Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa
File:                     884000e2-fd1c-3bcf-8abc-d10f045ba796.roa (raw, json)
Hash identifier:          mPgtu/534E3hXCG6jT5L1lrS+aNxqmc/OEZMWRIBI7M=
Subject key identifier:   BB:9C:A2:B5:27:99:D1:EE:93:D4:22:EA:19:6C:4F:66:6B:45:41:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B2DBE0D2373D5B238F480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa
Signing time:             Fri 05 Apr 2024 01:17:02 +0000
ROA not before:           Fri 05 Apr 2024 01:17:02 +0000
ROA not after:            Thu 04 Jul 2024 01:17:02 +0000
asID:                     22394
IP address blocks:        174.41.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:2d:be:0d:23:73:d5:b2:38:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:17:02 2024 GMT
            Not After : Jul  4 01:17:02 2024 GMT
        Subject: CN=d097a9d0-8d52-4b49-8997-ebc555d8b4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:89:2c:6f:19:32:4a:1e:ef:55:49:df:df:
                    55:a6:fe:03:cc:4f:98:77:60:c3:cb:8c:8e:7d:6e:
                    6e:60:3a:fd:71:ee:2c:2b:98:43:40:f0:52:db:d9:
                    13:1b:69:1b:e2:e3:6d:e1:67:c9:05:22:3b:40:0f:
                    25:4f:45:88:b3:76:37:7d:69:7e:12:f6:96:1a:41:
                    36:1d:c0:31:45:32:99:30:f5:de:cf:01:f3:c0:67:
                    62:01:f0:41:ee:18:22:d7:45:d3:52:22:6c:97:e8:
                    e2:c7:cf:74:c8:55:41:40:88:03:03:24:1c:a6:3b:
                    13:f1:06:a3:72:e6:21:02:4f:40:a4:e7:c9:33:2e:
                    14:6e:31:d2:41:56:15:5d:21:cf:e1:e8:fd:f3:f1:
                    1f:df:b2:37:3b:0e:08:c6:73:3c:94:1c:8b:55:da:
                    dc:4a:06:84:dc:69:99:a0:59:fa:58:87:bf:11:ca:
                    2b:2d:d2:66:2c:00:b1:54:c5:bd:3e:94:29:9f:67:
                    bf:86:84:96:46:55:e2:da:a2:c1:a6:95:14:6e:ff:
                    80:d9:fb:fa:f3:b1:63:f4:6d:92:6f:b9:76:9d:f8:
                    56:b5:7b:b8:5c:2b:b8:c0:6c:e6:7c:65:c1:94:db:
                    0d:3e:6a:78:33:77:d9:2b:5e:fb:d7:f1:71:ac:29:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9C:A2:B5:27:99:D1:EE:93:D4:22:EA:19:6C:4F:66:6B:45:41:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:28:49:9f:60:85:71:61:bb:82:a6:eb:c9:d1:e9:af:da:96:
         29:5e:75:08:44:e0:66:0d:ad:d2:07:4c:b1:c6:db:22:78:4d:
         b2:d4:91:cb:f9:5c:f8:0a:86:97:63:2d:dd:54:dd:5a:6e:a5:
         92:d6:57:bd:f9:d4:7c:06:5e:97:46:81:4b:0f:11:d1:e9:74:
         23:02:ef:6c:47:82:86:24:28:a3:6b:06:82:bc:ef:d9:9b:fb:
         05:fe:65:fd:4e:10:7f:cc:b4:66:4c:4f:f6:c3:5b:50:ac:23:
         92:cd:1f:b8:af:bc:7c:f7:6a:9c:f1:16:31:2f:09:1f:5c:bf:
         bf:be:dd:ee:08:ab:a9:ba:df:d3:db:35:97:d9:4f:f1:b1:76:
         fe:5f:e8:85:2d:c6:b7:66:e3:b0:f6:6c:f2:42:91:4f:24:ef:
         30:51:04:36:35:ce:18:70:22:0d:14:63:20:a5:cf:d5:a2:08:
         de:9c:cf:4c:39:d6:89:d0:b9:d8:4b:02:e6:62:19:f4:37:f3:
         70:63:6a:ca:a0:1a:79:46:0b:f7:87:a5:ef:80:dd:06:4d:8a:
         4d:70:44:72:31:f2:ae:c9:87:e3:c9:c8:88:ad:46:42:43:8d:
         42:43:f2:01:34:3f:44:3f:9e:21:fd:31:32:7d:0e:14:32:0d:
         78:30:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:25 2024 by rpki-client on console-fra.rpki-client.org