Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1855d120-4605-34c1-aa40-a0262309b94a.roa
File:                     1855d120-4605-34c1-aa40-a0262309b94a.roa (raw, json)
Hash identifier:          5ZwM+FobIizFdewicLEPn1zLhfYcuNZVkgSQA4cOL7c=
Subject key identifier:   66:E8:EC:C4:8E:D1:79:D9:6A:9E:A7:90:C6:C8:C9:E8:E2:7F:1E:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D7598F9DC8548E62AFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1855d120-4605-34c1-aa40-a0262309b94a.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.232.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d7:59:8f:9d:c8:54:8e:62:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=187b5158-e7cf-4641-94e7-516a14e79166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:ee:58:d9:31:d9:35:bf:b8:89:90:45:c4:
                    8b:96:3a:81:be:9f:25:01:91:ca:8b:d7:1a:44:8e:
                    94:c2:fa:58:68:e3:ee:9c:73:f4:78:ed:57:1b:f6:
                    18:b9:b2:df:b9:62:d1:91:e2:f6:73:86:d2:53:e1:
                    2d:5e:d4:da:e3:26:8e:ad:f7:45:a6:33:29:43:51:
                    89:54:64:72:c7:69:9d:24:dc:4d:75:d8:38:16:67:
                    78:22:b6:23:a5:07:d8:d2:fc:4a:6b:24:36:b6:b7:
                    fa:7f:40:47:20:64:69:36:2b:09:ef:50:93:45:30:
                    f1:46:fe:ea:6f:04:2c:0e:7c:eb:a3:f6:a5:d3:7d:
                    f4:6a:0a:f8:bc:89:98:34:ac:44:74:53:48:c1:ce:
                    b0:77:0d:72:58:4f:04:cd:e3:02:b3:4e:ee:70:30:
                    77:0d:fa:a8:3e:f8:39:e1:8f:44:32:9b:bb:d8:be:
                    10:a9:04:0b:b1:32:e4:49:e6:12:b1:14:60:17:3b:
                    79:cd:ba:07:de:28:ee:f5:fb:1a:40:c4:28:7c:8f:
                    da:9c:38:17:d3:7e:13:ff:ba:26:9d:8e:f8:e9:70:
                    be:a8:b8:20:18:a9:bd:36:76:56:62:c4:2c:2f:5d:
                    48:1b:26:35:26:3a:84:88:fa:75:62:fb:d6:b5:78:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:EC:C4:8E:D1:79:D9:6A:9E:A7:90:C6:C8:C9:E8:E2:7F:1E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1855d120-4605-34c1-aa40-a0262309b94a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:03:cf:39:43:32:43:00:27:b2:a3:2a:60:20:2f:63:e8:49:
         d5:2a:e7:73:86:e4:0e:11:91:ed:86:af:2d:58:d9:e9:2d:71:
         81:db:47:6d:fb:c0:17:00:17:dd:a5:cf:4f:0b:21:cc:23:b5:
         db:c6:ab:3f:69:01:fe:33:42:65:2c:88:80:91:49:b2:35:4c:
         05:b1:8b:cb:b0:87:3f:ca:3d:44:f3:b2:eb:a6:e8:58:9e:58:
         ca:de:37:30:57:bf:95:e0:e1:cf:60:3f:76:ba:26:0a:4b:16:
         6e:e9:a6:7b:87:b0:9b:c5:43:be:60:0f:ed:bd:3b:d4:0c:24:
         ef:ab:d4:0b:68:6e:9f:57:14:b0:f7:7d:15:54:16:a9:a9:fe:
         31:c7:22:a3:91:bb:28:48:90:43:83:8a:7a:08:d2:b7:11:df:
         37:2b:60:26:3c:19:27:28:49:54:e9:e6:5f:01:a2:07:0a:f0:
         86:66:8e:7b:92:7b:20:fe:7d:f7:ea:b9:3b:32:94:2d:c3:10:
         02:c9:d5:8c:ec:d0:b6:b2:02:68:8a:87:a0:d2:be:6a:f4:61:
         ce:3c:e0:bd:8a:3c:72:de:40:8e:e1:88:b1:40:9f:b0:4d:1e:
         90:56:79:95:d6:c6:b6:a0:d8:76:0f:09:65:cc:97:d4:48:0d:
         89:52:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:29 2024 by rpki-client on console-fra.rpki-client.org