Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa
File:                     db5ec7d7-1069-37bf-859c-6bbd9193c356.roa (raw, json)
Hash identifier:          xQ/ePHPn2py09Cj/mn820MfUcJujUhETKHJD5tWLLa8=
Subject key identifier:   97:E3:1A:51:09:3E:95:F8:AC:16:CC:B5:3A:ED:4E:FC:12:01:91:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584701204AB490BB50CEBF53C8C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.212.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:4a:b4:90:bb:50:ce:bf:53:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=ce2b1bd2-649f-4da0-a368-592098b35382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:dc:74:66:d7:1e:ff:2a:22:b2:63:b9:00:
                    dc:ed:e0:01:56:4f:eb:c5:0c:23:c9:dc:1f:0a:50:
                    4d:7c:e7:3a:37:4d:62:b8:09:76:25:b1:52:82:d6:
                    fe:1c:fb:81:c5:36:b8:f8:30:1a:c0:4a:4a:9c:19:
                    28:ba:c9:3a:f7:ca:b7:f5:2e:93:d3:40:4b:30:87:
                    3e:94:1e:d1:c0:db:be:f3:b0:e5:8a:44:ba:3e:7f:
                    d1:53:ee:32:51:8e:28:19:e7:00:90:23:5c:aa:3e:
                    cc:85:ea:ba:fe:e7:8b:04:13:eb:9f:b1:3c:dc:c9:
                    c8:2b:9c:2c:1c:95:75:c1:62:f9:a5:5b:7d:90:7d:
                    f2:93:2a:3f:de:69:8b:1c:a1:f0:af:24:93:26:8b:
                    ab:24:fd:7e:d0:4c:8f:49:73:fc:7f:e1:3d:51:8c:
                    76:14:66:c3:21:51:8c:dc:97:ab:21:86:3e:b1:da:
                    ad:09:f0:88:aa:40:7a:74:c0:6f:48:ab:cd:0c:7a:
                    1b:fa:db:48:d9:d3:51:47:87:04:36:3c:aa:98:e9:
                    48:dd:20:56:ba:64:96:ef:11:4b:0a:31:dd:2e:87:
                    da:00:76:83:4e:ac:a7:5c:31:27:a6:af:e4:c6:25:
                    27:61:9a:64:b6:ab:e6:f2:d2:97:52:e7:2a:7a:b2:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:1A:51:09:3E:95:F8:AC:16:CC:B5:3A:ED:4E:FC:12:01:91:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:4d:5d:08:ef:02:60:eb:e5:dc:22:eb:6c:1b:8a:c6:f8:
         21:98:d1:16:74:0e:d6:95:97:f9:2b:d4:86:0b:53:85:7b:cf:
         c3:33:fa:20:84:27:81:0c:e8:c5:99:a4:39:c1:5c:bf:f9:7f:
         d3:89:6e:e9:79:63:ce:a2:43:0a:47:47:50:b1:1a:a7:12:0a:
         98:e0:26:b7:6c:9f:7d:b5:dd:d4:55:0d:5a:fb:63:36:18:a8:
         a2:83:89:ce:33:2a:87:c2:6d:e4:6a:c3:5d:3d:eb:a0:0e:13:
         a8:31:37:17:8a:7c:4f:33:1b:d9:3a:01:fe:11:d7:c9:d6:44:
         ef:1b:c6:09:ce:b5:51:2e:75:b0:f4:65:65:3a:7d:63:ee:fb:
         b3:0b:e2:41:68:6e:fe:32:73:9d:3f:bb:ea:65:89:c6:d5:a8:
         7c:a6:3a:99:51:0d:9a:4a:b9:8d:ed:50:70:17:cc:e3:b8:dd:
         06:57:15:a8:b1:0a:55:0d:58:a0:e6:c1:71:ff:ab:e8:6f:fe:
         62:df:ce:6d:31:c4:12:11:32:48:67:32:f0:6d:f8:e9:6b:4b:
         b6:6e:82:e2:ee:d4:a2:e0:23:49:8c:30:c2:ba:e7:db:e8:3a:
         5b:d3:9d:4e:cb:f6:01:dd:58:e9:4d:69:61:59:6b:f6:32:47:
         a3:ea:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:24 2024 by rpki-client on console-fra.rpki-client.org