Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa
File:                     3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa (raw, json)
Hash identifier:          AEM/wwZRsR88NPtH7RmVrl/QYtfYGe3OrPOhD9VHZFg=
Subject key identifier:   36:76:47:DB:C4:2D:2D:5B:97:53:97:1F:B9:E1:63:0F:8F:C2:DF:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584730960B8F35243432BE5B1620
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     22394
IP address blocks:        174.41.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:0b:8f:35:24:34:32:be:5b:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=afb9b2cb-68d7-4415-94d8-d0a3898c1d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:33:99:56:9e:fc:66:3a:97:f5:d8:92:2a:
                    48:08:a8:41:6f:d7:4b:32:45:86:fe:01:9a:69:c0:
                    a9:96:13:07:84:39:e8:f6:1e:15:73:95:c5:3a:0b:
                    a1:b6:97:45:c4:26:2a:9a:43:f5:52:4b:4b:da:84:
                    61:1a:99:e0:b4:50:56:2c:aa:d4:6f:dd:fb:73:46:
                    83:44:31:b6:6a:a0:31:23:4f:9b:13:d9:c3:c8:32:
                    2e:4c:52:42:65:21:21:ce:53:ae:42:0b:03:7f:9c:
                    ac:9c:7c:5b:1c:0f:93:3d:44:d1:5e:de:8c:4b:37:
                    ed:be:dd:d6:59:b3:14:ab:33:81:39:36:92:30:61:
                    98:5a:05:7c:c5:ae:56:12:8d:ac:74:9b:f2:a0:3a:
                    75:e3:4d:62:a1:8c:e5:96:86:08:fa:f2:0f:41:61:
                    36:53:f8:3e:93:2a:4a:54:34:4d:3e:51:4e:cc:7f:
                    cc:c6:f8:ff:d9:f8:87:ab:1f:d9:66:b1:b4:b3:f6:
                    95:77:7e:94:72:ac:6e:cc:d3:dd:ea:a0:0a:4d:ba:
                    d7:e9:44:dd:82:78:7c:5b:96:cd:8e:fb:27:23:a3:
                    e7:a9:53:4f:c0:a8:b4:14:5d:09:02:53:be:db:b5:
                    73:f5:08:d9:cf:b6:8e:3f:e6:0f:ac:53:1d:5b:8a:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:76:47:DB:C4:2D:2D:5B:97:53:97:1F:B9:E1:63:0F:8F:C2:DF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:3f:b3:b5:d3:80:e4:f4:65:ec:6a:7e:1d:49:e2:e1:56:
         d6:36:bd:89:46:0f:18:3c:0e:6a:6d:66:79:71:e4:cc:64:32:
         5e:f2:f3:a1:5a:7d:bc:f8:ab:90:1f:2d:db:c2:a8:55:c2:8d:
         d6:49:f4:51:cc:4c:7a:fb:7c:89:e9:87:b9:59:b0:40:88:a8:
         9d:a0:2e:82:a2:72:38:7f:f3:f0:f9:c0:ae:19:e5:72:0c:9b:
         bc:c7:4f:1b:7d:fa:8d:70:d1:7a:06:81:d7:fe:0c:b6:57:9c:
         ed:5c:8f:6d:42:05:5e:e1:77:5d:eb:82:aa:e1:64:2f:39:92:
         6d:22:50:c4:81:be:51:cb:86:1e:7a:49:49:18:65:db:a4:c1:
         b3:3e:3a:80:56:72:28:8d:20:f9:2c:38:ec:5d:a4:7d:a7:64:
         7c:3d:29:0c:3d:26:ea:f5:ff:9f:b5:3d:31:77:72:58:29:45:
         80:19:67:4a:ee:8e:6d:cc:94:3e:5a:67:05:ff:80:87:b0:a4:
         f3:17:7d:8b:b4:e3:f3:b1:c1:60:c3:13:5a:01:09:03:08:7a:
         6b:71:d2:3b:44:c8:b2:0d:37:d2:92:77:84:43:9a:29:d5:80:
         c8:8e:b4:33:61:c4:a1:bc:61:97:be:d3:ca:7a:2c:95:a5:bf:
         f0:07:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:26 2024 by rpki-client on console-fra.rpki-client.org