Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa
File:                     48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa (raw, json)
Hash identifier:          wjMeuKkEhelkPltig2Uc03dTCeXJWVhAXQvRcjvK5Ck=
Subject key identifier:   12:1D:AE:61:61:6D:6E:73:AD:00:D8:A0:0B:5A:2B:3E:81:B6:33:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847012058AA209994CEC5D4C900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.225.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:58:aa:20:99:94:ce:c5:d4:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=90938105-d2d5-412d-bde3-eb8ef1a4a0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:bc:41:c4:d7:57:2d:7a:d4:8f:34:55:d6:
                    71:11:0b:fe:62:dc:3c:4c:75:dc:66:0e:db:d1:37:
                    af:c3:89:32:bb:30:a6:46:d6:71:19:d4:66:e7:39:
                    18:62:b6:9d:4f:39:03:74:14:fa:18:bf:ac:f0:3e:
                    90:c8:b4:bc:ea:3c:30:11:e5:db:76:e9:3c:10:9c:
                    c0:07:3c:b8:5d:27:11:91:04:ad:05:40:c3:bb:0e:
                    87:de:f1:ef:93:54:25:89:c4:53:cc:74:c1:62:d3:
                    cb:74:4d:28:e2:26:b6:d4:47:b1:66:89:32:eb:5c:
                    9e:ad:bd:ae:da:1c:32:c0:b3:4a:16:56:c1:4b:73:
                    93:b2:25:29:89:f3:7f:79:6c:21:ff:22:4b:06:cc:
                    18:e4:67:f9:73:b0:f0:26:02:9c:c9:e5:8b:2f:a1:
                    39:8d:95:d4:10:ff:26:6f:9b:78:25:b1:af:a5:75:
                    43:7a:fb:31:cb:f4:b4:34:71:30:9d:e4:c2:ec:f0:
                    14:77:6e:22:21:54:3f:60:7f:84:24:d9:30:9d:fd:
                    07:c9:04:b9:28:40:0d:0a:dc:39:a0:ae:e4:f7:9a:
                    cb:f4:74:2c:5e:38:99:ee:10:6e:83:55:24:c0:6d:
                    93:00:c8:b4:8e:ab:ef:80:7f:b7:98:18:8f:cc:8b:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1D:AE:61:61:6D:6E:73:AD:00:D8:A0:0B:5A:2B:3E:81:B6:33:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:35:ce:53:a6:6c:24:1c:1a:6d:53:9f:92:06:c8:06:af:ec:
         00:33:dc:d2:9a:ac:95:0a:da:eb:e3:4c:90:28:8a:b0:2c:31:
         0e:c6:7d:da:ed:61:96:82:52:f2:d1:46:f2:1e:d3:75:06:e4:
         f6:6f:61:69:ee:bd:a7:7f:11:6d:55:1a:66:39:a4:24:6e:bb:
         c1:35:e4:9d:20:ce:58:e4:9a:1e:a3:04:86:6f:f2:bb:ab:60:
         b5:8f:d4:cb:a2:f3:c3:b8:9f:c5:8d:6a:fd:28:1d:ab:7c:e9:
         95:82:8a:79:68:f4:0d:54:6f:d0:2b:ce:52:6a:87:60:51:2b:
         e8:a5:a2:ef:13:af:2b:b8:ba:aa:ca:b0:24:19:f2:e4:89:b6:
         73:70:da:4c:52:b8:c0:84:58:de:16:2a:35:41:12:d9:79:57:
         44:a9:11:ac:4e:b0:6d:34:aa:e3:16:3f:cb:74:21:37:da:f2:
         74:fe:ad:bf:bf:21:e6:97:98:34:35:fd:27:1d:a5:c5:15:5d:
         a9:8a:f7:13:29:f6:93:9b:50:0d:eb:5a:a9:1a:75:76:c0:da:
         0e:9f:93:6e:a7:b9:3d:90:23:ed:90:a2:81:ac:a9:e6:71:6c:
         a3:18:b9:f4:31:fe:05:75:50:ca:6f:a6:9f:f0:7e:55:b9:c4:
         aa:ec:1d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:43 2024 by rpki-client on console-fra.rpki-client.org