Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa
File:                     48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa (raw, json)
Hash identifier:          ti3Sk4jNxBlcIKoYgVBvrRF7TrAdpgzDfw4ndeyf3UQ=
Subject key identifier:   7E:18:FA:D5:00:7C:33:C0:93:90:F9:14:FB:7C:DD:83:4F:32:52:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA16B2A2243879EE49DF60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.225.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:16:b2:a2:24:38:79:ee:49:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=5d101116-8d77-4615-acc3-19f597fdc891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:cd:9d:23:b2:ba:31:f1:5c:8b:3e:60:29:
                    d2:aa:71:f5:3b:95:2b:83:6a:6a:b1:d1:2b:06:d0:
                    79:04:1a:10:71:de:5a:be:53:50:42:81:f2:3d:73:
                    56:74:da:5a:f1:42:f9:a1:b8:cc:37:f1:f6:f8:5a:
                    70:d5:a5:43:9c:3c:27:80:0c:88:18:56:19:52:0e:
                    6c:64:8c:32:bf:59:0c:47:af:52:4d:2f:62:ba:d9:
                    f4:0a:93:26:30:6b:21:f2:53:ba:75:e1:56:81:f8:
                    45:be:82:24:52:22:3e:ba:68:ae:2b:22:d2:93:a2:
                    3c:ed:98:9b:5a:20:9f:fe:78:21:35:95:4f:7d:79:
                    22:7c:c7:5f:5f:96:ac:e1:fe:45:08:17:52:b7:a0:
                    0a:be:f9:65:16:b4:52:b9:63:28:32:13:3c:f8:2b:
                    15:9c:e8:4d:dc:ff:9d:16:c6:4c:e8:e1:54:3d:f9:
                    f2:a4:18:c3:e1:1d:86:cd:e1:3b:c5:2d:97:62:66:
                    bb:e4:89:73:eb:b0:5c:e0:53:3c:17:e8:90:f6:bc:
                    ff:8c:3b:76:d3:80:61:c3:ae:3e:a8:c2:13:de:f9:
                    2d:50:a8:91:16:77:92:9b:dc:c4:76:54:58:f2:a9:
                    b5:63:ea:b9:82:87:37:75:20:b9:fa:f7:6c:13:2f:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:FA:D5:00:7C:33:C0:93:90:F9:14:FB:7C:DD:83:4F:32:52:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48b5d606-a54a-32a9-94b8-b6b7b694e6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6d:b3:4b:5c:8f:cc:fd:65:22:5c:c2:88:fa:47:af:cd:71:
         23:5a:97:dd:9f:f1:00:d2:a4:60:22:93:94:42:5c:de:43:41:
         08:42:4e:80:32:dd:a6:fb:2c:2c:9f:40:17:8c:12:4e:e3:24:
         d6:4b:ab:7f:57:a5:26:7e:00:03:31:e8:8c:3d:b8:90:61:51:
         c9:f2:00:16:ea:64:eb:91:45:08:ae:8f:d5:5d:a1:d2:0b:e6:
         5d:24:fb:04:07:75:5e:6e:f5:63:97:f8:6d:39:d8:7f:c7:73:
         b7:2a:02:87:97:0c:06:59:0c:8f:cd:eb:52:36:3b:15:63:c9:
         14:45:57:26:25:7c:74:83:5d:5b:6d:b0:33:5f:9f:12:6b:fb:
         88:5d:4d:c6:cf:e9:69:95:55:4b:73:82:7c:e8:a4:7d:ac:89:
         3d:1c:68:b7:1c:22:91:d5:12:41:72:00:4e:16:29:f5:09:c6:
         6b:36:ce:be:4e:cf:f0:e2:24:55:89:4d:e5:f1:85:25:4f:05:
         24:bd:ef:29:2f:c4:e3:73:49:97:96:d2:c9:ff:34:30:8b:40:
         a3:43:58:27:a5:8d:87:7a:8c:9c:49:08:4b:88:6f:6d:f9:93:
         85:84:f0:07:34:4c:07:2e:b9:ae:94:7d:f6:77:89:6f:75:29:
         27:f6:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:24 2024 by rpki-client on console-ams.rpki-client.org