Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2080fb00-67e4-3ab3-8efa-60490fd5deac.roa
File:                     2080fb00-67e4-3ab3-8efa-60490fd5deac.roa (raw, json)
Hash identifier:          2y7skKN0fcniqyLAD4vplIvmz3Hc6O1PXL72kXJBOaw=
Subject key identifier:   13:64:FC:16:C0:19:4C:FC:61:95:D3:82:AA:7F:CF:42:1F:EA:E3:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D83A86B087C077294600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2080fb00-67e4-3ab3-8efa-60490fd5deac.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.232.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d8:3a:86:b0:87:c0:77:29:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=cdc1b3e3-37e8-4835-bddb-273c9ddff072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:63:b4:8d:6f:9e:0c:fb:00:04:81:ba:66:
                    ca:88:b4:c8:63:18:26:91:bd:b4:e4:c3:3a:72:fa:
                    3d:7d:74:86:b9:5c:8c:e8:c6:ca:4f:bf:86:1f:32:
                    5c:82:dd:66:cc:a0:31:4e:e9:da:42:c8:dc:80:3a:
                    1c:b6:26:18:0e:90:1f:0b:a2:85:d5:ed:66:eb:3f:
                    41:90:c6:2b:37:a6:d5:81:4e:c1:24:57:a1:d8:65:
                    05:5b:7f:0a:fb:fa:05:28:d0:b5:ca:a7:40:16:96:
                    e6:d7:d8:52:56:ed:e3:d6:4c:66:bc:ba:8d:fc:a0:
                    91:5e:83:b3:3c:31:31:77:d8:53:34:4e:8a:98:dd:
                    a1:be:40:3b:12:93:89:b5:37:d3:0e:17:16:75:5c:
                    6c:77:e7:ce:d0:5e:a1:0d:fc:e9:30:4b:b1:02:50:
                    3e:d0:02:ae:28:03:a8:17:b5:3b:5c:6b:16:d1:31:
                    d9:1c:cd:63:01:26:39:5d:5c:f1:51:89:8e:df:9c:
                    90:af:f3:00:8f:90:20:87:54:5b:f9:cd:3d:f7:44:
                    e1:fc:04:6a:73:88:75:07:c2:a2:7b:d8:26:f5:af:
                    69:72:d0:99:a1:97:79:7d:26:5e:5c:71:72:0b:9e:
                    6b:1d:6b:3e:4c:cf:32:b4:81:48:a8:d2:3d:18:f1:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:64:FC:16:C0:19:4C:FC:61:95:D3:82:AA:7F:CF:42:1F:EA:E3:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2080fb00-67e4-3ab3-8efa-60490fd5deac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:99:6d:6a:67:b9:16:ed:29:ff:ba:36:3f:e6:d6:66:d6:1d:
         5d:2c:0b:3a:66:ae:14:04:2f:7d:ab:6a:71:5a:c8:4c:68:4d:
         63:92:1d:ef:d3:e0:70:94:92:d7:78:ed:39:05:0f:21:f6:2f:
         15:2c:bc:13:00:2d:b6:72:77:97:3a:25:c0:32:7e:86:bd:d2:
         f7:2b:3c:39:7a:6d:70:b9:dd:32:0c:b6:e0:96:e9:00:5a:34:
         9f:6a:79:91:92:de:bb:ac:b0:22:47:f9:eb:58:12:20:3c:3f:
         dc:33:a7:e4:fa:3b:1a:b4:33:9d:bd:3e:f3:64:06:84:48:9a:
         9e:c2:fa:77:a1:3b:26:3e:47:93:0b:67:89:e7:58:0f:6b:d3:
         e4:84:87:68:21:4b:4a:ed:c5:8c:8e:02:1d:97:1a:f1:d7:c1:
         2e:8f:f1:c1:43:ac:25:bd:77:6a:d4:08:b7:24:55:bf:85:ed:
         2f:47:64:0a:77:cf:66:97:98:d9:78:68:59:2b:50:0e:58:f6:
         eb:56:2d:03:37:14:5d:26:23:c2:4f:6f:52:57:ae:f5:89:42:
         d5:af:7f:40:6c:7a:e9:4b:0c:67:7f:95:d9:17:62:30:67:41:
         ca:6a:a3:72:61:e1:a1:b7:b1:34:bc:25:b7:e5:e1:8e:11:44:
         02:33:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:20 2024 by rpki-client on console-fra.rpki-client.org