Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/446b068d-c20f-3183-934e-721e430ed60e.roa
File:                     446b068d-c20f-3183-934e-721e430ed60e.roa (raw, json)
Hash identifier:          EGjMBnlKs4q94kvTfyO8GQ8fwLsG8enNgOgQUXBuJ5I=
Subject key identifier:   F2:5E:A2:E6:7F:6C:2F:6B:A2:B6:7A:C4:51:4A:63:68:50:45:02:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584730960A780F5AF1587CC85600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/446b068d-c20f-3183-934e-721e430ed60e.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     22394
IP address blocks:        174.41.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:0a:78:0f:5a:f1:58:7c:c8:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=2d24f8d2-2825-4bca-a5a9-168b21471109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ca:24:ab:71:a5:eb:67:d8:a7:09:50:02:32:
                    6f:60:60:33:79:00:45:59:8b:6f:b7:ee:44:a3:59:
                    2d:2c:aa:7d:57:e0:68:1c:de:6e:87:91:7a:c9:56:
                    32:5d:5c:f2:f2:84:15:5a:1d:bc:f8:5c:37:b7:cc:
                    64:a5:a8:52:95:fd:62:28:5b:14:5b:f2:64:e7:e2:
                    0a:8b:38:dc:00:f3:86:af:cc:a5:3f:a7:09:d9:d1:
                    6a:43:5c:78:b2:a3:27:80:da:7c:e8:8d:f4:0b:f0:
                    30:dc:7f:df:15:e5:24:6b:05:f8:3f:0b:12:73:cf:
                    5a:51:9b:b7:21:86:ba:5f:a3:08:01:ce:da:8f:b6:
                    99:cb:b1:96:28:92:0c:20:0b:21:1d:6a:b1:ad:ae:
                    df:a5:b7:e7:8c:97:8f:83:fc:73:05:3a:81:1b:91:
                    f7:44:2c:ca:b8:9b:18:89:0a:35:97:bf:59:ca:b8:
                    f0:e0:b8:69:57:75:c1:b0:20:80:70:30:af:67:b0:
                    79:5d:38:ee:60:3a:1b:0f:f4:6e:6e:5b:89:8e:4a:
                    18:66:7a:a0:b7:bc:9e:b0:0b:8f:69:b3:b4:b4:00:
                    44:18:7f:c8:e5:44:14:23:a7:be:0c:61:22:99:ea:
                    3a:e7:f7:f0:4a:ad:f4:08:78:1d:9a:e1:ea:b0:74:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:A2:E6:7F:6C:2F:6B:A2:B6:7A:C4:51:4A:63:68:50:45:02:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/446b068d-c20f-3183-934e-721e430ed60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:05:2a:81:69:ea:53:9a:ef:b5:ff:58:75:f5:51:a4:11:
         79:d2:5d:c0:e2:35:2f:26:9f:fd:ca:cc:16:fe:92:45:be:9a:
         a7:33:90:40:85:10:09:d8:06:93:18:84:94:ce:f4:72:07:74:
         9e:76:1d:8e:0b:bf:b1:c7:a1:51:dc:4f:50:53:71:c1:83:3e:
         4f:3e:12:08:77:75:1b:f1:89:c7:b6:35:27:ef:f9:f3:86:9a:
         23:a7:a0:e7:03:92:9b:db:eb:f4:a2:5b:e3:01:8a:d5:7c:b0:
         d9:bf:14:25:ff:7c:1f:d8:6b:d2:65:ce:7e:b6:06:df:ce:bb:
         e2:92:71:d7:00:fc:fd:99:69:f7:21:6b:cd:14:72:9f:2e:f5:
         b2:6b:0b:b9:54:5a:9d:88:54:99:15:2a:5b:0d:7b:1a:04:c0:
         24:a7:09:cf:66:ae:72:13:3e:da:44:6d:8c:97:cf:b4:eb:66:
         a0:68:a7:11:d5:a4:d9:2b:8d:c7:ee:97:9a:d1:8f:8a:27:a8:
         23:fc:f8:bf:4d:6c:88:34:0c:c3:81:c4:e5:33:ab:93:67:0f:
         e8:32:d9:58:a3:72:b6:e3:13:c7:9f:47:a3:47:d3:a3:cb:92:
         79:83:66:fe:8a:79:bc:35:41:bc:54:e0:9c:53:90:04:bb:5c:
         57:fe:d8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:23 2024 by rpki-client on console-ams.rpki-client.org