Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa
File:                     5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa (raw, json)
Hash identifier:          PYbXHRaTx3br2uS81kiJmgg2aU482LelW2T0AaybaIM=
Subject key identifier:   1A:E3:FF:68:86:EC:B2:A3:40:28:02:06:3B:07:2F:44:44:F4:3B:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E386209F4B61FB643C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.238.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e3:86:20:9f:4b:61:fb:64:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=c50bd84a-3745-41f5-adcd-222d8ee9a7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:13:a3:f8:bb:91:f6:af:d0:c0:53:72:7e:
                    a9:3d:1d:91:64:89:47:d3:b1:e8:eb:e9:fe:d4:a2:
                    c7:d0:f8:ae:77:a5:e7:79:1d:27:a4:26:14:47:3c:
                    56:20:71:7d:61:d5:de:98:83:65:95:e4:40:44:4d:
                    92:ac:3f:59:20:a7:91:0e:b6:d6:9c:ef:18:d1:f7:
                    3c:33:45:63:e1:57:9e:ef:f4:b7:7d:dd:59:6e:ad:
                    99:52:94:6e:7e:37:b8:07:a7:68:46:1d:d1:14:d2:
                    9b:5a:80:2c:a2:38:3a:04:3d:79:83:bb:a5:ef:2e:
                    2c:99:9e:8a:de:a1:fe:66:20:06:e6:c5:d8:de:b4:
                    f3:f2:fc:d5:6f:ea:4b:8f:f8:25:b8:eb:55:68:0f:
                    b1:e1:37:08:9a:cf:63:25:d3:f6:aa:2e:42:ed:8f:
                    2b:a6:a1:17:c2:f0:a0:f3:55:f2:9e:47:3c:f7:61:
                    40:1d:3c:cf:4a:54:5e:43:57:54:7a:e4:aa:0c:b9:
                    ff:99:68:e8:02:82:49:d5:df:d8:c2:b6:cc:af:e2:
                    a7:45:91:c4:1a:18:bd:9a:c4:cb:a3:c3:da:51:34:
                    c8:ed:1f:85:ca:83:6f:86:90:d7:46:3d:ac:e7:d8:
                    f7:ea:39:64:c4:43:c4:89:30:7b:83:58:58:bd:da:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:FF:68:86:EC:B2:A3:40:28:02:06:3B:07:2F:44:44:F4:3B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f4:3b:9e:5f:6d:b0:fd:17:97:61:71:7d:90:54:84:0d:ff:
         bd:24:a4:f0:b3:51:85:62:bd:57:d1:e4:26:b7:0d:d4:84:cc:
         2e:44:8e:02:ab:39:59:87:89:62:94:d3:98:f1:ed:87:bb:ec:
         48:c2:ee:ce:a5:da:06:aa:ae:b1:fa:de:d6:98:eb:60:66:18:
         24:93:c6:24:47:e1:64:9f:98:a9:b1:ee:b7:a8:85:ee:33:6e:
         df:97:b8:74:65:46:a4:68:2a:31:bf:81:fe:b8:b0:15:26:57:
         5f:3d:95:e6:9f:91:71:63:42:3e:35:0d:f2:02:fa:9f:16:1f:
         aa:9e:33:d2:7f:4f:3f:b8:33:14:21:44:87:a1:9b:d8:95:18:
         08:b2:e3:5b:c0:97:52:32:72:f3:d9:79:2a:04:89:f9:b7:70:
         5b:ff:d7:4f:c0:79:86:03:01:a3:4b:f4:e2:19:bb:53:71:e7:
         19:aa:bd:30:c5:3b:89:3b:b4:7a:96:a7:fc:65:bd:08:ba:21:
         ba:6a:0f:1d:41:68:b7:71:ff:34:eb:a4:f0:c1:86:b7:ec:70:
         a7:60:61:09:f1:20:5e:55:ba:73:9c:7a:f3:26:6b:82:7b:30:
         8a:85:6b:83:5c:6d:61:c6:41:f8:ab:42:22:09:5a:0c:41:1b:
         69:90:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:32 2024 by rpki-client on console-fra.rpki-client.org