Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa
File:                     4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa (raw, json)
Hash identifier:          nXxbKvvGb8x4gznDWe8Sd/FapTpM4lr+mcH8QACgUSU=
Subject key identifier:   6B:93:87:C1:32:84:6E:DC:27:64:9D:01:C5:78:41:F9:17:7F:F5:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835EA1242236AEA0D365D24
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.247.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:ea:12:42:23:6a:ea:0d:36:5d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=40028957-4a2f-4850-9551-73de071c987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:18:48:76:3a:a7:e5:61:7c:00:97:3f:98:
                    f6:ea:ac:dd:c0:3d:3a:d0:11:34:c8:13:f3:cb:20:
                    b7:43:29:d7:7a:fd:21:d3:57:74:bc:23:34:fe:20:
                    9f:70:83:a8:ab:e2:66:29:94:e8:4b:6f:72:f5:d5:
                    d6:ef:95:c9:4b:24:99:f3:c4:4e:16:e8:f1:8e:ac:
                    d9:eb:ac:92:01:11:6e:63:cc:ed:ed:e4:30:ab:ab:
                    f1:3d:e8:cd:78:3f:bc:1f:ef:8c:3f:fc:58:7f:36:
                    90:f4:fe:43:0c:e7:c1:25:cd:3b:d2:06:fc:9d:03:
                    5c:26:ac:ff:51:bc:b9:a9:ea:42:97:b2:8c:80:6e:
                    dc:21:a8:d8:7f:0b:fc:69:42:0a:5f:19:cf:55:ee:
                    28:98:6f:57:33:89:7f:06:b8:29:85:83:e8:ad:dc:
                    39:84:05:f6:58:fa:2a:a2:51:e6:d2:a9:58:a1:65:
                    91:21:07:f0:5d:44:e2:68:2d:27:32:92:e6:34:c8:
                    89:0f:1d:f5:4a:ba:a9:d2:17:b6:58:47:4a:93:28:
                    2c:bd:c0:88:33:17:c6:28:8c:fd:1d:ef:a7:8c:5c:
                    1f:ac:ed:29:aa:34:1d:e7:f2:ef:af:4e:94:20:ef:
                    59:2e:33:72:f8:b6:0f:ee:1e:ab:21:3c:f6:57:3b:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:93:87:C1:32:84:6E:DC:27:64:9D:01:C5:78:41:F9:17:7F:F5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:ec:ee:ac:22:3d:28:a6:b8:2d:d7:7d:d5:7d:87:7a:16:
         d6:fa:17:9b:5d:7f:86:54:a8:69:85:d0:f6:ba:46:30:2b:ac:
         3d:50:46:65:bb:19:89:f9:21:98:a1:a3:7f:e6:58:87:1a:72:
         a9:bd:3c:50:f7:c7:63:16:aa:ba:c3:26:12:9f:1d:95:e6:64:
         4d:ea:61:15:ce:c1:f1:b8:d7:f3:a8:ce:a0:16:29:97:b5:67:
         77:91:7c:8a:72:84:56:29:8b:0e:88:c2:c8:d4:00:4d:fa:cd:
         2e:4d:4a:0c:5b:8d:6a:fa:78:5c:f1:43:cf:1b:c7:ed:37:19:
         22:35:8c:a7:8e:91:f8:73:da:4b:98:1d:52:d5:b9:e1:af:be:
         30:f2:7e:63:62:8a:d1:9e:e0:df:3d:88:a9:92:c1:45:0f:48:
         38:bf:e0:42:8a:f4:c3:6b:b4:a2:e2:43:71:d0:1d:64:03:05:
         43:44:b7:90:5a:70:3e:20:47:db:52:c4:ee:d9:b8:33:74:57:
         56:a4:fb:c1:eb:3e:66:11:02:e4:40:f6:d0:b4:42:06:02:05:
         7f:18:21:24:e6:7d:f9:40:6f:79:e0:af:f4:ec:6a:46:0e:d4:
         2e:52:66:25:39:3d:ff:6d:70:3d:e4:21:e6:4d:b6:76:72:8f:
         da:a6:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:25 2024 by rpki-client on console-ams.rpki-client.org