Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa
File:                     36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa (raw, json)
Hash identifier:          qMm899OwqzPPHfHstsooYB1aLVRdbL1wiK2gFIEd8pg=
Subject key identifier:   FD:43:EB:20:81:50:7E:AF:74:20:5D:87:52:96:98:93:64:AE:A6:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584730960A014B8A4D15BEF00510
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     22394
IP address blocks:        174.41.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:0a:01:4b:8a:4d:15:be:f0:05:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=3c5ad924-b485-4239-91f1-3d2cea804127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:70:a3:97:80:33:b7:e4:10:2b:e4:00:11:
                    5d:aa:f1:b3:b0:27:c7:20:53:e9:d2:08:cf:da:ad:
                    de:22:56:90:c0:dc:62:bf:92:c3:80:40:4f:f4:2a:
                    20:49:31:76:42:c4:09:f2:9d:81:4b:02:c1:5d:3d:
                    73:17:a1:f6:ff:4f:6a:51:0b:ac:d1:26:1f:fd:f9:
                    e7:b3:2f:6b:86:aa:25:a8:ff:57:13:c6:c3:94:4c:
                    3c:b3:99:7c:80:f8:e6:0f:64:40:63:61:8b:1d:cd:
                    25:a1:74:4a:25:a1:58:c3:70:d8:e6:24:37:04:9a:
                    a5:90:36:0f:a2:81:94:7f:75:f1:ca:f9:90:ae:4c:
                    04:5c:d8:96:ab:ec:5d:1e:c7:67:ac:f8:49:24:5e:
                    bf:53:a0:6f:b7:8e:66:76:79:40:15:2a:43:c0:10:
                    73:12:82:46:3c:dd:64:03:d6:97:1c:c6:2b:1a:8b:
                    52:e6:86:7b:32:b6:87:5e:ff:35:99:07:e8:d1:90:
                    5b:01:fe:1e:cb:d8:01:33:3a:46:64:a4:0e:f8:be:
                    da:c1:0d:31:09:09:53:24:51:75:c0:bd:03:db:7b:
                    1c:c3:8d:e9:7d:af:08:47:8f:6d:7b:86:40:09:4c:
                    f0:b5:b5:bc:bf:e9:88:cc:d5:58:f0:1c:3c:63:08:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:EB:20:81:50:7E:AF:74:20:5D:87:52:96:98:93:64:AE:A6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:2c:49:dc:0b:85:e4:21:91:e3:9c:9e:c4:91:06:6d:96:
         a0:78:c4:d1:eb:db:60:07:7e:1a:09:d1:73:1b:9d:de:8a:35:
         d0:32:fd:6f:09:33:08:a1:0e:0f:15:f3:57:06:3f:cb:0c:d3:
         18:e5:88:0a:27:8c:dc:06:03:c6:73:d4:4f:9c:93:10:5e:cd:
         7f:4d:5b:d6:b5:02:57:68:c4:fc:b2:26:b4:77:69:4e:ab:73:
         4a:eb:49:30:00:0e:81:33:ca:a9:a1:ee:56:02:06:61:6b:55:
         db:23:4b:4f:7d:d5:3f:54:c5:36:cd:1b:f0:52:b3:f4:2f:c6:
         75:ba:f3:7b:75:3b:ae:1f:ee:87:d4:87:7e:8c:fa:30:b7:f5:
         a4:a6:ec:dd:e4:9a:92:a0:96:84:8d:d9:22:75:32:f9:60:fa:
         91:8a:71:63:ab:59:b0:59:65:5c:fe:cb:1a:d6:46:b1:79:a1:
         53:81:a1:ad:36:83:4d:97:8f:b6:b8:fc:8d:b2:43:81:d1:0f:
         e5:00:ab:4d:02:d5:a5:12:6c:43:b5:53:c8:62:45:41:a0:c3:
         1b:1d:a1:22:8a:47:9f:00:21:23:92:5f:72:9b:61:0a:27:b2:
         d5:75:ba:c0:e4:4e:2d:31:ef:5b:7e:ee:5c:a9:e2:71:a5:b0:
         ba:3d:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:24 2024 by rpki-client on console-fra.rpki-client.org