed:03:15:e8:5c:3d:9e:4e:01:2c:
                    1c:ef:9f:cf:d8:8e:43:a5:43:8c:a3:45:ea:7c:16:
                    84:20:a6:c1:d5:3f:6b:0e:6f:fe:d3:21:5e:ac:7c:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:73:AD:B5:CC:8F:61:32:E6:1C:10:D6:CC:34:87:97:64:C4:C4:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:55:ba:5b:0f:93:cf:42:6c:b5:e1:ab:ad:15:1e:5d:31:2d:
         e1:e6:06:be:57:80:eb:db:99:9f:02:dd:15:4c:68:d7:4e:5a:
         c9:9b:00:55:72:27:29:b2:00:c7:61:d3:21:ab:15:7d:75:8e:
         2e:39:13:f7:4c:6e:18:b6:8b:4c:a6:70:53:34:36:67:ea:18:
         47:9e:12:68:a4:69:da:cd:65:ab:1f:dd:a4:e2:b0:13:8d:66:
         01:bd:e8:f2:39:31:ce:45:66:a1:4f:da:3f:3e:a2:67:38:3a:
         67:de:48:16:df:60:8f:46:02:57:f9:e4:b4:09:92:ca:d0:2b:
         80:18:2b:55:5d:b0:a1:a9:02:31:b2:e3:81:b7:e3:f9:5c:d0:
         1e:90:99:1a:9b:c9:f5:ee:fb:66:88:e0:5f:6a:56:78:6a:83:
         04:61:c8:47:cc:6f:7b:a5:01:ab:b0:50:ae:07:42:5b:cb:99:
         5e:f6:dd:43:18:c5:63:8e:36:ee:48:f1:e0:82:52:b1:d7:1e:
         28:96:34:d2:ee:d7:49:8c:f3:2d:d0:aa:bc:13:78:4d:4c:15:
         76:8e:ab:cd:0c:65:5d:52:95:d4:dd:c3:20:d7:2e:b9:c0:6a:
         bf:45:1c:6c:95:ac:d2:12:79:37:96:99:c4:60:72:76:b4:9f:
         6d:30:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:49 2024 by rpki-client on console-fra.rpki-client.org