Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caec50d3-6d31-3f9b-86ef-aa1ef08a8388.roa
File:                     caec50d3-6d31-3f9b-86ef-aa1ef08a8388.roa (raw, json)
Hash identifier:          mskRjTZt0zak8UJFXAJKEYlKBvdM10zZLMDzYQmJYk4=
Subject key identifier:   E7:E8:93:35:08:8F:FA:C0:02:47:49:EE:9A:9F:9E:AA:11:D5:D4:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835EA794521C8F6F40A4C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caec50d3-6d31-3f9b-86ef-aa1ef08a8388.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.247.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:ea:79:45:21:c8:f6:f4:0a:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=a35b1a6e-9e2d-4d06-9c9e-8f031d4c6948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:44:3e:b1:89:fb:c7:38:86:c1:58:30:c9:
                    10:c7:93:b8:bc:03:14:ae:29:00:5b:22:cb:95:18:
                    fe:e3:7d:a8:75:e3:cf:54:8b:fd:b2:89:71:25:87:
                    c6:62:3c:48:71:1f:99:2b:83:7f:fd:6c:c5:9e:e8:
                    20:2b:16:c5:1b:09:9b:35:35:b4:57:56:1d:45:7c:
                    10:de:39:4d:dd:5d:9f:ca:ab:d7:b3:13:dd:b2:fa:
                    b1:4e:ac:5d:5a:b7:a3:d4:41:7f:02:32:18:bb:13:
                    c1:16:8e:75:87:e8:f5:d0:98:83:25:ce:be:39:4a:
                    95:45:6a:66:8e:c1:22:73:d7:67:8f:32:a4:28:cc:
                    01:da:4b:a6:77:b4:fb:c9:82:eb:a3:d0:c5:1d:76:
                    71:88:34:2d:2c:1e:f5:14:26:7c:16:f2:58:88:6f:
                    5c:0b:b9:95:2e:1e:65:9a:e4:eb:8f:ad:43:73:38:
                    46:b3:60:e2:28:77:7a:07:ed:ef:df:a7:f5:8f:b0:
                    dd:f3:b6:5b:f7:11:d2:3d:57:49:d6:e2:19:d2:31:
                    ac:d8:7d:79:17:fc:7b:06:6b:9d:cb:ed:dd:52:31:
                    6b:91:ca:8d:0e:ae:f8:29:c2:ae:e0:91:cf:34:ba:
                    dd:32:e4:fc:03:49:54:e0:4e:54:e3:2c:8b:bd:de:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:93:35:08:8F:FA:C0:02:47:49:EE:9A:9F:9E:AA:11:D5:D4:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caec50d3-6d31-3f9b-86ef-aa1ef08a8388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:ca:ef:fd:b8:61:5c:57:62:4c:7b:c3:f7:3b:16:c3:99:
         d8:0a:37:0e:63:5f:dd:41:6a:ef:a8:f8:ae:2c:e3:b2:6f:64:
         cb:51:32:94:77:de:54:1b:9e:2a:13:c8:c6:f2:83:80:fd:6c:
         95:17:06:12:f7:11:b1:44:0b:df:7f:63:bf:c2:77:19:b9:61:
         05:49:71:6a:77:ad:95:37:b3:c5:d2:41:97:9f:7f:eb:ea:80:
         1e:07:7e:e3:c4:a5:63:4f:0e:48:63:d5:ab:ae:4e:0a:64:68:
         4e:6c:17:38:e4:67:ef:dd:27:45:98:c9:f2:92:7e:ff:c0:97:
         8c:a8:6c:e4:e1:6e:0a:08:54:49:b5:aa:ae:d3:01:fb:dd:37:
         3b:66:14:fa:5f:bc:93:0b:ce:1d:dc:1d:63:ca:3b:6a:fa:65:
         61:d1:bf:1d:00:a7:f2:08:13:ef:0d:71:a7:b5:2d:b6:20:8d:
         c5:62:1d:e5:f1:97:1e:21:42:7a:57:59:a9:87:92:3e:8a:68:
         12:1f:a2:87:12:bb:4f:cd:c0:7c:26:b7:3e:f5:34:f1:50:5b:
         ec:71:ca:c5:2d:7f:13:28:53:e1:87:ae:f3:62:e2:75:58:b8:
         90:13:16:13:a7:41:8e:18:2f:bc:f1:1b:28:2f:99:c6:77:6f:
         d0:2b:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:04 2024 by rpki-client on console-ams.rpki-client.org