Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e15d462-a8ea-3f8b-ab4b-ba22a185d57a.roa
File:                     3e15d462-a8ea-3f8b-ab4b-ba22a185d57a.roa (raw, json)
Hash identifier:          yxVxrgDJeP4puipQwMPd6eNQSkDfuu2Y0d18JpQjF5s=
Subject key identifier:   9C:16:F0:C0:EE:59:E2:58:D1:3F:F9:4A:6B:8B:1E:7C:7A:EB:C7:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA16064015C426BCB81DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e15d462-a8ea-3f8b-ab4b-ba22a185d57a.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.224.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:16:06:40:15:c4:26:bc:b8:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=8a542433-6675-4681-9cdf-aa0aef24efd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:f8:25:1d:a8:a6:13:69:61:b2:7a:27:e3:
                    ca:2c:8e:94:a7:a2:39:b2:f8:2e:17:14:a7:a5:84:
                    79:67:3d:e3:e2:74:a8:8d:6f:5a:63:1c:e5:c9:ce:
                    12:0e:a3:48:6e:a9:19:b1:b4:3d:ca:20:ec:07:e1:
                    56:60:dc:f7:5f:88:df:79:a7:45:ae:9a:d0:6f:18:
                    ed:f8:17:43:37:23:54:db:d4:1a:b8:d4:93:a8:7e:
                    3a:4b:51:e3:35:33:31:28:10:d5:ad:65:94:69:cb:
                    ea:94:c1:67:f2:49:23:85:87:87:aa:d5:54:c4:ca:
                    61:49:18:17:ea:85:43:cc:d7:fd:43:54:07:a6:44:
                    ff:3c:55:ec:a1:fe:17:17:69:a5:91:79:aa:40:3e:
                    bc:33:56:1c:61:32:8b:d7:57:64:c3:1c:fa:de:33:
                    ff:ac:87:43:78:24:49:16:69:c3:63:d4:31:32:b1:
                    04:c1:e7:d7:48:67:61:47:73:ae:42:a2:67:df:3b:
                    e6:49:e1:4c:f2:5b:3c:ba:55:47:2c:f1:23:e4:63:
                    26:1d:e0:31:cb:e7:7b:79:4e:d2:bf:cc:38:6b:4e:
                    ff:80:0e:96:5b:b3:42:20:74:e9:a2:3f:1d:7a:ea:
                    28:48:2a:49:c7:9d:6b:72:a3:bf:0d:c9:c3:fd:0f:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:F0:C0:EE:59:E2:58:D1:3F:F9:4A:6B:8B:1E:7C:7A:EB:C7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e15d462-a8ea-3f8b-ab4b-ba22a185d57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:ad:1d:a1:53:bd:63:1d:f7:aa:f2:5c:f9:1a:fe:4c:10:
         29:62:ee:83:4b:1b:13:5c:b4:79:0f:b6:b3:d8:17:39:7d:37:
         16:b0:57:a8:b1:55:93:0d:ab:e0:d5:05:4d:49:88:ed:a4:49:
         68:40:ad:59:bc:5c:fb:e2:dc:5b:59:8f:54:fb:bd:5d:49:e4:
         85:eb:dc:74:d2:7d:69:de:44:7c:db:9e:88:68:cf:34:c3:32:
         9d:01:c4:12:9f:30:ea:d2:a9:c7:f8:8d:9d:e6:d5:e0:00:b9:
         84:0b:fa:ae:fa:bd:6c:6c:ed:5c:e9:fc:29:fa:3b:c8:ce:2a:
         fa:e0:27:1b:c5:55:bd:b5:06:37:33:46:45:a3:7a:3b:ca:d8:
         63:64:60:be:9b:5c:8e:66:f2:3b:19:30:da:28:c1:6c:f6:c0:
         85:ab:13:4e:94:a1:48:03:db:09:ae:a4:69:a2:8b:cb:37:04:
         ef:6c:aa:60:0a:66:ca:3c:dc:f5:0f:a2:3c:c6:25:f5:f9:9b:
         6f:f2:1a:dc:94:db:3f:40:e0:96:e1:ac:33:2f:fe:56:14:7a:
         e0:c5:cb:1f:c3:be:22:38:1d:84:29:8d:32:ae:1c:3b:e8:3b:
         06:73:2c:17:0f:ff:ea:6a:54:c7:7b:81:96:76:06:1f:1b:b4:
         b5:cb:a1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:22 2024 by rpki-client on console-ams.rpki-client.org