Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fec192-cb85-33c4-8999-724c2db0577a.roa
File:                     86fec192-cb85-33c4-8999-724c2db0577a.roa (raw, json)
Hash identifier:          0WOH55Vzu5AuJImTyik34jzYeCVINNgQWx2d+8T5E5o=
Subject key identifier:   EF:78:99:61:D2:B6:6D:67:9B:90:D4:77:0B:58:F8:9B:E0:E4:AE:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F374E7266ED4E13F0280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fec192-cb85-33c4-8999-724c2db0577a.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.250.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f3:74:e7:26:6e:d4:e1:3f:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=b2320abb-4e1d-4cf6-97eb-80128ebc7b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:e2:9e:59:93:d1:81:8e:b9:6b:5a:66:3f:
                    30:a5:71:39:96:52:48:a8:5d:92:29:b7:ba:87:f5:
                    78:b3:37:2b:06:54:7e:a0:1a:e1:42:01:2e:04:1f:
                    32:77:9e:b6:b3:a5:c2:53:f7:e0:0b:17:f0:a1:9e:
                    55:35:8a:8e:11:35:2a:0b:e6:72:95:b7:90:8b:92:
                    fc:23:7c:44:c9:a7:45:5a:30:db:60:42:35:36:35:
                    77:a6:f4:e4:a7:c9:a0:0d:6c:62:97:ed:f8:11:8b:
                    65:2b:e7:f2:c0:98:3c:82:b5:23:39:06:be:64:4b:
                    fb:72:b4:de:7b:21:3b:64:c1:7b:fe:3e:6f:4a:6c:
                    19:02:63:ea:3f:75:e7:76:54:c7:40:df:56:3a:4e:
                    c1:74:a3:67:20:1d:09:6f:2f:f0:9f:29:d7:29:e0:
                    24:8c:a5:c4:cb:aa:dc:7b:6e:3c:b0:ae:1d:07:2e:
                    6c:ac:cc:96:f1:04:8b:fc:5e:0a:e6:76:86:23:91:
                    65:68:db:6a:7a:3f:06:4f:a2:ac:eb:29:52:b8:41:
                    a4:01:95:70:40:23:33:9e:fa:f7:d0:05:eb:b5:c3:
                    18:0b:d9:e6:06:02:e2:79:bc:02:b8:ce:f8:57:74:
                    11:c4:bf:b6:85:ff:5b:c2:dd:24:b5:32:19:fb:c8:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:99:61:D2:B6:6D:67:9B:90:D4:77:0B:58:F8:9B:E0:E4:AE:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fec192-cb85-33c4-8999-724c2db0577a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:8c:a3:10:a7:e1:03:71:16:d4:36:25:ab:74:76:63:40:
         86:1c:38:93:03:94:8b:9e:c1:64:2e:34:fa:e2:97:b1:92:8c:
         a5:92:16:95:e2:62:81:c7:eb:4b:33:af:43:48:0f:b9:d6:b3:
         9f:7e:d1:c7:31:73:35:d9:0e:81:ed:20:61:ba:f4:01:6b:02:
         15:f3:ac:de:a6:8d:e9:de:7b:42:bb:af:27:d4:4f:e0:74:4a:
         44:19:a1:ff:87:9c:c7:9d:72:87:d1:fd:41:0f:f6:16:c2:1e:
         22:8d:80:93:fe:d5:dc:1a:98:19:b1:d5:e9:32:6d:37:aa:6b:
         85:61:8e:2d:5f:76:92:1b:d9:ab:13:6d:89:b2:ad:67:d1:30:
         50:bb:39:3e:3e:17:52:cb:fc:d0:d2:65:b5:c7:19:3e:a1:0f:
         7a:78:2d:08:1b:37:4c:29:cd:fd:be:37:8e:99:49:53:40:5c:
         82:c5:8e:9e:c7:f1:f5:4c:d4:bb:79:2b:a4:c5:d6:88:34:42:
         84:bb:18:a2:ab:20:d3:0b:2a:23:91:54:d9:73:0f:c8:fd:8e:
         83:c0:39:9c:66:34:3b:39:27:cc:cc:35:dc:26:6f:e4:c0:8c:
         7a:ce:47:fc:b2:ff:10:5d:db:82:40:ec:85:e3:0b:62:b2:26:
         a6:8f:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:02 2024 by rpki-client on console-fra.rpki-client.org