Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e564bcdd-adc7-33c2-9953-cb187e0751dd.roa
File:                     e564bcdd-adc7-33c2-9953-cb187e0751dd.roa (raw, json)
Hash identifier:          sZLb9Dx5UIafUnRCdekLYg8KX16X12R+EAVwc/CAxPY=
Subject key identifier:   E0:4C:32:D0:C0:D8:AC:29:4C:08:7F:EF:AF:FF:B3:3A:A6:25:2F:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858470120567DE94FE72E0C09A380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e564bcdd-adc7-33c2-9953-cb187e0751dd.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.224.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:56:7d:e9:4f:e7:2e:0c:09:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=2659f987-56bc-4aed-a94f-d19860811a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:d8:14:49:66:88:67:b8:4c:7c:5b:90:fe:
                    bd:9f:9c:5c:de:3c:02:0c:94:9d:62:ed:19:71:0c:
                    dc:e9:aa:f0:c1:cd:2a:6d:c4:76:87:50:ee:36:dd:
                    33:88:a3:b0:82:bf:1d:7a:4b:f8:2e:d2:cc:b0:7a:
                    d0:b6:1f:ff:bd:ad:fa:e0:28:a9:e0:4a:b8:7b:de:
                    97:b6:7f:84:08:77:2e:bc:ea:0e:53:d7:50:16:ca:
                    03:fa:ce:81:32:ff:20:d3:30:e2:cd:e7:62:06:5b:
                    46:37:52:17:7e:27:98:a2:25:b8:f9:55:bd:a1:21:
                    79:2f:e2:e7:d5:36:66:a6:e9:25:30:0c:5b:89:af:
                    74:a9:b1:de:a4:e1:6e:62:36:95:d7:8e:c4:80:e2:
                    2f:02:35:aa:62:07:6f:21:25:06:bf:d3:21:79:bd:
                    fd:2d:87:56:0b:25:f8:33:93:ea:81:0d:5e:80:39:
                    d5:04:2b:d5:04:91:f0:fd:ea:5d:c5:4f:e4:c3:2c:
                    ad:68:a1:04:6a:3d:12:b6:f1:18:fd:34:29:22:c5:
                    db:1a:8f:10:1f:a4:49:b3:3a:7d:39:c9:a9:ca:1b:
                    ec:08:76:03:64:40:de:f1:25:9f:ed:c3:8c:dc:94:
                    96:19:c9:9c:17:f6:9d:6e:c2:c3:ed:ca:53:f2:b1:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:32:D0:C0:D8:AC:29:4C:08:7F:EF:AF:FF:B3:3A:A6:25:2F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e564bcdd-adc7-33c2-9953-cb187e0751dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3b:c3:e5:4a:8b:5e:99:2d:1e:84:bd:06:7e:ce:8f:20:d6:
         8b:ec:cc:57:67:e9:e3:32:be:12:f9:8d:a2:3d:73:7d:8c:61:
         1f:b1:8f:27:9e:35:fe:93:c8:43:64:f1:2e:17:d5:03:99:47:
         b0:33:09:55:57:5c:40:cc:b8:e8:c7:0d:33:ea:1d:45:db:45:
         60:37:16:48:02:82:9b:08:9b:cc:17:35:de:3a:47:cd:50:32:
         49:ee:b3:e4:74:34:77:5b:2b:3b:63:2f:33:68:07:a3:b8:28:
         5d:e4:c5:a6:61:7b:8e:84:d1:57:e9:23:f2:b6:cd:39:ad:11:
         7c:6c:91:a6:42:22:15:9e:f2:d4:91:5e:53:e1:90:f5:cc:b0:
         7d:4d:a8:d1:ca:c4:2b:31:a6:5f:c9:74:db:36:2b:69:17:ce:
         f0:76:79:90:2a:84:d4:7e:d1:8d:20:90:cc:2b:7a:47:aa:55:
         18:3c:17:41:92:79:01:75:2d:6d:3a:ec:13:55:41:0f:18:fa:
         90:e4:9c:ad:31:0b:29:8e:d4:c9:f1:17:87:7b:bb:b4:e4:3a:
         79:5b:95:be:d4:5c:05:4f:a0:98:e8:e1:13:14:43:dc:f1:f2:
         2e:9d:0c:1f:09:14:f1:03:9a:f8:51:7b:bf:93:da:f1:27:4e:
         77:c2:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:27 2024 by rpki-client on console-fra.rpki-client.org