Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb296c2c-3ab5-3b67-91b6-2b675b886b1c.roa
File:                     eb296c2c-3ab5-3b67-91b6-2b675b886b1c.roa (raw, json)
Hash identifier:          W0NtfJJBoS1KT4NOdNhWS0XEv3RPEVtFNvcRz2nJGf0=
Subject key identifier:   3C:B9:03:AA:1D:EC:48:DE:70:21:96:5B:13:30:E6:24:20:4D:AA:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA106C62F1001E22741A60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb296c2c-3ab5-3b67-91b6-2b675b886b1c.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.195.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:10:6c:62:f1:00:1e:22:74:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=601e785a-a752-4fe0-9661-46824f517f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:95:20:68:10:73:2b:e4:0e:bc:c6:b1:19:c5:
                    0f:cc:db:b2:a9:97:3f:a1:ab:a6:33:8d:47:33:50:
                    37:ce:3b:bd:2b:da:a5:ab:fb:19:f0:e0:8a:15:4e:
                    12:a6:a5:9a:3b:2e:76:e3:07:74:c4:a9:9e:0e:e8:
                    0c:73:df:55:e6:dc:a0:b7:27:a8:08:4a:f8:0f:64:
                    e4:ab:f7:e5:b7:7f:4b:56:22:e3:19:4f:89:a4:c7:
                    f1:ce:5d:5a:6c:9e:5a:e4:aa:3c:2c:fd:25:d2:d0:
                    ac:a7:79:41:f7:7c:1c:7a:e7:84:ec:a5:41:8f:92:
                    a4:46:b7:d6:ac:75:66:5b:82:78:a1:fe:41:48:c1:
                    e6:48:c1:43:1f:48:94:23:61:8d:0c:06:38:d7:44:
                    8f:32:64:ab:ad:fb:86:c1:3b:7d:95:37:35:63:4d:
                    0e:7c:d4:3d:20:10:01:f8:e4:c0:36:95:54:3d:c8:
                    d0:17:05:57:22:7f:4d:f3:7f:3b:d8:8d:43:5e:c2:
                    91:24:93:c8:9d:21:66:05:8e:7c:5e:34:3f:72:ff:
                    36:5a:df:4b:df:0a:41:fe:c8:c0:75:10:60:37:9d:
                    fa:ce:f4:b2:b7:3b:fe:ea:cc:ca:0a:09:47:41:5a:
                    28:8a:03:99:b5:27:e8:a5:d5:67:3f:75:e2:c5:21:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:03:AA:1D:EC:48:DE:70:21:96:5B:13:30:E6:24:20:4D:AA:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb296c2c-3ab5-3b67-91b6-2b675b886b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.195.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6d:df:8a:8a:1f:c5:e1:df:54:7a:fb:54:8a:58:19:85:3c:
         af:99:48:66:e2:2c:77:1c:67:9f:23:2f:6b:f7:b9:12:e8:78:
         49:e9:eb:91:fb:9c:08:aa:73:dc:26:a5:02:03:7b:0e:fe:61:
         7e:31:22:3a:fd:9a:f4:71:ef:9e:09:be:dd:0c:8f:01:d0:79:
         79:fe:69:54:fb:65:8f:b9:66:57:fa:b8:c6:2f:d9:64:e7:43:
         8c:bf:f2:ea:85:5b:96:bb:41:f9:81:be:26:4e:ed:42:aa:0c:
         19:58:b0:5c:3f:23:e4:ca:43:c6:61:83:00:64:47:b6:b8:91:
         23:ea:2d:7d:17:a6:65:ed:de:71:3f:dd:bb:5e:fb:6f:59:38:
         42:10:15:61:7c:a1:36:ba:90:1a:65:8c:23:3f:c6:dc:49:57:
         7f:68:85:b6:73:52:4e:7e:c2:9a:9a:8f:10:db:2a:5e:ad:a7:
         59:f7:c4:dd:b9:5a:41:f7:30:f7:bd:b7:ef:73:00:b4:64:6b:
         d6:1f:70:c1:db:ed:13:6a:f0:7b:0f:14:bc:48:59:a8:8e:36:
         83:14:bf:d9:00:69:4b:65:1f:4d:b7:97:af:30:40:d4:bf:3c:
         b7:77:f1:49:a0:a3:e4:3c:25:d6:12:f1:b9:2a:3c:1d:c5:e2:
         b3:a3:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:00 2024 by rpki-client on console-fra.rpki-client.org