Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          zd/XsjYLX/ZtiBtlDAroVGnJG6vL+PjqCccPY1Hn4sQ=
Subject key identifier:   2A:10:BA:84:56:E2:9B:35:14:FB:93:1B:ED:62:6C:AA:71:4E:98:4E
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6FA9285063BA4F68618E6720B5EE16DFF387303E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS174.roa
Signing time:             Thu 14 Dec 2023 09:39:29 +0000
ROA not before:           Thu 14 Dec 2023 09:34:29 +0000
ROA not after:            Thu 12 Dec 2024 09:39:29 +0000
asID:                     174
IP address blocks:        204.93.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 09:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a9:28:50:63:ba:4f:68:61:8e:67:20:b5:ee:16:df:f3:87:30:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Dec 14 09:34:29 2023 GMT
            Not After : Dec 12 09:39:29 2024 GMT
        Subject: CN=2A10BA8456E29B3514FB931BED626CAA714E984E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:72:bc:2d:e8:1b:c5:af:9f:15:a3:80:e0:
                    5c:1a:71:70:02:5d:c6:70:02:95:b4:f5:f8:cc:74:
                    52:a5:20:25:61:86:7d:30:f7:4d:b8:ea:77:40:29:
                    6e:8e:e0:66:c1:3f:a2:aa:e9:7e:cf:1d:c2:a3:33:
                    18:08:b5:30:32:13:7e:ab:4a:b0:94:d9:11:65:b0:
                    9e:9d:13:8d:6f:84:3a:e8:89:41:6c:ff:95:1d:f1:
                    ba:cd:b0:c2:e4:ca:bb:98:25:08:3c:c3:86:55:59:
                    ef:0d:4c:05:cb:6c:ca:08:45:1d:34:78:e1:10:63:
                    58:32:33:c9:a7:80:f1:bb:2e:47:e8:3e:8f:df:ef:
                    6a:99:c7:90:8b:51:9c:6f:05:a6:82:fe:ea:5b:6b:
                    ab:65:06:10:76:36:8b:76:39:f1:80:ff:9b:00:cd:
                    2a:23:55:89:4f:b3:4d:8c:23:8e:28:d8:c0:51:f7:
                    68:13:91:b3:5b:b1:d7:63:ef:4a:9a:54:0b:b2:82:
                    44:43:16:2d:87:90:2d:2d:4d:75:a0:23:6f:9f:44:
                    52:53:fe:1f:00:61:12:e2:e2:58:18:4c:6f:85:78:
                    ca:5c:d4:15:7c:5c:20:3c:9d:eb:17:63:fd:68:c7:
                    4f:74:5a:87:24:47:65:33:87:d2:43:f8:67:a8:28:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:BA:84:56:E2:9B:35:14:FB:93:1B:ED:62:6C:AA:71:4E:98:4E
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1c:a5:fa:5c:31:da:d0:63:6e:a3:e4:5d:8b:63:c7:77:0d:
         99:48:94:9c:d4:f7:6b:6e:37:e7:58:50:b7:9c:b9:24:61:79:
         4c:06:03:7b:e4:13:28:79:3e:8d:8e:27:7c:00:25:0b:fb:f3:
         bd:02:8c:c6:cf:dc:ad:a5:02:ed:7b:d9:dd:d7:ff:90:41:3c:
         ef:ea:40:0f:59:3c:94:0c:cd:41:e4:ec:8e:3d:1f:ed:cf:90:
         49:3c:98:2f:81:20:d1:22:84:23:e0:83:91:c6:15:1b:19:16:
         6e:62:73:10:b9:6a:f9:de:19:29:1e:a5:c0:e8:55:2b:5f:50:
         6f:68:04:0a:b1:3e:51:4a:c2:85:e6:5f:5b:46:72:01:96:31:
         af:f8:8a:29:7f:96:fb:a4:4e:65:60:ba:3e:ce:d8:64:e3:6e:
         eb:44:cc:01:9c:7a:0b:26:65:cf:6f:24:da:fa:fb:e0:7f:ac:
         29:3d:83:5d:8c:43:a3:85:0f:11:61:e3:27:74:34:4c:9d:ed:
         a4:cd:88:bd:07:4f:0f:fa:f7:f7:89:78:2f:e4:12:18:5f:30:
         34:45:8e:b4:e0:cf:cb:0f:d3:18:8e:aa:fa:3b:d3:16:bd:f9:
         8b:2e:90:c7:70:ed:88:cb:a9:03:81:8f:04:57:54:47:dc:81:
         b7:de:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 08:10:32 2024 by rpki-client on console-ams.rpki-client.org