Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6bed1f2d-e38c-3889-b85c-7adbf755eeee.roa
File:                     6bed1f2d-e38c-3889-b85c-7adbf755eeee.roa (raw, json)
Hash identifier:          pg5xZxGEZtxXw3bGD0CKyWfFCIP89TaxSzEiX1lXmos=
Subject key identifier:   D9:72:70:A6:56:E7:97:A8:56:6C:44:F5:20:92:46:25:A5:DE:69:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D423319F2B295F214D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6bed1f2d-e38c-3889-b85c-7adbf755eeee.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.229.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d4:23:31:9f:2b:29:5f:21:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=88dd01b8-4c05-4054-bec2-e517067ac083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:09:60:87:a6:33:2b:2b:19:70:07:70:f7:
                    6c:35:c9:74:98:ae:dd:12:77:b3:e7:34:bf:04:c5:
                    85:3c:ed:54:a2:13:99:b9:31:30:cf:22:9f:1a:0b:
                    f3:a2:6b:37:2c:b5:aa:28:95:b1:b6:ab:8b:97:21:
                    81:64:0f:5a:16:e3:34:47:85:3f:82:91:b7:8e:0a:
                    52:a1:61:ac:ec:7a:ab:d3:32:2a:e1:3e:3b:fc:65:
                    9a:cb:dc:de:c3:d3:82:27:4e:9f:42:0c:e6:0c:0b:
                    96:75:72:62:a2:4d:a6:8d:70:ae:1d:18:e1:5b:9c:
                    16:b4:1c:34:b1:e7:19:cc:0a:34:66:4a:bc:5a:2d:
                    f7:be:de:d0:d7:96:e4:32:aa:01:2e:6d:58:da:2a:
                    6f:f3:4d:b7:27:fa:af:04:93:07:fe:85:c1:50:c3:
                    b7:42:36:82:6d:10:16:2b:5d:72:d9:eb:2e:e2:cc:
                    6f:fd:18:22:48:26:6b:73:81:3c:d0:9b:cc:2d:5e:
                    0d:d5:2c:0c:66:d5:ac:d7:b3:8a:a1:ad:d3:80:87:
                    83:43:d7:4c:84:66:6d:9c:42:81:9e:47:34:e3:4b:
                    35:c5:a8:c9:52:b4:65:68:1a:06:7d:6b:a5:c2:e8:
                    f4:99:59:63:5d:8d:e7:ff:81:ef:b7:f2:8b:2a:8b:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:70:A6:56:E7:97:A8:56:6C:44:F5:20:92:46:25:A5:DE:69:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6bed1f2d-e38c-3889-b85c-7adbf755eeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.229.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:71:e3:72:09:c9:d4:46:ac:7a:d0:e7:9a:04:d4:28:9f:
         71:3f:b4:bf:50:38:ab:c0:23:8b:c3:0c:8c:19:05:d4:33:8b:
         88:85:02:01:de:47:71:36:f8:83:f0:2e:f1:14:b4:c7:f2:79:
         33:a0:24:91:c4:84:39:65:39:6a:07:83:97:61:e9:0f:33:fd:
         34:23:75:20:31:43:aa:ca:56:fa:a4:0c:70:c5:e0:26:79:48:
         ae:f5:2f:d5:94:9c:61:92:2f:cb:70:b2:f6:24:d9:a4:98:2d:
         1c:1a:60:5e:fd:86:5a:00:c7:33:20:90:67:63:0e:40:bd:ce:
         80:22:65:8d:be:7f:81:06:92:83:91:71:25:0a:d6:1a:ce:e6:
         85:25:00:c1:e2:9a:b5:f6:3d:a0:fe:72:25:2e:ff:b3:7b:e2:
         74:86:e5:aa:36:e0:96:42:51:95:50:0b:e5:0c:2c:33:74:0c:
         ef:9b:22:ec:56:29:21:29:fc:14:60:b8:9f:d7:7c:a4:c9:34:
         79:a1:ae:8e:41:5a:9c:e7:6a:be:d1:04:1c:97:a4:f4:1f:ff:
         88:89:1f:cc:1a:1c:f1:1d:91:7b:29:bc:2d:7a:26:2a:48:6e:
         0d:2e:32:f9:79:66:8a:6c:d9:ba:7d:44:c4:62:8b:0f:00:a0:
         15:87:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:35 2024 by rpki-client on console-fra.rpki-client.org