Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa
File:                     fd224140-4d0a-3a04-9b68-dad4b44ae470.roa (raw, json)
Hash identifier:          33lYyw0N84dGqPQcgWMKvw3NT98rQGTdjEbWImnMDiA=
Subject key identifier:   64:95:79:73:12:3F:12:9C:67:6B:2F:7A:31:52:9B:C4:D4:1E:E1:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1F9FC50A14101DE167A0280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.200.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fc:50:a1:41:01:de:16:7a:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=36149b9b-5e42-4ab6-b880-d36976d89cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:ed:66:8c:35:16:61:34:56:c6:6f:8c:35:
                    f9:ad:f6:3d:13:b7:8a:ea:ab:09:a4:fc:39:c6:e1:
                    8e:3f:93:9c:23:0b:b8:bb:cf:e9:26:30:a0:63:17:
                    7c:c7:d6:1e:58:3a:ac:93:56:55:48:c4:14:9e:dd:
                    6a:b5:98:ad:1a:22:04:88:5f:8e:e2:ab:69:76:71:
                    85:a3:5d:7e:0f:42:c6:61:27:e6:79:33:20:b6:fe:
                    81:0b:c3:83:4d:61:8f:ea:1d:62:7d:8a:bf:8f:05:
                    3b:1f:26:1c:1b:5f:ef:c6:1d:40:5e:03:4b:d1:f2:
                    87:9f:e6:2d:ef:9e:c4:36:f2:e7:03:d2:1e:7b:fa:
                    dc:c4:52:13:4c:89:04:b5:d3:57:e7:0b:e2:80:c6:
                    f3:e1:05:d7:13:0e:b8:12:74:5e:c8:d6:ae:5f:93:
                    f3:ab:1f:9f:72:62:77:2d:be:22:02:04:4c:a3:1a:
                    c9:d3:39:ec:3a:1d:ba:ad:1a:29:b8:5a:f5:7b:c5:
                    82:32:66:bc:b6:e7:b0:40:f1:2f:af:5f:c6:9d:51:
                    ba:32:66:24:07:72:32:97:3d:cc:22:ed:c4:88:2a:
                    55:2e:62:5e:85:c1:7b:d8:f1:23:6f:36:2c:d0:d7:
                    72:01:39:af:be:9b:07:bc:c2:36:d1:8f:f1:a1:f1:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:79:73:12:3F:12:9C:67:6B:2F:7A:31:52:9B:C4:D4:1E:E1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:1a:b4:93:79:88:b9:4d:eb:f2:77:50:0d:64:6e:79:59:
         ce:fe:d5:05:3c:f5:5b:ca:b7:f2:bf:5f:41:32:44:1e:c0:9e:
         c4:c2:9b:43:f6:9f:ee:8d:42:c0:cb:7d:35:20:94:9f:46:b8:
         7f:b3:26:b9:a7:e6:12:cd:93:1e:9e:75:20:90:8f:58:0d:5a:
         f4:95:c3:a5:2b:ab:87:64:66:3c:99:ac:33:5f:17:b3:7c:5a:
         d1:0e:a5:53:ea:bc:39:93:2e:ab:d2:48:df:b8:3a:0b:71:5a:
         59:76:27:7a:d2:c2:58:5e:a9:20:e2:82:43:b1:e7:ed:68:2b:
         c0:11:4b:75:83:8a:5d:42:1f:77:fa:9b:47:61:0e:f9:6b:3c:
         49:c7:5f:25:ee:87:7f:0b:5c:fa:b9:d4:91:ca:e1:fe:49:bc:
         15:5c:63:a2:3d:85:a1:d0:dd:38:da:77:34:f1:56:25:4a:3a:
         83:82:74:46:52:5b:f2:d4:20:a5:3c:ad:11:94:f0:bd:d5:7b:
         c9:78:5c:73:36:94:17:f1:51:84:dd:d6:98:85:fe:8c:91:54:
         13:75:91:1a:e4:8e:9e:36:5c:e0:73:3f:b5:c5:ce:46:b0:38:
         69:66:24:66:5f:38:71:b3:af:fe:c6:14:73:13:d7:8e:31:ed:
         2a:57:c0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:00 2024 by rpki-client on console-ams.rpki-client.org