Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13e63b82-d55a-3829-969d-f66b538b2474.roa
File:                     13e63b82-d55a-3829-969d-f66b538b2474.roa (raw, json)
Hash identifier:          yR9jeDfbcOHjynAYprs3/Ng1dHBJnTGO6Jd3VNZRJYs=
Subject key identifier:   C1:BC:6E:AF:13:67:75:DC:1B:5E:E1:95:D6:DE:DB:89:3C:07:2B:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584730960298804E585396536F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13e63b82-d55a-3829-969d-f66b538b2474.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     22394
IP address blocks:        174.41.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:02:98:80:4e:58:53:96:53:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=0d93fd18-54f8-4ed7-b0b9-a2687f4e99d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:00:8a:98:65:57:33:d4:b1:df:ea:7c:f8:
                    d6:52:d5:e8:aa:84:64:f3:37:87:c4:85:42:11:3c:
                    ef:9d:42:0b:49:43:c2:df:8e:42:a7:f4:6e:de:d5:
                    28:c9:6a:9b:1d:3f:2b:8b:bf:7b:d6:e6:e9:e8:55:
                    8e:97:40:06:87:65:4e:32:17:31:87:cf:26:4d:08:
                    16:4b:f5:a1:38:90:df:94:04:ac:7e:12:15:56:24:
                    20:20:7a:31:c1:c3:4e:e3:db:34:7a:54:f7:37:e5:
                    ac:7f:b4:a7:ca:c4:1c:e2:c3:bd:25:70:e6:2a:1d:
                    47:a2:bd:d7:85:da:90:ba:be:48:77:7a:f4:a4:c2:
                    86:b6:1b:0f:ed:75:27:e2:24:09:a4:d5:4a:32:92:
                    9a:73:fc:ff:64:4f:6d:8a:bf:b0:d5:b2:6c:5a:28:
                    0e:2d:11:e4:19:49:48:7c:29:2d:2a:86:4c:0e:50:
                    ef:84:ab:3e:4a:b8:6b:7e:93:3c:55:f5:55:7e:f1:
                    22:1d:54:f6:64:da:ea:fb:6e:bf:75:65:7e:0f:cb:
                    98:80:f2:a9:54:22:c2:56:5f:2b:fc:3d:d7:a8:35:
                    f1:23:38:10:a1:ce:d1:8f:1d:6d:ff:a1:8d:6c:8c:
                    88:8b:ce:fe:73:b6:e6:e1:7e:22:27:f7:1a:3d:a7:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BC:6E:AF:13:67:75:DC:1B:5E:E1:95:D6:DE:DB:89:3C:07:2B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13e63b82-d55a-3829-969d-f66b538b2474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:73:63:50:08:fd:30:d5:8f:fe:03:56:f6:74:c0:c6:31:
         3c:0f:80:bc:37:8c:45:ca:0b:7c:43:a5:54:4f:3a:ca:c9:b1:
         c5:f2:a9:e5:9e:c7:fc:61:fd:37:89:7b:e2:d5:fd:58:d0:fb:
         c2:ac:03:6e:96:85:6e:eb:9b:14:df:4b:f8:b2:ed:7d:11:a0:
         2c:0c:8a:75:24:6f:6e:82:bf:0c:73:d9:1c:3b:06:29:65:f1:
         6d:0d:4c:41:e2:74:85:a8:ef:26:7d:70:9c:c2:7e:3c:ff:9d:
         ea:0c:bb:5a:2c:15:79:b6:3a:89:77:f2:7b:b9:ab:2a:b8:ff:
         e3:5c:37:2d:6d:66:cd:97:20:03:d7:16:95:df:ec:0b:13:fd:
         10:a3:1f:8c:0b:1e:80:c1:b2:9e:21:a5:d3:1b:57:d1:59:ed:
         2b:c4:18:3e:fb:3c:ed:b3:39:93:b6:78:b8:0d:da:c2:3d:75:
         43:b6:3a:58:ce:17:49:19:88:ab:f9:84:02:4d:33:5c:9c:d5:
         77:2d:80:e4:28:9d:1c:0c:77:77:02:19:42:3e:fa:29:58:5d:
         53:e8:15:ab:31:8e:bd:65:e8:85:57:03:5f:4e:5d:dd:3b:4d:
         78:dc:8b:3d:f9:3e:2b:5a:87:c7:4a:07:31:d6:83:e3:ef:28:
         38:03:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:12 2024 by rpki-client on console-ams.rpki-client.org