Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/287ade77-22b1-3f51-8573-810d25db274a.roa
File:                     287ade77-22b1-3f51-8573-810d25db274a.roa (raw, json)
Hash identifier:          tjP6QG+1YZqLs0xV73UJ8jCRF1QV1eeQQlEgkCC7HFA=
Subject key identifier:   80:5A:87:30:42:13:87:81:7E:F4:CB:F0:53:94:D6:92:E5:11:09:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D85ED726E4DB748CD3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/287ade77-22b1-3f51-8573-810d25db274a.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.232.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d8:5e:d7:26:e4:db:74:8c:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=1ec6f438-34df-44c3-8170-82d315a55564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:b1:4c:d8:3b:e3:49:c9:e7:19:2e:a2:fe:
                    04:6e:d8:23:77:45:a1:c2:d5:ae:a7:a8:c4:50:d9:
                    c7:6b:36:4d:cf:3f:f0:7e:12:6e:8a:43:5b:63:15:
                    7b:07:8f:2f:93:fc:88:9c:98:67:f4:c2:5c:a4:2d:
                    5d:ee:35:90:c6:be:b3:b4:c5:bd:99:22:1b:a9:8c:
                    2e:17:9d:ef:f5:37:28:b2:a7:33:1e:b5:12:e9:a3:
                    2b:96:98:7b:b4:4c:c0:d0:b1:2a:af:8a:ae:63:3d:
                    e8:a3:a6:c9:65:ac:ec:3b:f6:2f:2b:d6:a7:11:48:
                    83:20:3d:f2:c6:c0:34:56:3b:2d:55:72:37:fd:59:
                    e9:da:3d:e9:d6:72:6f:8e:83:d1:b7:53:72:6b:fe:
                    04:0d:ca:ff:69:64:89:3c:83:07:4a:a8:36:89:95:
                    67:72:b3:c9:60:63:c1:1e:71:5c:79:0a:3f:f8:d6:
                    7b:a6:7d:39:fe:57:61:6e:0d:97:2e:d4:6f:d2:a8:
                    c5:c3:bb:7f:68:ba:c0:35:a8:c5:25:3e:da:7f:fe:
                    a2:97:80:80:95:f7:db:87:e8:54:04:01:de:58:5b:
                    36:33:db:b7:7c:e7:74:26:6b:7b:47:06:86:14:d2:
                    95:bd:74:86:98:79:b5:5d:ef:f4:97:f7:03:a9:57:
                    45:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:87:30:42:13:87:81:7E:F4:CB:F0:53:94:D6:92:E5:11:09:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/287ade77-22b1-3f51-8573-810d25db274a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:19:59:30:24:76:f8:a1:70:ef:f4:61:e1:98:5d:97:6c:
         0a:ad:2c:fc:7f:f9:47:7c:3d:ab:70:86:9e:66:57:2b:6a:9a:
         b1:2b:3e:2c:a2:3f:32:3b:96:fd:e8:eb:78:df:b1:e1:c8:b0:
         b4:63:cf:c1:17:ae:e0:c8:53:02:65:62:f9:b9:f1:54:47:49:
         9e:b1:06:2a:d6:c0:e0:70:21:87:c5:12:17:17:8e:ad:59:c4:
         86:3e:88:7c:5c:6c:b1:f0:8f:e8:59:d9:51:7b:7f:d7:e4:d7:
         7c:57:09:c4:af:3d:53:36:63:0e:be:74:66:15:13:2f:14:bb:
         e6:df:53:40:00:a6:f8:62:2a:42:9b:a6:2f:ab:61:a0:ea:9c:
         96:a0:73:d2:72:82:30:97:61:2e:5e:20:21:bf:d9:7b:7c:45:
         a4:0a:14:d0:ae:ae:62:c5:0b:0b:79:29:a0:41:cf:06:bb:c2:
         e3:6b:ce:25:b5:47:85:25:b0:42:06:c4:4d:25:2b:65:89:c1:
         c5:d6:6b:d6:46:45:c7:19:76:a9:68:06:f5:f0:6b:9e:72:5c:
         f5:48:6b:ce:30:db:af:d0:26:96:5a:bb:fc:88:1e:e6:75:f3:
         2f:62:e8:90:57:3e:ea:a7:49:cc:b3:df:75:7a:db:b9:3d:98:
         c0:be:bb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:12 2024 by rpki-client on console-ams.rpki-client.org