Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa
File:                     780397e2-11b6-3433-86d2-c8c2b5876efb.roa (raw, json)
Hash identifier:          rFlUC7KGf1B7w7JWpyyrEcSIuu8AlL6qf2o5ZkeY3bY=
Subject key identifier:   5B:7E:38:B6:D0:B9:87:48:0B:B2:78:AC:48:A9:18:69:EB:4C:41:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847012053E18324CA4EFA79E280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.219.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:53:e1:83:24:ca:4e:fa:79:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=bad99c88-8e45-4d56-93c1-d498572e380a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ce:3c:0e:d4:f3:a8:24:b4:49:50:d2:ec:a5:
                    93:59:83:f9:41:09:53:cd:dd:01:19:15:e4:79:52:
                    7a:aa:6c:a9:3f:81:95:5a:2f:63:85:e8:5f:fc:ae:
                    ce:1c:b8:92:fa:7c:06:ca:34:66:5b:1d:d4:c6:67:
                    7a:ef:ed:6c:4c:b5:0c:b0:2a:26:c1:af:64:ce:65:
                    d2:d5:1c:81:bc:7d:94:9c:57:c7:5c:30:ad:f7:e6:
                    31:57:15:4f:44:fa:a0:7f:76:5f:ac:0b:94:9d:3a:
                    72:d7:33:fc:8a:ea:2f:a8:38:25:56:20:f0:fc:1b:
                    64:da:de:c8:af:0b:06:4f:5c:89:fe:b5:9c:8b:88:
                    75:d0:f1:66:18:57:7c:e8:6a:b7:85:21:d1:3b:ca:
                    62:07:01:2f:a3:af:6a:fa:06:29:cc:bf:1f:f1:01:
                    f0:56:69:d8:3c:e3:18:1b:f5:a3:e5:03:74:cd:df:
                    24:4d:0d:a4:d8:43:c8:66:69:bb:8c:c0:14:b9:db:
                    20:53:b7:ab:47:cf:ae:68:c6:ea:ef:4f:3f:02:5e:
                    b5:fd:da:de:07:a9:b4:af:fe:1c:2a:86:2a:b0:29:
                    89:4d:15:fa:1c:98:db:d2:27:11:1a:ef:26:71:43:
                    b0:3b:97:51:c9:cb:94:68:eb:ed:b6:4e:8d:3d:23:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7E:38:B6:D0:B9:87:48:0B:B2:78:AC:48:A9:18:69:EB:4C:41:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:81:d8:e7:ef:ad:58:9c:53:32:ca:0e:87:b5:6a:cb:bc:46:
         2c:6f:3a:27:d5:80:2c:db:c5:fe:49:42:e7:88:1a:e5:3e:cd:
         f9:03:26:3f:8b:cd:47:81:25:88:5a:47:2f:23:12:5f:0d:1e:
         3e:4c:01:36:00:ea:43:f6:ca:38:49:f9:3e:96:9e:3a:16:09:
         21:6c:14:4b:01:39:31:ff:fd:32:59:50:12:a8:92:ec:a0:3a:
         71:8b:77:0a:6f:fb:36:eb:c4:ab:ef:fc:51:cd:45:e9:ad:09:
         89:8d:6e:6e:92:30:b9:ee:33:d3:b1:a8:19:ba:5b:bb:47:05:
         7a:31:ea:6c:93:0f:b7:62:b9:09:7c:37:bf:58:58:12:bd:4a:
         33:2b:d5:62:7d:d9:5f:cb:d6:6c:9f:9d:51:c3:ed:e7:f2:27:
         37:1b:29:58:e5:e5:ec:b6:fa:06:65:33:78:ab:5b:b5:31:81:
         54:a5:69:64:45:2b:63:eb:1b:c1:ff:63:ee:92:f2:a8:f8:75:
         b2:14:97:51:4b:01:b7:e9:9f:4d:25:85:9b:1b:99:9d:6c:0c:
         51:71:81:19:a0:b9:30:b8:d9:a8:65:6d:cd:cf:7b:68:6f:aa:
         19:98:be:67:be:34:e4:44:9d:f2:03:e1:ba:d1:32:9e:44:70:
         89:e1:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:38 2024 by rpki-client on console-ams.rpki-client.org