Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bb52f64-a3c2-3df0-af97-1669ae1f8ecc.roa
File:                     5bb52f64-a3c2-3df0-af97-1669ae1f8ecc.roa (raw, json)
Hash identifier:          fB1k0gZ2yCgr0q8vi5bdkYaHVwQohgdPBkoSq7UzXEw=
Subject key identifier:   2F:67:B7:E9:68:EF:D7:47:F6:B4:D8:4B:DE:7B:65:9C:1F:89:88:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584701203EB73465076058E62C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bb52f64-a3c2-3df0-af97-1669ae1f8ecc.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.196.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:3e:b7:34:65:07:60:58:e6:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=d74a167d-5d4d-4f24-ab8a-28ae69ad6bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:e6:a4:2b:19:8d:50:01:3b:0d:3e:41:79:
                    2b:db:d1:f1:86:26:d3:de:43:b4:90:7c:18:91:75:
                    b1:28:83:68:04:3d:3a:8f:ed:cc:c5:2b:c5:b6:8b:
                    71:de:a4:08:0d:aa:25:09:e7:06:eb:79:3e:50:9f:
                    fb:16:66:2e:b4:0a:1d:7e:3a:51:32:17:60:0f:7a:
                    74:ef:1d:0e:75:bb:86:49:ad:02:47:f4:a6:2b:0b:
                    be:2e:32:6d:24:7c:b0:51:73:2f:3a:d4:11:bf:bd:
                    c8:a6:e3:4e:04:59:de:c0:85:8b:dd:19:df:12:b2:
                    85:c3:5c:33:33:12:8c:89:36:23:3e:bd:38:04:f8:
                    4a:db:22:2f:44:fa:24:a4:f9:0e:dd:5a:2d:db:b0:
                    bb:c7:b5:8d:11:fa:1a:a2:60:5b:e9:0e:3e:3a:dd:
                    34:e6:54:fd:b3:dd:3a:bc:c5:da:ea:6e:95:3d:e0:
                    88:70:b6:33:27:73:7c:e1:7b:b2:7e:f8:ab:1a:76:
                    42:da:a6:f6:b5:77:22:0a:af:42:45:97:b6:0a:3e:
                    df:04:ca:e5:bf:5b:da:ff:09:27:97:14:38:25:0d:
                    07:09:00:c8:e3:1d:d1:80:0f:93:ba:2d:9b:0b:44:
                    1e:9a:42:4c:04:3d:76:9c:62:09:99:54:82:c1:77:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:67:B7:E9:68:EF:D7:47:F6:B4:D8:4B:DE:7B:65:9C:1F:89:88:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bb52f64-a3c2-3df0-af97-1669ae1f8ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:df:06:b8:27:6b:2f:5a:30:55:95:2e:17:c6:ed:d3:f6:11:
         bc:60:5b:6e:bb:6c:2a:9b:eb:fd:f3:2f:40:13:83:23:a6:c4:
         33:4b:a0:af:63:94:ba:a9:e4:17:c6:44:be:75:3e:d6:53:7b:
         7b:4a:fb:3f:52:43:03:eb:a8:f3:df:fb:97:45:9c:64:52:35:
         3c:ea:f6:98:ce:37:ee:b0:6c:f8:c7:ae:1a:72:99:26:11:ed:
         e1:94:fd:ac:0a:1d:1c:f9:fd:3e:7c:fb:40:4a:fe:7a:a8:84:
         f9:cc:22:0e:51:14:18:08:69:7a:25:50:be:e4:e4:14:b3:29:
         37:83:2b:32:22:95:f8:83:c5:39:21:b9:ce:8f:db:0d:b7:3d:
         82:04:0e:fc:f9:35:48:b7:55:b7:65:1c:42:6c:ef:9e:f0:d1:
         da:fc:59:da:22:19:82:aa:d0:3a:9e:a7:65:29:78:40:59:87:
         fc:1a:46:ee:e3:17:4c:43:d5:6d:6d:5b:a6:f2:a2:bf:1b:35:
         58:db:ee:e7:e7:d2:ba:fc:85:0f:69:7c:e7:31:93:a9:75:2a:
         36:df:09:a3:83:93:f6:6c:ce:5b:23:6a:23:ee:0e:07:7d:b2:
         0e:cf:c7:2e:67:e5:c2:bc:3a:ea:35:7c:e1:f4:6d:7b:2b:14:
         49:31:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:49 2024 by rpki-client on console-fra.rpki-client.org