Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa
File:                     885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa (raw, json)
Hash identifier:          ouWAxMecJwyLAc4XBC57i98P8NnXsvDEhOv5zKLrR+Q=
Subject key identifier:   E2:AD:C2:50:07:93:59:68:C1:98:C9:99:9D:9B:1B:C6:91:3A:39:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584730960482912D4C0112A905C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.42.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:04:82:91:2d:4c:01:12:a9:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=2cd3a4de-60f1-4789-97fa-3e5e33cf9952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:9b:84:f6:41:a4:b7:77:50:3e:9a:4e:ae:
                    10:11:03:b8:b3:d4:d3:63:88:19:8e:61:ed:8f:0d:
                    14:4f:c5:17:56:43:da:5d:a9:21:98:84:4a:b1:1a:
                    a1:7d:6e:fe:33:8b:22:18:58:0f:ce:00:e2:2a:59:
                    97:9f:e1:2e:da:c8:6b:03:db:20:e0:2c:d7:b5:56:
                    67:fd:7a:78:9d:f2:f6:2f:e4:cb:a4:11:96:5a:13:
                    92:c8:43:50:d4:60:09:de:49:76:9c:a9:00:1b:42:
                    4e:04:29:56:4b:d5:0e:13:fa:c9:56:3d:ff:4b:01:
                    45:df:6a:60:c5:16:76:c9:59:ad:98:72:7e:4a:16:
                    38:56:20:72:b3:54:30:d2:6e:02:c3:2b:9d:b5:1d:
                    9f:08:2d:04:85:55:d0:79:62:e5:e4:4c:4c:38:d4:
                    7c:7b:ba:76:56:f4:c3:d8:fa:ae:17:2c:d0:59:23:
                    d6:14:03:07:fd:fb:b2:e5:00:bc:79:8c:40:d8:ad:
                    8d:f9:14:b6:02:15:a4:55:0d:e7:81:70:80:10:b3:
                    2d:27:1c:81:d9:12:48:be:ef:d3:be:b5:5b:56:ae:
                    56:4e:bc:de:f3:d7:14:21:94:a1:d2:c9:10:4f:7b:
                    2c:cf:21:99:f3:76:a9:7b:c0:91:85:f9:23:07:bd:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AD:C2:50:07:93:59:68:C1:98:C9:99:9D:9B:1B:C6:91:3A:39:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:7c:a2:f3:da:ef:95:d0:dd:da:19:0c:62:16:8a:73:04:
         59:c3:44:c5:fe:b9:8e:bb:f2:1f:48:02:a6:d7:ab:9b:5a:64:
         04:d3:99:8c:fa:ba:8e:e0:0a:5e:bc:46:62:9f:df:26:02:22:
         18:75:fe:22:2a:77:cd:10:44:65:f0:1a:53:8f:2d:4c:81:86:
         0d:cd:ff:05:97:29:74:cc:30:8c:bf:07:3b:08:70:39:b4:ca:
         99:fe:f6:83:9c:77:c2:a4:8a:9b:8d:d0:63:28:f7:db:2f:77:
         93:65:ed:9d:78:e2:84:f9:07:08:03:5e:ee:4e:ad:be:0c:57:
         ca:00:18:a8:62:00:45:9f:d3:75:23:70:37:e5:c0:75:9b:95:
         d2:31:3b:63:93:3c:f8:d6:c0:17:05:ce:84:35:14:be:c0:87:
         36:dc:d6:8f:05:b2:bd:17:86:7a:1a:82:f2:09:ea:c0:c6:17:
         87:45:41:99:cb:31:a3:20:cd:28:0f:f6:3f:3d:9f:aa:be:e8:
         67:7d:8a:66:3d:61:b5:95:7a:0c:92:03:92:8b:6d:29:0e:ad:
         93:9c:71:fa:9e:64:f8:b3:e1:fa:f6:98:f4:95:7e:f9:ab:27:
         5c:3e:6f:57:11:55:2f:6e:55:3e:47:d8:e8:4f:96:2a:44:86:
         16:36:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:37 2024 by rpki-client on console-ams.rpki-client.org