Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecba592b-a4c5-3446-ba1f-d48fa2469db3.roa
File:                     ecba592b-a4c5-3446-ba1f-d48fa2469db3.roa (raw, json)
Hash identifier:          QXy3x/0FkB/eKb28FNUbHct2ohK20N5QaWoHbvIn8E4=
Subject key identifier:   48:57:F4:AE:D1:CF:6B:E9:D5:99:B3:E0:6E:EB:05:57:B9:1D:3A:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D64122301720CE47856C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecba592b-a4c5-3446-ba1f-d48fa2469db3.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        141.207.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:41:22:30:17:20:ce:47:85:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=6fc9860e-ce9d-40e4-9d1a-90db8c61681f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:4a:2b:8d:45:9d:72:c7:7c:b3:35:18:74:
                    4b:96:6c:93:c7:52:60:82:bc:d6:15:cf:fd:11:5d:
                    5a:b5:22:b0:a9:27:04:1c:07:cb:f9:02:0d:87:62:
                    cb:07:38:1b:d7:9b:78:64:bb:af:14:ff:6c:90:09:
                    32:40:6d:82:ef:fe:a4:1a:3c:3b:b4:71:af:9c:2b:
                    48:81:7a:fc:06:3c:64:c1:19:a5:73:5c:f5:96:4d:
                    69:86:c9:cf:10:75:8d:dc:63:37:c4:75:b1:14:1e:
                    42:1c:d4:65:66:07:e7:4b:36:72:8a:db:4d:3b:df:
                    b7:f2:bf:84:6e:b3:f7:da:d0:07:7e:d4:7c:cf:20:
                    c3:97:c2:5f:a4:00:f5:50:e0:e8:a9:10:0e:32:4a:
                    39:36:c0:c1:6c:05:8c:17:0c:5e:f1:f7:85:98:55:
                    4b:06:f9:11:19:91:5e:af:87:7c:79:c7:d4:3b:45:
                    94:d0:e0:3d:f4:e5:42:b7:fc:5d:46:a5:24:00:22:
                    27:b5:86:3d:f6:6d:ff:35:c7:b2:d0:96:7d:2b:0b:
                    aa:37:f5:c4:e6:82:1c:45:bb:4c:7b:70:f7:1b:0a:
                    63:fe:f4:17:74:2c:1f:76:0e:de:88:db:f1:a5:14:
                    df:ce:47:3d:08:e5:d8:85:5c:c2:11:69:b1:ac:eb:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:57:F4:AE:D1:CF:6B:E9:D5:99:B3:E0:6E:EB:05:57:B9:1D:3A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecba592b-a4c5-3446-ba1f-d48fa2469db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f7:af:60:35:79:ac:d4:c0:54:27:52:e1:1b:9f:28:52:ab:
         35:82:4e:36:4d:48:ca:50:64:e4:5c:6d:8a:23:97:00:fb:33:
         f4:bf:14:d3:22:b0:07:c6:c5:21:d5:b5:ca:7e:33:41:e4:10:
         2d:5e:05:aa:bc:f4:4a:2c:ba:2e:3a:b4:b3:c6:eb:92:ef:7f:
         87:e9:1e:bb:4c:79:fe:60:09:e0:09:83:54:3a:16:3f:6b:ca:
         ef:c3:c4:ee:70:32:83:5a:94:bb:98:52:92:70:ee:70:80:67:
         8f:df:40:68:17:f3:70:1d:25:e5:ea:72:e6:f8:ec:f2:28:57:
         2c:2c:11:5f:67:c8:8f:5d:0b:b9:a1:1b:2e:c8:3f:88:6e:54:
         03:6b:32:fc:e0:70:e2:6d:a2:6f:70:e6:75:9d:a4:b4:00:1b:
         08:84:15:69:c5:6d:43:65:55:7f:27:f9:31:88:9c:0e:8b:3d:
         f1:89:37:d9:40:9a:c5:e0:e9:8d:d8:28:98:13:52:4c:fd:c1:
         aa:cc:71:6c:a4:90:60:b4:6a:af:9e:85:15:5b:ce:3e:60:02:
         70:42:d2:fc:9f:7b:b0:49:ad:d8:84:63:c6:76:e8:e9:8f:71:
         db:0c:f9:fd:48:73:78:99:02:d3:cb:24:1c:fa:91:60:45:19:
         ac:de:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:57 2024 by rpki-client on console-ams.rpki-client.org