Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa
File:                     ba6ee143-f521-376e-ba19-1d3400ea691e.roa (raw, json)
Hash identifier:          CuaPdJAKIIBVYqCaNXf6a07TEk5PryZyxlUHyMhf7Yo=
Subject key identifier:   BD:1D:9B:3F:9D:6D:51:B4:F8:22:E8:4C:0D:A6:B6:1F:45:DA:04:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847309604B357F0DA315E4CA380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.42.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:04:b3:57:f0:da:31:5e:4c:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=843c1545-e581-42f6-95fb-1c7194774cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:51:3d:32:2a:51:3b:b9:27:04:60:94:7d:10:
                    35:e8:ed:95:31:2b:39:05:61:d9:c5:f7:a9:b1:da:
                    f5:a8:b5:22:76:c3:7a:b3:39:c4:e8:ee:a2:e1:15:
                    e3:21:e7:8b:f4:e9:3e:ab:e0:e8:17:5a:8d:88:2b:
                    f9:eb:e5:9d:a9:77:7b:d3:54:b8:21:a7:ff:20:93:
                    b2:7e:ff:e6:28:b7:42:3d:2d:bc:b1:e4:fb:7b:67:
                    18:0e:40:0a:a4:26:4f:65:0e:3a:23:6e:de:d2:32:
                    d2:5c:cb:dd:50:24:8d:e4:7d:9a:c4:6c:3e:da:46:
                    21:9c:9b:12:34:2b:20:08:14:6e:a0:76:c4:30:4c:
                    e9:0a:7f:22:3a:a2:48:06:94:76:81:ac:a1:f5:24:
                    d6:a8:7b:58:dd:83:04:a9:d6:69:1b:41:96:30:f6:
                    5d:46:e8:13:ac:b6:f7:99:a4:5a:11:a3:a8:14:84:
                    7c:33:ed:a4:73:85:1f:b5:cf:70:4f:83:77:3a:a7:
                    73:b4:1c:0e:9a:9e:1b:04:65:3f:72:8a:d1:ec:55:
                    62:84:5e:17:3c:38:dd:e8:3d:64:e8:24:f9:7e:02:
                    1d:d4:f7:af:fb:7b:a2:a5:ad:45:2c:c2:02:dc:10:
                    1b:b7:a1:8f:6d:2d:73:a1:b1:d8:e2:31:88:73:29:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:9B:3F:9D:6D:51:B4:F8:22:E8:4C:0D:A6:B6:1F:45:DA:04:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:30:73:0a:3a:29:66:ae:d8:fb:f0:b8:a6:ac:27:1b:c5:
         d5:ef:be:4b:ea:8a:41:df:38:d7:40:f2:22:0d:df:00:a6:e9:
         6e:b9:dc:eb:a0:98:a6:a2:82:44:24:b9:df:d0:53:8f:93:63:
         f7:97:dc:2d:56:c2:6c:75:79:d5:c2:bc:bb:3a:58:13:2c:ab:
         57:af:9b:0e:1b:51:15:2f:15:c4:52:af:e2:18:23:42:53:c6:
         f3:67:49:bd:44:e8:a0:bd:7b:70:0f:bf:ee:fe:c7:70:19:e3:
         fb:03:a6:79:50:a4:40:54:0c:0f:2a:19:09:55:08:46:4c:fc:
         87:35:1f:41:a7:89:e6:9b:a4:ae:32:83:2c:ab:77:43:83:f9:
         fc:5f:98:75:20:d4:c5:16:ff:92:80:8a:81:53:eb:01:7f:22:
         60:cf:87:71:88:4f:b2:e3:ba:63:61:8a:95:a4:69:63:49:dc:
         3d:18:55:64:3c:73:64:4f:d4:17:71:66:d3:73:2d:87:2b:73:
         dd:fd:a7:46:2f:0d:70:b1:70:31:26:6a:a9:ba:28:9f:fe:6f:
         6c:96:4c:d3:16:34:11:63:3d:ea:95:79:52:8e:ce:72:86:90:
         76:75:08:8e:83:77:ae:0d:fa:1d:0d:b0:73:1f:69:43:c3:a5:
         bd:47:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:50 2024 by rpki-client on console-fra.rpki-client.org