Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78d8e9a4-1278-3a08-8160-6e8ad139d874.roa
File:                     78d8e9a4-1278-3a08-8160-6e8ad139d874.roa (raw, json)
Hash identifier:          ILcfucwSNFaSMJSg8kOy/tUXftXozX4cH0PkldQEN64=
Subject key identifier:   F2:46:3F:29:1F:BB:83:C6:51:68:AC:0B:FE:43:B4:D7:C6:E2:2B:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D37A0C414A8D62D23D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78d8e9a4-1278-3a08-8160-6e8ad139d874.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.229.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d3:7a:0c:41:4a:8d:62:d2:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=aa2bc04a-787e-44d9-898f-dce592520199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:c9:58:6a:b4:27:dd:d6:a9:a0:bb:c0:45:
                    64:84:2c:a1:38:87:32:a7:68:c4:ec:81:9b:3f:a5:
                    b4:29:a9:39:91:1d:9c:ba:d5:d1:02:b5:a3:6a:be:
                    2d:a0:0b:46:90:aa:78:97:f8:40:8b:ab:b9:8d:57:
                    7e:7a:12:5f:f6:2c:44:d7:72:86:e3:46:d2:48:17:
                    9c:8c:ad:b6:57:26:8a:be:fd:72:4d:ef:d0:99:f9:
                    76:ed:82:ec:4f:8d:51:14:7b:25:ba:43:fa:38:6f:
                    36:f9:f7:8f:72:97:62:95:3e:c7:8e:21:7d:ad:8f:
                    c3:14:40:88:42:d5:9f:cf:87:1b:bf:ac:c9:dd:c9:
                    c0:3e:59:e6:e6:00:58:5c:01:63:e2:c7:76:b5:29:
                    a0:9b:6e:2f:f7:a9:3b:1f:5a:47:82:46:78:b4:97:
                    ab:28:17:66:9f:7c:96:e5:0b:18:26:2e:98:9d:18:
                    8f:b1:1c:0f:63:6f:90:68:80:9d:7d:f5:92:8b:e2:
                    80:e5:6f:76:23:0a:ff:b0:ad:61:62:c9:ae:e8:0c:
                    c6:ca:9d:99:f4:3b:b8:7f:12:4c:2c:28:b8:a5:40:
                    12:70:33:26:93:b6:3b:37:75:d5:fc:ba:dc:cb:1a:
                    71:cb:e5:69:57:7a:19:5c:3b:4b:2b:1f:4d:31:cb:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:46:3F:29:1F:BB:83:C6:51:68:AC:0B:FE:43:B4:D7:C6:E2:2B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78d8e9a4-1278-3a08-8160-6e8ad139d874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.229.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:d2:2b:96:2c:43:6e:8b:1d:0a:69:c8:9f:36:5b:aa:c1:
         92:93:0c:79:5d:3e:90:94:7a:2d:c6:15:04:22:3e:9d:93:c5:
         04:22:08:cc:b9:17:d1:4a:37:51:2a:67:0e:8c:e7:b0:2b:8b:
         31:b3:5e:3d:74:98:e4:f3:ea:6d:bf:b1:41:ad:9c:24:d2:94:
         9b:ae:9e:c6:b3:77:4d:bc:c7:2e:11:7c:3b:7f:00:68:0d:39:
         2c:63:b7:01:bd:b3:64:80:db:28:c3:ec:c3:b4:32:89:ed:bd:
         a6:83:19:0c:dd:6e:d5:55:03:0d:8a:43:0f:47:52:52:6c:12:
         c8:98:55:4b:96:ee:52:f0:7c:5e:c0:90:50:f6:c7:21:37:47:
         7c:b9:89:93:63:a6:9f:75:c8:2c:b6:96:a4:1f:77:c9:6b:68:
         9b:1e:9b:64:6d:57:9c:39:0a:3d:ce:c0:92:bc:09:82:39:1d:
         46:f8:ba:e9:f5:46:32:5c:b0:d0:81:1f:83:86:f5:9e:04:88:
         ce:50:6f:82:41:a2:63:9e:68:a5:35:9b:5e:0c:df:77:7d:92:
         f0:79:2a:1d:63:88:8b:3f:7a:66:c6:e4:d6:d5:45:b4:0e:17:
         84:f2:d6:6d:46:16:f3:1b:35:20:53:9d:9a:58:1c:7c:b3:e4:
         a7:63:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:39 2024 by rpki-client on console-ams.rpki-client.org