Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa
File:                     2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa (raw, json)
Hash identifier:          Q9v71PUlg5OHGP/kcJheNKLMp7yY0aj2PAv8E2OnGcM=
Subject key identifier:   03:C0:8C:D0:08:BC:DE:95:17:2A:5D:EE:7B:81:A1:02:52:19:4D:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584701204D588E69C737DD22F52E
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.213.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:4d:58:8e:69:c7:37:dd:22:f5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=aee7b48e-4171-4e07-95ca-a62e70fede96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:39:cc:a5:3e:01:3c:bc:8b:6a:68:5d:cf:
                    00:73:13:c6:28:31:11:45:41:4f:f7:69:ef:99:aa:
                    91:0b:8a:45:72:8a:e2:03:ee:64:2d:1f:f4:e1:56:
                    a6:b1:17:2b:86:1f:17:a0:04:b8:aa:e2:fb:4a:fa:
                    49:77:5b:df:d4:2c:16:ee:ff:ae:c8:1e:19:80:08:
                    11:86:1d:8f:ad:9d:b0:a0:6e:6e:47:df:2c:80:9f:
                    cb:00:0d:a0:50:ea:eb:a7:5c:08:27:91:2c:18:b7:
                    75:97:09:74:34:3b:c0:08:a6:56:d8:3a:d9:c3:68:
                    ac:fb:61:fd:32:2b:46:6a:66:33:c6:10:02:a1:e5:
                    38:44:7d:d4:d1:11:5b:44:9e:5e:82:19:7b:dc:55:
                    3d:9d:36:b5:f8:9d:3b:d7:21:90:99:14:86:aa:6c:
                    24:48:fc:c1:2d:bd:53:6f:2f:55:3d:7e:26:41:1e:
                    71:0e:5c:34:5b:34:16:d2:7a:00:ba:70:48:9a:2b:
                    55:21:fc:ea:19:bb:f0:fd:05:20:29:aa:79:0f:92:
                    fc:a3:88:5f:f4:4f:48:03:f8:07:4f:b4:3c:15:80:
                    66:ca:8e:b0:1a:d0:4e:c2:e3:77:69:bd:79:e6:58:
                    f8:e7:52:9a:0f:b9:53:89:1d:4f:14:6d:fc:41:ae:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:8C:D0:08:BC:DE:95:17:2A:5D:EE:7B:81:A1:02:52:19:4D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:25:56:ba:b1:06:a0:da:74:7e:5e:26:79:6c:41:a3:e3:94:
         fb:5d:b7:f3:95:27:8a:a3:32:90:be:01:1f:31:92:ff:e5:85:
         80:b6:84:39:c1:19:9d:75:e2:01:f8:cd:3c:2d:fc:0e:e2:e9:
         7a:e6:cf:a2:43:d6:a5:b4:01:3c:e9:1b:30:db:0f:81:cb:97:
         e9:cb:4e:65:71:fc:cd:f4:69:28:62:33:98:82:ef:57:3d:64:
         81:b5:a3:8b:d5:e6:91:d2:5c:ea:71:6f:26:56:d1:02:3b:4c:
         44:cf:af:aa:ca:5e:79:45:43:ff:12:51:38:af:bb:ed:c3:e6:
         cb:f2:d1:da:f8:18:d7:22:66:be:7f:09:43:a7:42:9b:4c:a4:
         07:8a:ac:a1:12:75:e0:45:a9:15:e7:3c:9e:8f:dd:47:d1:3e:
         2c:dd:0f:a8:cc:8f:f6:97:da:a2:f4:e0:8b:cc:5f:ad:f1:85:
         32:28:4b:94:ba:5d:42:c7:81:0c:7a:56:b8:1b:28:82:ab:6b:
         01:15:04:e4:fe:0f:f4:73:76:89:bf:9d:f2:d1:19:54:46:42:
         cf:ec:2d:79:44:3a:b1:82:fa:ab:cd:32:df:6c:cc:3b:d8:67:
         ea:0e:15:51:be:22:67:8d:d9:95:8b:53:2e:9c:54:49:e3:e1:
         6f:a6:a8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:10 2024 by rpki-client on console-ams.rpki-client.org