Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/449fb18e-161b-38bc-9f7b-fb46d5d62619.roa
File:                     449fb18e-161b-38bc-9f7b-fb46d5d62619.roa (raw, json)
Hash identifier:          SUgwerw3dTR2UspitYy652MibT94/0neWCqvf7l1o9o=
Subject key identifier:   12:EC:C4:63:B0:76:6B:2C:A7:1A:B7:5C:E6:54:FD:FA:23:6F:E7:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D6589CC5BDA7D9EAEB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/449fb18e-161b-38bc-9f7b-fb46d5d62619.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.231.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d6:58:9c:c5:bd:a7:d9:ea:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=10386449-7ecf-4ce6-8807-a762ed484df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:ac:27:d8:1a:dd:23:f2:7f:46:64:d0:4b:
                    08:5a:35:e6:eb:cf:f8:49:94:b7:56:54:f5:1a:71:
                    55:a6:79:6e:03:9c:ee:98:46:02:f5:da:2e:60:c8:
                    cf:a7:41:eb:f5:c9:28:13:de:73:78:96:2a:56:cf:
                    da:8d:0c:d5:42:be:73:fb:8d:29:f1:d3:0b:db:26:
                    73:2f:49:ec:3a:44:8a:d5:50:71:12:7b:4c:47:42:
                    33:44:2c:a6:cd:87:d7:5a:46:b7:c8:54:f3:64:87:
                    7c:b7:7a:50:9c:3c:d4:3b:f1:0b:b5:b0:3e:da:90:
                    56:ec:50:4a:39:16:06:c0:be:ab:c5:26:e4:a4:af:
                    f8:fa:d7:15:80:a6:3c:b8:fc:4d:61:25:36:24:0b:
                    64:b9:2d:fd:1d:a8:16:f1:e0:5b:f4:ae:35:b4:23:
                    17:a5:0c:5a:6b:63:d0:d7:13:88:27:ed:a6:2b:73:
                    9a:d8:ff:b8:70:ca:70:d5:d8:ff:2c:d2:39:c8:0e:
                    5b:e3:c5:78:30:a5:e0:7e:7c:eb:22:51:2a:a0:b7:
                    41:70:77:74:91:47:8c:f1:01:36:58:80:97:6b:a7:
                    4d:58:68:ce:16:15:23:04:6f:02:5b:e8:04:08:2b:
                    b5:1b:95:e4:a6:1d:ad:63:30:c7:af:8b:40:0d:d3:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EC:C4:63:B0:76:6B:2C:A7:1A:B7:5C:E6:54:FD:FA:23:6F:E7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/449fb18e-161b-38bc-9f7b-fb46d5d62619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:66:16:91:ef:a8:fc:83:b8:08:3b:9f:96:76:b6:57:b6:
         eb:b0:b4:52:66:13:2b:de:58:ac:a4:f9:c4:b6:db:1d:e8:9a:
         4f:d2:c9:0f:2e:75:32:0d:69:68:0d:d7:14:c2:b4:5a:33:68:
         58:d8:4b:d7:fd:8d:49:34:1a:c9:b0:a8:90:7a:da:62:17:81:
         63:f9:d0:45:b6:14:b6:d6:c5:fb:83:24:e0:ca:ac:5b:9f:5f:
         99:77:f6:dd:56:83:cf:f2:ec:43:42:53:83:6d:ca:d4:92:c3:
         e7:08:7a:18:77:ec:15:fb:7c:1a:52:af:c3:f3:84:7c:f2:7f:
         25:60:a7:37:69:73:21:27:9d:5b:1b:45:07:ad:e7:91:ac:69:
         27:5a:cf:55:e3:dd:b1:7c:1c:ad:7c:43:fc:b2:77:29:f5:20:
         b1:56:c3:27:df:6d:76:bc:9e:66:e8:67:78:a6:04:85:d7:6c:
         86:57:b7:4e:29:d1:e1:8b:22:05:33:19:a0:cb:e2:74:c4:a8:
         ee:89:f4:38:4b:c0:9b:f8:c7:4a:29:b6:6c:f2:63:97:4c:79:
         4b:95:57:ee:cd:b2:93:99:4a:a7:ac:34:5e:25:c8:d0:64:79:
         9b:41:c6:08:55:4d:64:ce:eb:d6:31:f4:ec:ba:dd:b4:ad:b9:
         59:9f:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:27 2024 by rpki-client on console-fra.rpki-client.org