Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69a34219-2f32-34ba-a5a0-76d569ae6daf.roa
File:                     69a34219-2f32-34ba-a5a0-76d569ae6daf.roa (raw, json)
Hash identifier:          k5DNA4DQzS8LUqJxDOhLHuqjJ4bDADCAJ/hoTTDJtYc=
Subject key identifier:   D3:CD:0E:DF:F5:D1:E3:D6:55:75:4B:3A:69:F7:E0:64:E7:2E:66:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F4C8350225C1D562FF98
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69a34219-2f32-34ba-a5a0-76d569ae6daf.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.250.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f4:c8:35:02:25:c1:d5:62:ff:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=25c398dc-b4ec-4d3f-b58b-f302341d06cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:88:8d:15:4c:2c:af:bb:d3:1b:14:59:29:
                    72:40:b9:c8:9b:01:27:64:a2:d9:ea:c0:27:dc:f1:
                    1b:fb:c5:8f:fc:c5:fd:52:ae:fc:fb:eb:9a:f3:f5:
                    dd:ab:84:ab:95:fe:b1:8e:00:80:1f:b6:27:76:f3:
                    20:a2:c9:ac:64:dd:0d:0c:73:da:eb:dd:fb:6d:cc:
                    6f:96:b4:87:22:bc:22:1d:60:8d:99:9c:21:ef:8f:
                    17:bb:80:4f:a8:58:0d:a2:7e:e8:de:07:0c:64:c2:
                    75:8a:a4:e6:da:fa:3f:da:f6:4a:ff:36:d5:d9:82:
                    7c:66:85:c8:0a:de:e5:53:bf:e7:82:fc:27:35:59:
                    33:cc:fc:6e:bc:0f:f3:88:dc:2a:d6:8e:a8:06:53:
                    c3:38:7d:0b:05:31:c2:ad:0a:69:10:01:97:01:d0:
                    2c:3a:6b:a5:2d:7d:b8:47:f2:d0:eb:ed:c0:23:d5:
                    29:2b:56:b6:f1:6b:c7:1b:f9:35:0a:86:c7:44:3d:
                    aa:46:19:85:2f:97:79:57:f9:45:fc:44:0f:0e:4c:
                    21:d5:f6:ad:2a:c7:83:36:80:85:bc:53:16:5b:ea:
                    c3:28:24:8b:a0:55:5d:97:b4:66:27:73:96:f9:cb:
                    03:24:35:83:da:c2:6b:b0:c0:72:fe:e0:5f:e5:d2:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CD:0E:DF:F5:D1:E3:D6:55:75:4B:3A:69:F7:E0:64:E7:2E:66:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69a34219-2f32-34ba-a5a0-76d569ae6daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:75:3b:f5:9e:58:95:9a:78:24:d8:0d:64:15:e0:33:ed:3d:
         ea:3a:4e:16:eb:f3:fa:c9:20:a8:c9:db:33:06:ae:be:a5:88:
         57:bb:28:4f:a4:30:ff:59:fe:dc:b9:ab:54:03:ec:c8:c4:bf:
         f0:19:b5:a2:2c:2d:7b:f3:1b:d7:b4:31:6b:c5:c1:08:35:da:
         d1:aa:6e:50:43:80:ed:4a:c8:e0:87:d3:5a:67:dc:0f:bf:fa:
         9f:69:8e:a7:7b:1b:b6:60:87:2e:a8:ee:5e:a5:a5:71:ef:0e:
         1a:d0:5c:a1:fe:eb:8e:b9:eb:48:b8:12:b9:dd:b4:a1:73:31:
         91:8c:4f:a4:5f:04:e2:4d:e1:47:61:c0:af:d7:41:50:21:a3:
         59:47:e2:de:75:0d:a3:77:ee:5c:3f:3f:5c:98:73:1a:f9:06:
         0c:6c:85:9f:4b:60:cc:ca:e4:d1:06:d1:66:0e:3f:15:ce:f8:
         83:02:35:2c:4e:50:3c:ff:be:9f:4b:76:e1:88:eb:c0:e7:3e:
         af:52:c7:41:13:b6:f1:3c:6b:17:02:b3:ff:97:65:11:28:1d:
         ea:e6:72:33:94:1c:1b:df:93:5f:2e:a4:93:09:5c:96:a9:50:
         6f:a2:b4:3c:e0:cc:82:4e:1a:20:76:a9:76:67:ef:16:10:e3:
         9d:06:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:35 2024 by rpki-client on console-fra.rpki-client.org