Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa
File:                     d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa (raw, json)
Hash identifier:          dzqmTuuFktE3AwIhlr1A86WJb73oZfcJ5D6kPQhE7AA=
Subject key identifier:   C3:01:0D:71:D6:D8:BD:49:14:C6:8B:9E:6A:B7:D3:68:13:3D:86:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708AF38124FE27A034E066E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa
Signing time:             Fri 05 Apr 2024 01:16:35 +0000
ROA not before:           Fri 05 Apr 2024 01:16:35 +0000
ROA not after:            Thu 04 Jul 2024 01:16:35 +0000
asID:                     22394
IP address blocks:        174.41.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8a:f3:81:24:fe:27:a0:34:e0:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:16:35 2024 GMT
            Not After : Jul  4 01:16:35 2024 GMT
        Subject: CN=e7639bab-925b-494b-adbf-19464d79f3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:35:5f:fa:ce:d5:bf:e9:07:25:ad:69:6d:
                    e3:83:2c:a6:04:6e:8f:b2:e8:77:71:89:40:42:f8:
                    40:ac:86:0c:b4:1b:3c:1f:de:6f:ce:6a:72:d8:4e:
                    a7:9e:12:aa:e3:50:8a:33:b8:d4:91:79:e5:33:c9:
                    fc:86:ea:fb:56:ce:24:a3:0d:b6:e0:fe:95:86:52:
                    d0:27:2f:6c:4e:49:a3:20:46:31:02:2a:39:7d:95:
                    f5:d8:9f:a6:40:ac:55:64:8d:64:01:f4:f1:8b:3e:
                    3a:57:e3:c6:dd:79:73:9d:70:6d:88:2e:f1:52:b8:
                    1d:da:21:3a:0f:d4:d3:34:af:d6:98:e1:7f:ef:ae:
                    d6:48:88:23:88:d6:b3:db:a3:f4:9f:bf:fb:8f:43:
                    8b:97:a4:76:a5:a6:26:29:16:24:5e:97:cf:93:50:
                    c5:2f:09:dc:13:04:76:0a:90:ac:d3:73:c7:ec:2f:
                    4c:21:4f:49:f8:ed:46:f3:75:b7:91:78:e9:14:18:
                    e7:68:cd:59:1e:e3:38:30:ff:a0:2b:21:de:15:d0:
                    d9:9d:fc:51:d0:37:48:85:7d:6b:18:b8:1c:2e:1f:
                    18:d9:5d:12:85:7b:e3:50:c4:1e:bc:c7:fd:1d:6e:
                    05:8c:14:89:b1:dc:d0:df:54:47:8d:cb:d8:a6:bd:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:01:0D:71:D6:D8:BD:49:14:C6:8B:9E:6A:B7:D3:68:13:3D:86:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:4e:19:c8:0d:4f:e6:0c:3a:fb:d4:f1:05:3d:26:41:ad:f3:
         7e:bc:2d:9e:d6:2d:87:a7:d8:de:bc:8a:ca:aa:13:db:45:f8:
         d5:7e:12:95:1e:7a:f2:ea:e6:ea:e4:f1:9c:ba:9f:dd:f2:37:
         53:c5:e3:ff:7b:54:df:36:f7:8b:10:61:8f:5f:35:53:7d:f4:
         c5:b0:2e:c5:8e:41:8e:c6:03:74:40:40:73:d4:68:62:d2:f2:
         e5:97:20:07:f5:76:2f:95:99:6e:01:5b:74:ec:ab:2b:e7:b3:
         49:d3:1f:e1:4a:8f:8a:7f:a3:5b:aa:aa:e2:7e:3c:58:1d:61:
         66:da:c0:3c:19:ce:2e:15:6c:97:e0:63:6b:49:00:1b:fa:6d:
         f6:4c:99:d4:da:66:ea:54:c2:c7:6c:55:83:ec:2b:73:79:11:
         31:d3:af:6d:95:82:e8:a4:f8:a8:6a:2f:a1:d5:e1:72:3a:39:
         81:bb:a1:64:80:6c:02:7e:96:e5:00:82:2a:5a:10:64:0f:60:
         9a:9f:75:56:af:15:91:74:80:0d:ae:dc:1f:b8:57:e6:b5:d0:
         07:32:b9:25:bc:77:34:72:7f:6d:a5:71:ed:0d:72:a9:4a:bd:
         3d:71:9c:c2:fd:bc:05:dc:f5:90:2f:1c:74:74:73:c5:d2:dc:
         82:02:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 12:40:28 2024 by rpki-client on console-ams.rpki-client.org