Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f61bc6a-6676-3419-9a30-a3001174b4a3.roa
File:                     1f61bc6a-6676-3419-9a30-a3001174b4a3.roa (raw, json)
Hash identifier:          I3QiuYXpnPR1Y7WEMcxFCaHRXWHQceHb8CGI7bkAtks=
Subject key identifier:   9C:2D:FF:6B:4E:15:C8:F4:5B:7B:84:8A:6E:5B:A9:8E:F3:65:17:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858452FAFE70263D32CD466DFED40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f61bc6a-6676-3419-9a30-a3001174b4a3.roa
Signing time:             Tue 12 Mar 2024 19:43:29 +0000
ROA not before:           Tue 12 Mar 2024 19:43:29 +0000
ROA not after:            Mon 10 Jun 2024 19:43:29 +0000
asID:                     26645
IP address blocks:        65.222.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:af:e7:02:63:d3:2c:d4:66:df:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 12 19:43:29 2024 GMT
            Not After : Jun 10 19:43:29 2024 GMT
        Subject: CN=7e355fa8-9374-42f9-92b9-7010915870f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:c3:d2:ca:06:46:ef:f8:e2:ed:3b:3c:69:
                    13:ae:f0:c8:cc:96:25:c5:69:33:1f:c1:58:10:34:
                    11:e0:be:c1:3d:97:6a:5a:f2:10:1a:d3:09:44:a8:
                    f5:9c:8e:0f:ee:dd:87:3a:35:9c:84:02:0f:30:b3:
                    95:ad:e2:55:10:44:66:ec:22:79:df:da:c3:f5:97:
                    6f:99:20:79:24:d3:47:09:15:3d:ab:5e:77:35:da:
                    46:93:0d:45:5a:84:76:b1:7f:3e:65:b3:d1:83:50:
                    08:a6:9b:2b:81:db:94:99:ca:ba:2d:20:7b:b7:6f:
                    aa:0b:33:71:d6:c7:d1:c2:4e:04:ea:20:16:c5:40:
                    98:93:ba:de:88:36:17:11:cb:9d:64:71:6b:42:51:
                    15:36:41:f3:b3:4f:8e:a3:1f:6c:9f:f7:47:a9:60:
                    8a:09:2b:cb:65:86:b1:4b:38:8f:87:f9:e8:ff:3c:
                    b2:82:55:2e:1d:fc:da:ad:92:f2:ca:b3:6d:ec:03:
                    8e:b0:82:14:89:ad:69:27:57:73:de:20:f6:68:04:
                    19:f8:6d:03:7a:bc:19:c4:67:26:35:65:50:d8:21:
                    80:0d:94:a3:5e:b7:dc:14:ce:fc:36:47:22:4c:44:
                    2e:2b:8c:5c:66:03:97:98:8a:f6:82:55:21:56:d8:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2D:FF:6B:4E:15:C8:F4:5B:7B:84:8A:6E:5B:A9:8E:F3:65:17:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f61bc6a-6676-3419-9a30-a3001174b4a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.222.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:05:c9:84:36:1e:65:7b:72:db:92:e4:b7:02:eb:ef:42:a6:
         68:f7:aa:9f:9b:50:0b:f1:52:b3:96:03:9a:42:e5:9a:5a:5e:
         02:cd:6c:52:6a:de:e6:1b:e5:41:43:cc:e0:1f:a1:a9:9b:2b:
         06:b1:bd:cd:aa:a1:62:0b:1e:3f:e6:64:b3:79:ac:f1:03:0a:
         cc:f2:35:70:97:bb:98:6a:86:f2:99:69:5b:40:84:fe:d4:17:
         fc:44:2c:eb:44:e8:d4:50:88:fd:5a:90:17:98:24:7d:30:9a:
         92:66:f7:91:3f:f7:41:05:91:08:01:29:16:9e:6a:76:4d:41:
         83:b3:3a:50:8c:09:02:97:b2:82:2b:79:01:9a:71:27:cf:d7:
         6b:31:81:fc:15:8f:6e:70:ff:aa:05:7a:a6:6d:7e:55:9f:18:
         f8:08:4d:fa:68:e0:7a:01:f0:66:b5:f7:79:81:92:09:d7:5f:
         81:4b:18:08:4e:2d:9c:5e:16:7a:75:9d:2b:e6:21:a0:54:93:
         4b:d4:06:e5:2d:e6:bd:1c:88:cc:ce:e5:5a:15:6b:1e:2e:a3:
         ac:a7:9a:85:5f:8d:69:d2:7f:b0:3c:cc:ad:7e:e9:bc:98:be:
         8e:41:a2:f0:1f:02:ed:14:32:4a:60:4a:e3:ca:5a:cb:91:ba:
         4b:c7:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:24:53 2024 by rpki-client on console-ams.rpki-client.org