Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa
File:                     3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa (raw, json)
Hash identifier:          Tw8BlhhzXNYtE1vd5LgL/tM7ugJ6FAGF72uVgMkxyYQ=
Subject key identifier:   C1:94:09:8F:3D:83:E1:B2:1B:A2:17:4D:C0:A8:57:19:60:6B:E0:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E83AA8E4D954760FBCC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.244.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e8:3a:a8:e4:d9:54:76:0f:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=7625fbd2-9a91-4198-bb29-f57081bb9969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:38:28:69:0a:3e:54:d8:4c:34:80:a3:be:
                    af:e0:e0:db:f6:fb:74:f6:84:83:81:5f:05:ba:50:
                    fd:3d:2b:4b:78:61:5c:58:64:47:7e:91:8b:51:c9:
                    7d:a5:d0:a2:52:ff:85:2d:58:78:50:1c:90:17:23:
                    36:bf:03:a1:bd:65:82:c6:e0:0a:0f:55:7c:ad:a6:
                    6f:e6:be:0f:5c:2a:71:57:93:12:9b:f7:c7:7e:5d:
                    f3:ce:91:c4:02:95:fa:17:b1:eb:0f:54:25:62:27:
                    0c:b8:4b:30:e0:9c:f3:e9:b2:e5:0b:2d:9c:58:a1:
                    6d:86:37:8e:c8:ac:70:30:c6:11:87:84:de:96:a3:
                    2f:a2:f0:1f:0d:5e:67:5b:8d:a0:49:b4:25:a8:41:
                    1a:77:66:07:df:cd:52:ae:89:8f:ff:a6:17:cc:61:
                    8f:ba:5b:46:6b:7e:97:c5:b6:2b:75:77:d1:1f:46:
                    cc:e0:0c:2d:f2:0b:02:16:2a:9a:79:08:b8:8f:9a:
                    d1:92:b5:41:55:41:ea:f7:7d:1e:b9:f0:f0:15:15:
                    8f:d5:33:1e:fa:ea:93:d9:ea:eb:9f:1a:37:c4:a4:
                    7a:64:63:8e:26:55:9a:50:d5:ed:3e:65:f3:61:46:
                    94:6b:78:99:6a:3a:de:50:03:68:27:18:49:b0:f9:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:94:09:8F:3D:83:E1:B2:1B:A2:17:4D:C0:A8:57:19:60:6B:E0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:74:59:77:0f:e7:65:c5:f4:0a:8a:51:5f:42:85:95:27:fb:
         20:67:96:94:08:4a:c4:3e:33:8b:72:a8:5e:27:73:10:8e:44:
         11:ec:8d:78:0b:06:42:7c:33:88:73:1a:7e:59:67:1f:eb:89:
         03:3b:a9:3d:cd:28:e7:3b:c8:41:33:e7:7e:da:2b:2c:e0:4b:
         28:fb:c1:39:17:86:2b:e2:aa:79:b0:34:ab:14:10:bb:4c:6c:
         10:e4:cf:81:37:29:8b:b1:ce:c2:df:6c:08:47:25:9a:5b:81:
         76:83:45:b6:be:57:c1:f1:da:9c:64:99:d6:2b:ce:c7:4b:11:
         df:44:6e:fa:9a:1e:18:11:d3:fe:e1:87:fe:66:5f:d2:27:1f:
         85:3e:2b:a4:bd:1c:a1:36:a5:1f:74:82:f4:1a:c2:95:df:31:
         45:40:56:6d:5a:bf:33:17:ea:21:82:8a:e3:14:f6:22:48:df:
         75:bc:7a:28:4a:ee:8e:35:58:e8:c6:9d:9e:0e:00:02:8b:22:
         0e:70:18:1c:f4:a9:a4:53:60:6c:48:d8:fe:6d:9f:c1:52:66:
         b2:3c:50:12:e9:21:b0:cb:69:3c:bb:2b:ab:37:e9:3a:d3:25:
         12:41:20:cd:9a:2f:1f:41:cf:ef:23:1b:27:d3:17:78:8b:e6:
         70:3f:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:19 2024 by rpki-client on console-ams.rpki-client.org