Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa
File:                     523beee1-112a-382c-ba88-2ef62215de5e.roa (raw, json)
Hash identifier:          VvXF8Wnpj3Djlq9qmgWGSfnZAOPaffpt/AY7oeeKbpk=
Subject key identifier:   31:B9:53:18:F7:B5:51:30:27:05:F9:72:B1:02:41:D3:CE:D1:F7:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835EDAFA59CC28D6940C340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.248.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:ed:af:a5:9c:c2:8d:69:40:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=e1661f67-edf1-44dd-b885-786fcf1e6d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:b8:14:27:80:e5:57:4d:f8:a0:46:c0:66:
                    a9:d2:55:1d:9a:ed:fc:4b:46:ac:a4:a1:c3:ba:63:
                    79:76:f6:5c:00:49:a5:f8:6d:a8:f8:38:61:b4:e3:
                    c2:ef:bc:d4:a6:6f:64:bd:fb:7e:ca:fb:cd:27:4b:
                    fe:a5:d5:50:8c:b1:ac:27:7a:5e:71:bc:ff:b8:43:
                    f8:80:bb:bd:6e:04:0a:8f:95:61:b1:77:ba:d8:77:
                    f4:77:18:22:a3:66:9b:22:dc:cd:f7:ca:cc:46:4f:
                    0c:11:b3:b4:a1:62:ba:76:1f:12:80:b5:d0:b0:7d:
                    60:9b:09:68:33:46:29:58:89:ed:6d:c7:18:3f:cb:
                    3e:c3:17:c3:ab:ff:78:2c:55:3c:1f:fe:e1:36:42:
                    19:92:93:14:16:17:ce:74:fe:22:75:9a:4d:a4:b4:
                    f2:da:56:35:52:7c:3c:ec:33:62:07:e6:5f:f1:71:
                    7f:1d:d0:a1:ec:91:16:e2:b8:97:f6:5c:10:9b:ce:
                    d6:92:27:85:4e:eb:9c:58:18:30:b3:92:5c:f2:7a:
                    97:83:0d:2a:b2:d6:03:64:95:e4:3e:5a:95:bf:e3:
                    ea:09:7f:26:52:03:2e:85:cb:44:19:9a:b0:5a:90:
                    a8:f3:f9:ce:51:ef:f8:4f:be:25:09:32:6b:fa:c7:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B9:53:18:F7:B5:51:30:27:05:F9:72:B1:02:41:D3:CE:D1:F7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.248.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5d:32:8c:99:04:26:08:63:a3:11:5f:20:f1:21:2e:2b:e4:
         15:e8:ef:79:15:0d:6c:89:ba:3d:d3:b6:e4:b1:b5:d7:d1:a5:
         16:12:65:b9:f6:44:50:91:3e:60:ac:54:1b:fe:81:aa:6c:06:
         b1:57:0b:47:8a:7e:03:91:1b:30:5f:57:29:8e:4c:83:23:ed:
         f1:54:28:8f:bb:66:23:ea:57:14:85:05:6b:de:83:ef:12:39:
         ce:bf:f8:e3:77:1c:10:58:93:24:e3:92:22:fc:a6:69:8d:ea:
         18:82:4a:48:f8:5c:a0:a1:38:2f:79:fc:7f:fd:42:d7:50:27:
         cc:4a:ce:c3:1d:c5:7f:e6:60:27:7a:de:be:4d:ad:76:75:45:
         a1:b0:7d:ae:3e:15:ef:4d:98:ba:0d:95:4b:76:7f:c2:24:98:
         2d:75:e4:1b:60:dc:21:be:f5:d7:b9:f7:b7:7b:46:76:7d:a5:
         62:d6:e1:53:be:9e:0d:b3:ed:d9:89:dd:ea:6f:f3:8b:a3:48:
         a5:64:b5:f8:9d:5b:fb:b1:d2:83:ca:c5:74:46:7a:16:1f:26:
         df:3b:4a:08:9e:bb:30:b3:01:5d:f8:6a:9c:8d:95:4c:53:a0:
         1f:1b:be:e8:57:53:77:56:82:9c:4b:51:a9:f3:52:da:75:61:
         9c:a1:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:30 2024 by rpki-client on console-fra.rpki-client.org