Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95f52531-c6a3-3468-aafc-515d4504aed2.roa
File:                     95f52531-c6a3-3468-aafc-515d4504aed2.roa (raw, json)
Hash identifier:          MgNybyO9MM0qcCo6Y4uiCYPPJtSXQWTlkmr/xS7IZOQ=
Subject key identifier:   CC:9F:A6:01:42:DD:25:ED:DF:91:CD:EF:12:AE:3C:05:CB:0E:8B:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E42831847935B23C57C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95f52531-c6a3-3468-aafc-515d4504aed2.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.238.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e4:28:31:84:79:35:b2:3c:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=69a8a87a-c10a-4275-ba24-ec6dae190386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:e4:df:12:59:4d:52:1d:f2:b7:63:b2:99:
                    e1:a5:33:22:68:e1:77:db:58:15:20:37:a2:88:d3:
                    17:88:37:b6:14:e3:32:44:e1:ed:7e:27:7c:98:fd:
                    44:47:6c:dc:13:d4:ce:6c:73:b6:47:cb:66:f2:a9:
                    a2:1d:f1:38:25:64:b1:f1:df:4a:ad:f7:e4:8e:ba:
                    da:e6:93:26:02:69:c6:85:cd:68:8a:7a:bd:77:0f:
                    08:81:fc:f2:08:49:c4:36:28:47:ed:4b:77:95:7f:
                    6b:89:68:ed:8f:6f:07:65:4f:54:b8:1f:cf:c9:72:
                    08:e8:e0:93:d1:f6:69:69:e1:12:49:e2:4c:cc:ab:
                    c9:90:2b:be:76:07:68:ba:84:1f:0e:9a:35:bb:f1:
                    74:b4:ac:fa:e1:ad:64:18:fa:28:e3:58:c0:f8:27:
                    af:6c:c5:a8:d4:ea:5b:a9:d8:8a:5f:a7:3e:49:6b:
                    cc:8c:74:f0:ab:e7:44:3f:71:92:17:68:e8:67:9b:
                    47:e5:16:e3:9b:56:72:3e:26:c3:a2:78:92:82:ea:
                    be:10:a2:31:8f:39:2c:76:6b:41:2e:e0:7e:ed:17:
                    68:f7:3b:df:6e:41:a2:9d:3d:47:9f:30:5b:68:7f:
                    03:2f:4e:e0:7e:e1:53:53:1f:13:0b:b6:5b:c2:e6:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9F:A6:01:42:DD:25:ED:DF:91:CD:EF:12:AE:3C:05:CB:0E:8B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95f52531-c6a3-3468-aafc-515d4504aed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:09:c4:4a:02:da:51:0c:ba:a9:dc:3f:89:f4:d1:0e:0a:
         cc:57:50:04:43:b6:59:cf:cd:81:d6:6e:41:58:e0:c5:68:01:
         e6:56:a1:36:2b:a0:d1:a4:9a:8e:34:16:17:33:55:4a:0e:e7:
         6e:f6:da:6b:f2:de:f5:e6:f9:c4:6b:d4:d2:2a:9c:6e:18:85:
         d9:61:56:c8:48:56:8b:02:c7:b0:f4:20:7b:36:8b:69:6c:95:
         01:8b:b9:6c:0d:18:33:e1:c7:28:79:b1:2a:e4:47:89:4c:7d:
         78:97:96:37:18:f0:69:be:5b:2e:3f:41:e2:6c:91:47:22:ca:
         8a:c6:30:cc:b3:7c:27:e3:ab:fb:c8:51:64:d5:5a:30:a4:1b:
         a9:64:ae:a8:d1:de:c5:98:bb:21:55:c8:a1:dc:fb:5b:65:9a:
         aa:4b:90:be:52:c6:92:de:06:11:91:6b:5c:b8:6e:6e:c5:51:
         43:db:c1:98:63:85:f9:76:91:87:ae:18:11:b6:83:85:60:f9:
         b7:1d:2f:7f:c5:28:94:ec:11:78:d0:ae:53:11:83:94:2e:e1:
         a8:1a:bb:ad:e1:19:b6:a6:9c:55:59:8c:b6:1a:e6:f0:b5:a6:
         58:51:93:4f:19:f9:78:99:48:1f:54:5d:04:e8:2a:83:88:1d:
         56:73:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:43 2024 by rpki-client on console-fra.rpki-client.org