Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa
File:                     5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa (raw, json)
Hash identifier:          xoxWk2oazYaWCUqv+xEYUlngQUDguAoefxxWRglHSxU=
Subject key identifier:   61:60:B4:BD:61:51:06:D8:3A:2E:FB:76:2C:B5:7A:8F:AD:72:B5:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847012043D94646D46228574700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.201.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:43:d9:46:46:d4:62:28:57:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=7d34904b-1b4e-454a-9f72-e0c283a9a41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:7c:19:9d:de:90:41:ab:0b:31:c3:1e:ab:
                    37:5f:e6:56:3b:8b:34:7a:36:6e:c8:3a:5e:ed:21:
                    cf:6c:d7:56:e9:cb:68:c5:34:a8:41:35:24:1e:d1:
                    fb:5c:58:59:33:c1:b5:43:76:df:00:0d:e1:31:e8:
                    18:02:28:14:59:85:da:16:3a:79:c3:4f:69:81:fb:
                    a3:45:62:b0:2c:0c:64:e5:df:f2:7b:33:c8:28:a2:
                    7d:ed:be:b9:e3:c4:b5:67:e5:74:a8:25:37:85:c0:
                    17:8b:9b:1d:af:14:47:4c:43:1e:5e:fa:47:fd:29:
                    8e:56:22:73:46:f3:d5:90:10:d7:61:0f:c7:dd:4b:
                    0c:88:e0:c2:cc:1a:8e:2c:b9:ee:3f:12:72:cd:40:
                    71:8b:45:89:cf:d4:ae:35:ef:65:3d:52:20:22:0e:
                    79:60:44:11:80:f2:d3:98:ae:dc:5e:0a:42:38:67:
                    7a:4e:f4:bf:96:79:24:24:2d:8f:60:a1:1d:d8:1b:
                    83:e8:41:36:b6:a3:3d:07:68:96:6a:0d:40:00:6a:
                    73:37:f9:d6:7a:34:20:46:9b:e5:d4:2d:50:f6:21:
                    16:ba:a7:05:1f:db:bb:38:90:ca:0f:9b:43:2d:ec:
                    0e:c0:72:f7:c3:af:83:d2:5c:be:87:12:bf:58:c4:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:B4:BD:61:51:06:D8:3A:2E:FB:76:2C:B5:7A:8F:AD:72:B5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.201.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:a2:db:d6:27:96:bf:9f:cd:e7:81:1a:2b:ad:2d:83:ce:
         45:0c:ea:1d:ce:7d:92:35:14:48:c6:60:ef:2a:28:75:fc:c9:
         0b:6c:1a:87:e6:ea:6b:d3:3c:3c:5f:b0:ed:3b:1e:d2:31:6b:
         42:78:ce:82:a9:73:92:e5:7f:cd:c6:0c:a5:3b:99:5b:3a:35:
         07:12:e0:b1:17:94:6d:43:1f:19:5c:d7:bf:5b:9d:df:33:63:
         a7:f0:78:f0:22:96:54:9f:9b:f0:e2:0f:da:6b:70:e6:ec:bb:
         8b:ec:a5:cf:5e:7e:e4:68:9c:aa:01:37:38:ec:cc:63:f2:96:
         09:e9:ce:a7:a9:48:4b:60:09:f2:7c:2e:f0:ab:ed:b0:9c:5d:
         27:ee:01:43:06:38:62:2f:41:26:db:67:87:7b:0d:ea:b2:1c:
         b4:ce:e1:a6:e3:05:ac:a4:fc:05:8d:3b:e1:42:e3:13:ad:0b:
         84:06:c7:e9:3b:11:26:d1:4d:79:fd:2a:c6:75:a4:df:b0:de:
         69:68:99:09:1c:aa:c7:af:e6:d0:f6:eb:21:2a:0a:86:1e:8f:
         b9:1e:05:55:d9:a0:d6:a4:0a:0a:15:ca:c6:d2:71:bc:c5:24:
         2b:a4:01:bd:71:42:b1:d0:a3:f5:5a:5c:71:ee:8f:2d:c7:65:
         37:a2:67:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:27 2024 by rpki-client on console-ams.rpki-client.org