Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0415f8a-e719-3573-b6ce-454c87994a91.roa
File:                     f0415f8a-e719-3573-b6ce-454c87994a91.roa (raw, json)
Hash identifier:          8LgvYoS+uPq8oqqhg3Q/XiPdgdEAO8ER+Ld6HN0UMQo=
Subject key identifier:   FA:3E:73:43:66:7F:16:57:25:9D:E3:28:60:55:5B:3A:03:0B:5C:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA06780148562176232C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0415f8a-e719-3573-b6ce-454c87994a91.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.215.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:06:78:01:48:56:21:76:23:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=7c17bfe1-8335-4577-831c-ebc983b39532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:16:6f:ad:7d:d4:13:a9:38:ec:bf:ad:60:
                    a2:78:27:2e:af:72:3d:f5:b9:8f:53:b5:d5:54:e0:
                    35:9d:58:fa:d4:3c:26:e5:9f:a4:7c:fe:0d:c1:9b:
                    0e:8f:c0:d0:19:62:49:ca:c7:20:d6:33:3c:8b:cb:
                    c4:c3:af:bd:d4:76:d7:fa:ac:ba:d2:33:2e:42:82:
                    3e:2e:a0:fd:4d:73:68:d8:4c:b3:12:d0:6a:c4:5f:
                    67:e8:41:c9:48:97:84:a2:5f:28:5d:da:67:44:aa:
                    2b:40:ab:ed:93:ab:50:7d:6a:63:dc:bb:a9:a8:15:
                    37:b6:46:a2:ab:a9:b2:33:f0:9a:4b:44:03:fc:6f:
                    a0:6a:4d:8d:70:83:04:f8:68:1e:34:80:28:b7:35:
                    e8:09:2b:c9:2b:05:2e:75:b6:a1:31:d0:bc:47:f5:
                    d7:2e:54:a2:68:a0:87:b1:2f:b0:ba:1f:b8:fb:58:
                    e3:66:53:e6:52:bf:53:4b:72:a9:71:36:1e:2e:b5:
                    72:2c:f9:5c:2c:e7:f8:cf:a3:0d:b4:b8:e3:7b:ff:
                    ba:34:6f:55:ff:e2:54:8e:35:99:9d:b7:43:9c:ce:
                    db:00:09:20:59:dc:43:77:c7:91:9d:7b:a8:9e:32:
                    11:86:00:6f:d0:dc:11:dd:53:2a:cc:3c:5b:6d:5e:
                    9e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3E:73:43:66:7F:16:57:25:9D:E3:28:60:55:5B:3A:03:0B:5C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0415f8a-e719-3573-b6ce-454c87994a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.215.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:7e:5f:36:e0:aa:f6:c2:85:7a:47:0e:cf:a4:98:72:0f:95:
         63:13:40:2f:95:26:33:cd:6d:99:c0:dc:67:8d:e0:f2:8d:12:
         e0:a1:65:15:ef:d2:7d:f3:1a:87:6e:1e:20:7e:03:36:1f:c0:
         d6:15:a8:f8:84:a8:46:56:bd:cf:cc:84:bf:e4:e4:dc:9b:b5:
         cb:97:97:78:12:22:9c:4f:f1:e7:bb:9e:b8:a6:0a:6a:eb:ca:
         dd:f1:09:d6:d8:26:ce:76:aa:24:fa:c3:8c:e4:88:59:0e:10:
         c7:e0:56:02:e0:e8:60:0e:14:0a:09:e8:57:27:f7:26:10:cc:
         e7:fa:08:0c:8e:3c:c9:3d:44:1b:18:1b:0d:3e:62:2e:7f:71:
         a1:c6:f9:3f:fd:30:de:7d:04:81:a9:12:c5:e5:9f:f0:7b:2e:
         c7:4b:23:81:72:0e:83:52:eb:dc:32:00:e1:9d:22:e8:c0:6a:
         86:22:db:2d:2b:d2:e2:2c:3a:00:46:d3:b3:af:97:f8:37:87:
         76:6b:23:97:af:62:76:3f:7f:4f:b0:b4:d4:7f:68:f6:07:22:
         53:46:9e:be:25:b3:70:37:bc:c4:5a:b9:90:30:91:62:9d:ee:
         2a:76:7c:96:28:0e:df:27:b1:96:e1:fe:07:95:66:6c:82:79:
         94:8a:4b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:57 2024 by rpki-client on console-ams.rpki-client.org