Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa
File:                     69c1a05f-e49c-3682-a20f-51da947ccac8.roa (raw, json)
Hash identifier:          /m35Qq7e+Wikd80eZ9apvNOYoQTwWcfGuFHCyUvFX5c=
Subject key identifier:   18:B3:EB:A7:E4:ED:4D:FC:51:8F:13:08:E1:28:F4:3F:4C:78:B4:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858476665BB02B7B1DBC1C5AA31C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa
Signing time:             Tue 01 Oct 2024 19:37:23 +0000
ROA not before:           Tue 01 Oct 2024 19:37:23 +0000
ROA not after:            Mon 30 Dec 2024 20:37:23 +0000
asID:                     6167
IP address blocks:        174.220.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:65:bb:02:b7:b1:db:c1:c5:aa:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 19:37:23 2024 GMT
            Not After : Dec 30 20:37:23 2024 GMT
        Subject: CN=d6eb9a78-c47c-438b-9de8-4964a9a1747f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:1f:c4:d7:ee:7b:0a:bf:72:6c:d1:59:ee:
                    7f:0f:50:35:d6:66:88:99:4f:14:86:89:ab:62:0f:
                    55:43:e7:ba:be:d2:a6:16:7c:de:d3:19:45:d6:31:
                    31:dc:40:df:a3:b9:61:5e:bb:30:74:cf:c8:ad:01:
                    de:a7:0b:c9:e0:6a:a0:a1:94:72:c2:a6:ea:81:09:
                    e2:51:af:f0:3e:10:ca:ae:74:66:e1:cb:00:f0:51:
                    33:85:82:f0:5d:80:96:be:39:92:d8:a5:fd:d6:1f:
                    79:87:64:45:46:5c:33:67:66:ed:7a:9a:cf:fc:6d:
                    ee:b6:9d:0b:29:20:f9:c6:e5:33:4e:32:f9:49:1d:
                    f5:72:9c:8f:63:d4:76:29:6c:65:38:ca:07:9c:e4:
                    cc:64:32:f8:30:49:e6:53:24:91:dd:48:a9:0b:cd:
                    6d:1d:87:0d:58:58:3d:74:f4:0c:eb:59:71:21:ae:
                    c9:b3:47:65:5f:f3:fb:a4:5c:41:b1:f0:69:47:62:
                    76:81:01:f1:08:af:0e:ee:ad:ef:a5:87:07:00:6e:
                    79:9d:d6:9e:79:c0:73:3d:3d:6d:da:15:ff:ab:ab:
                    5c:1c:10:cc:69:f6:23:df:67:49:e9:31:95:7f:99:
                    72:59:9a:3a:a4:2a:44:c4:30:a2:02:33:61:2a:fb:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:EB:A7:E4:ED:4D:FC:51:8F:13:08:E1:28:F4:3F:4C:78:B4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:22:53:45:77:d1:ca:e3:77:2e:8b:fd:b4:f0:df:6b:cc:
         85:3e:d8:5a:87:ff:df:7d:81:98:73:e1:04:2a:19:33:20:57:
         0e:29:9b:f1:ab:35:75:4b:8f:b9:15:9c:f4:30:eb:35:97:0d:
         53:8d:44:ed:05:df:b0:30:64:7a:9d:98:32:43:93:a6:10:06:
         be:1a:4e:f2:fd:8e:23:63:8c:1a:6c:4c:85:c0:49:99:6a:0a:
         3d:18:48:42:4a:cb:56:13:3b:0e:51:a8:89:82:e0:6b:28:a8:
         d8:2a:d7:e9:d3:0b:44:1a:b7:d7:14:da:f8:b0:e6:42:ac:50:
         ee:f2:34:5a:59:05:fb:2f:28:f4:90:f5:c4:5d:a6:28:35:ab:
         2c:f1:6e:6c:11:c6:55:d5:60:9e:61:87:66:64:b7:34:61:57:
         74:b3:2e:c4:74:a8:dc:c8:96:e4:1b:01:e1:b7:6d:ce:81:ac:
         ac:2a:99:31:dc:d7:8b:93:db:ad:3b:74:de:e7:98:6f:bb:ac:
         23:04:32:2e:0d:ee:5c:90:7f:15:4b:e9:ee:ad:d8:23:a6:14:
         b0:68:83:ef:b6:fa:54:2e:8a:ee:35:42:4d:a6:85:3b:6e:c4:
         45:6e:ae:68:99:9d:9c:15:06:c9:a2:ca:41:0a:91:20:6d:b8:
         c0:91:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:35 2024 by rpki-client on console-fra.rpki-client.org