Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c6e83ab-1ec5-37c1-a530-7ff82effe8b4.roa
File:                     0c6e83ab-1ec5-37c1-a530-7ff82effe8b4.roa (raw, json)
Hash identifier:          zSsorxu8d1+u95OqR34iB1PY+5otE91Hm+N4strbINs=
Subject key identifier:   05:85:3B:60:EF:8D:7C:3E:CE:71:53:70:7F:5C:83:73:3A:6E:46:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B0700DAC6BE0CCA502180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c6e83ab-1ec5-37c1-a530-7ff82effe8b4.roa
Signing time:             Fri 05 Apr 2024 01:16:44 +0000
ROA not before:           Fri 05 Apr 2024 01:16:44 +0000
ROA not after:            Thu 04 Jul 2024 01:16:44 +0000
asID:                     6167
IP address blocks:        174.42.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:07:00:da:c6:be:0c:ca:50:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:16:44 2024 GMT
            Not After : Jul  4 01:16:44 2024 GMT
        Subject: CN=e63d26ce-501b-4118-bf3e-4190d01def88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:1a:1a:a9:54:ed:f3:04:79:f2:dc:dc:dc:
                    b6:06:f7:dd:81:d3:4a:3f:66:72:93:4b:b8:e3:24:
                    0e:05:ee:0d:de:0c:ad:7a:9e:3d:6a:45:48:16:be:
                    32:97:4c:3f:f2:31:16:51:58:87:51:5e:fe:ae:4d:
                    97:6e:ab:ad:c9:74:7a:d2:bb:2c:34:f5:84:9f:f2:
                    77:37:bd:33:92:81:e0:9c:cc:95:b5:12:6b:c8:a2:
                    09:79:c7:12:b6:c0:85:23:c1:c9:3e:22:12:28:33:
                    02:5b:e3:3b:2b:04:e3:fc:bc:7b:0f:73:74:2d:2d:
                    3d:37:31:7d:0a:51:66:f9:f5:da:ed:bf:7b:8c:b3:
                    72:57:a6:06:cb:02:aa:51:35:01:75:43:be:db:42:
                    3f:9e:4a:fa:be:03:6b:a7:f9:9a:ac:f2:23:39:54:
                    96:89:88:e2:5b:2e:0f:e9:b1:d3:d0:07:f1:97:c7:
                    b0:01:e2:96:7a:df:5c:5b:62:eb:38:b3:51:95:eb:
                    14:15:f6:c4:ba:67:3f:e9:4b:52:5b:eb:5b:2a:27:
                    87:d3:98:d9:2b:44:02:41:c2:35:6b:2d:90:39:c5:
                    1f:66:e4:c7:af:17:99:1f:70:69:d9:dc:ba:59:0c:
                    2b:f3:85:8a:79:c2:69:df:e2:25:18:cf:62:b8:83:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:3B:60:EF:8D:7C:3E:CE:71:53:70:7F:5C:83:73:3A:6E:46:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c6e83ab-1ec5-37c1-a530-7ff82effe8b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:e3:3d:9e:22:07:43:67:88:4b:0c:93:78:c1:80:5d:67:
         0e:61:78:ea:d4:c9:3e:15:87:16:42:6c:5f:bf:28:3b:c0:fc:
         2d:f5:5f:09:11:a4:ee:84:29:05:09:40:32:7f:54:be:13:6f:
         46:50:72:23:6f:aa:4e:46:0c:1d:c2:eb:91:48:ef:8e:22:8b:
         7d:96:45:11:34:11:2b:1f:28:dd:ca:8d:0d:ba:10:d0:42:ae:
         7a:51:3e:5b:3c:5f:7a:55:1e:fd:94:ad:87:37:93:16:5e:8d:
         cd:16:bd:f3:5a:f2:c2:cc:94:e0:17:a3:37:e3:b8:46:4f:bb:
         89:be:5d:a0:86:f4:2f:05:f7:c7:a9:1d:0e:38:ab:9a:b2:81:
         08:6f:ef:62:27:d9:d8:2b:c8:3a:6d:12:9a:b5:73:31:8c:7b:
         8d:32:1b:7e:99:0b:51:39:4f:7a:a1:3f:8c:9e:0b:36:b6:b5:
         89:6f:b9:fc:62:01:26:c2:84:32:a7:73:ea:f9:0a:4d:d0:6c:
         91:e3:f9:60:08:a9:3f:6a:76:30:83:62:94:d1:1d:99:4d:47:
         c2:f5:cb:54:74:33:ed:58:9a:34:25:ce:a5:a2:f7:30:43:24:
         46:06:a2:a4:68:cc:4a:be:28:5b:54:a3:a4:82:da:ae:25:58:
         1b:3f:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:53:27 2024 by rpki-client on console-ams.rpki-client.org