Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ea985e-67aa-347f-a70a-a0917bb53a98.roa
File:                     b6ea985e-67aa-347f-a70a-a0917bb53a98.roa (raw, json)
Hash identifier:          U8YsxCbzNISRhMU3h6WBaugcfz2kqDS36HliyzHVZWo=
Subject key identifier:   77:70:48:E2:69:CD:C7:69:DC:7E:34:CE:64:B1:BF:22:53:02:C3:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E3273AD69057CA7C9200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ea985e-67aa-347f-a70a-a0917bb53a98.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.236.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e3:27:3a:d6:90:57:ca:7c:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=9ac5f015-a816-4d4b-87e1-d3650e857372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:a2:33:a2:ab:d6:61:a0:1b:3d:29:4d:87:
                    99:8e:a3:eb:d9:16:dd:70:ae:12:7d:76:37:a5:1b:
                    1d:52:ba:a6:09:98:3c:6f:7a:b2:26:e7:7b:32:ab:
                    7f:3c:0d:f1:52:9a:cb:c3:d1:15:49:cd:80:e9:58:
                    17:7e:21:04:54:78:1e:0c:e7:62:43:8d:18:8a:2e:
                    09:7c:85:90:73:c7:83:3a:76:e7:20:16:f1:ef:2a:
                    1b:3d:7e:57:18:fd:e0:4b:c2:c5:5c:4a:55:dd:98:
                    1d:20:86:97:c6:d0:2e:de:b0:a8:e0:27:12:4c:40:
                    9d:27:71:d6:9b:66:b3:49:7c:24:5a:81:45:52:52:
                    97:a8:a1:f8:38:e1:96:44:8d:14:88:55:18:9b:8d:
                    f0:2c:05:86:1a:21:f2:91:46:88:c9:af:20:1e:7b:
                    2f:9f:d0:00:d0:2a:86:75:8d:95:6d:33:aa:b8:31:
                    a8:66:24:c4:be:44:8e:76:0a:8f:45:86:0f:61:32:
                    99:2a:9b:7f:63:dd:71:d8:94:de:ae:10:a6:ed:94:
                    e3:7f:63:e6:b8:72:98:5b:c5:e9:6c:4b:1c:57:7f:
                    ce:4f:b1:d2:6a:c4:d9:b4:36:09:98:ef:c7:cd:77:
                    8c:61:54:ba:c2:a7:fb:34:1a:f8:3d:6f:ca:72:1a:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:48:E2:69:CD:C7:69:DC:7E:34:CE:64:B1:BF:22:53:02:C3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ea985e-67aa-347f-a70a-a0917bb53a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:20:87:1b:f5:dd:ed:46:0a:1a:95:b9:8e:c7:f5:76:62:
         b7:c3:4d:46:c4:34:67:cf:c9:d8:a7:dd:7b:54:07:fa:aa:f4:
         0f:45:a7:22:11:2e:9c:5b:5b:88:ea:01:7f:4a:98:73:48:52:
         4b:1b:fa:93:dc:c4:71:46:50:8f:43:1a:69:2a:68:1b:94:a7:
         2c:cc:0b:7f:8c:72:d5:6c:78:25:c2:1f:0b:77:f6:38:13:8c:
         6c:28:68:03:14:0b:27:f9:31:27:9b:74:92:f6:fb:72:2f:3f:
         08:5c:a0:98:88:97:5c:1b:76:8d:be:5e:b0:4d:22:d8:5d:97:
         4e:63:2e:9a:28:6c:ac:06:c7:7b:89:c5:33:3e:49:ae:d9:c5:
         63:3d:09:ee:4c:8d:fe:60:04:48:e0:ee:b6:00:17:97:f5:c0:
         86:58:44:40:a9:45:f3:67:21:d3:c5:e9:62:c0:19:52:87:1a:
         0c:49:9c:5c:b1:c0:a1:b1:e1:16:d2:d6:c2:8f:ea:65:7b:19:
         37:fd:5d:dc:7e:a7:af:8a:54:e8:dc:85:86:33:ac:06:2a:d9:
         78:b0:62:1b:5c:44:dc:1f:11:08:e1:5d:f8:04:55:2e:ed:dc:
         8d:ae:ff:d4:04:23:a0:61:21:fc:c0:d0:ea:77:bb:9b:18:aa:
         9d:d1:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:15 2024 by rpki-client on console-fra.rpki-client.org