Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa
File:                     4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa (raw, json)
Hash identifier:          zm7/LXSOqnRnxIgtVgPEvXIbVIOC1Ml6vFzumORyTLc=
Subject key identifier:   D0:DE:E2:3D:B1:05:85:93:E5:CA:15:B6:10:40:98:46:E9:BC:2B:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA1635F229F90DF0DA4F10
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.225.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:16:35:f2:29:f9:0d:f0:da:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=20bf2440-29d1-4e06-bf12-2864e4b9c64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:03:d3:25:1d:df:15:3d:32:48:8c:24:8b:
                    57:e6:e6:60:31:28:19:54:b1:fe:9b:3a:91:2e:69:
                    02:dc:5d:1e:e0:d0:b6:77:54:73:92:d2:dc:6a:05:
                    b0:e6:a3:a0:be:5b:a2:5c:5a:fa:ce:e7:7f:e5:44:
                    b5:e3:a1:df:71:f8:69:f7:ce:98:3e:b5:66:74:be:
                    46:08:f0:5f:a3:c9:e7:5d:56:83:63:c7:42:77:62:
                    41:21:aa:2b:17:9a:7f:3f:ca:f0:0d:81:c4:c3:23:
                    57:27:a2:7e:75:0e:dc:42:1d:ec:7a:b0:b4:28:1e:
                    c7:ed:68:04:8d:7f:b5:45:ce:db:e3:62:51:1c:e5:
                    b9:14:12:b1:dd:12:0c:6a:99:f8:78:46:9b:38:cd:
                    95:86:68:35:d0:d0:61:c1:ba:36:cb:20:84:4e:ef:
                    d4:71:10:98:a4:44:ef:7f:23:03:fb:2a:af:11:42:
                    55:62:ed:28:f0:ad:5c:20:fd:24:fb:c6:01:3b:03:
                    e9:7a:37:73:f0:a4:cd:9c:a5:39:0a:7e:ce:b5:ed:
                    1b:07:4e:2e:d1:e0:af:83:26:e4:30:00:a7:f9:f8:
                    a6:73:5b:6e:8e:67:d0:d5:3c:b1:6a:78:6b:22:18:
                    25:9a:dc:83:0e:18:a6:72:ac:46:b7:0c:b5:91:b3:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DE:E2:3D:B1:05:85:93:E5:CA:15:B6:10:40:98:46:E9:BC:2B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:fc:67:4c:1c:4f:e2:8e:10:20:5a:8c:c5:e6:0f:d5:0b:
         85:f6:08:ff:f1:41:c0:e2:87:8d:0f:33:1a:52:b5:a3:fc:70:
         2c:5c:d6:30:c5:09:e0:e8:18:2a:91:bc:8b:2c:2a:26:83:16:
         ac:f2:ac:8b:2c:69:25:40:c2:b4:8d:35:6f:5d:02:36:e3:f8:
         a9:0f:fc:96:f3:c2:52:3c:f5:46:5b:9e:69:85:a6:cd:53:81:
         24:0d:22:96:b4:32:fc:ac:48:df:95:d7:ae:d1:27:cb:35:fd:
         14:47:f8:eb:62:79:a1:d2:4b:af:8a:e0:42:bb:15:b5:88:a1:
         fd:73:97:a7:71:7a:24:6f:25:13:d0:f6:0d:6f:8d:a0:dc:d4:
         35:d5:cf:ea:fb:32:e3:5d:63:77:c9:c7:05:42:43:bf:c1:1b:
         b3:f2:00:89:68:c3:b1:07:84:76:c5:d1:ca:8c:fb:2e:3e:7b:
         ff:cf:0c:e9:63:86:27:ad:51:89:95:7d:e9:c5:49:7d:89:5f:
         c8:61:ec:9d:f5:38:b2:e7:17:64:73:c4:ef:c9:63:e5:03:53:
         1e:c1:0e:ad:fb:34:31:d4:6e:c1:af:9c:21:23:bd:a6:3e:2f:
         87:71:ff:7c:90:ac:1a:1c:c7:4a:71:37:18:f7:07:3d:93:88:
         5b:4f:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:25 2024 by rpki-client on console-ams.rpki-client.org