Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/960dc43f-f76d-3e6d-9525-869338b4a73e.roa
File:                     960dc43f-f76d-3e6d-9525-869338b4a73e.roa (raw, json)
Hash identifier:          WtyPZHAdpQLhJwxVTZZ4RitNtkoazHb+SNougw9Jb2Q=
Subject key identifier:   23:3F:BB:70:7D:6E:32:2E:E0:EC:9B:CA:9F:CD:95:6D:DA:3A:54:68
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D2789037834B6C8C0B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/960dc43f-f76d-3e6d-9525-869338b4a73e.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.228.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d2:78:90:37:83:4b:6c:8c:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=94591e28-cf0a-408b-b96f-392cb369b4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:11:05:d4:bb:0f:a9:90:b2:2c:79:c5:2b:
                    6a:0e:64:6c:a5:b5:80:fc:7f:c8:b1:02:b1:7d:2c:
                    35:63:72:4a:67:6c:46:36:85:11:17:28:70:34:d9:
                    ac:82:28:0c:6f:86:86:51:39:eb:2d:a9:63:ac:66:
                    bf:49:a3:f1:f7:eb:70:d0:a4:80:48:a8:44:0d:eb:
                    30:c2:79:49:5d:4a:3e:6f:39:4f:61:66:1c:c9:d1:
                    63:58:ce:c8:96:08:98:db:5d:15:ae:84:73:d0:81:
                    e6:78:73:e3:78:f8:62:38:5f:e3:95:5b:6c:ff:ff:
                    68:b2:f7:d5:c5:4b:64:e6:c9:15:11:bc:8c:07:7f:
                    82:4b:f4:cf:df:ba:85:74:1d:13:a6:d4:55:4a:4b:
                    60:b2:12:6e:64:3e:36:12:be:1b:c5:1d:7b:60:63:
                    1a:37:94:17:f9:1f:4d:1d:f9:d1:c4:7e:09:15:13:
                    cc:55:f1:15:9e:d9:01:c1:b4:e4:a2:2d:a9:47:64:
                    42:9f:65:09:bf:ab:ac:25:38:c9:07:f8:2f:83:15:
                    12:9f:90:4f:bc:bf:db:68:be:0b:b0:f2:b5:26:db:
                    83:b9:70:68:f7:00:fb:bb:ff:ab:54:11:d6:a6:c4:
                    f4:90:fb:76:ac:15:46:7f:13:01:b0:7b:5a:03:7e:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:BB:70:7D:6E:32:2E:E0:EC:9B:CA:9F:CD:95:6D:DA:3A:54:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/960dc43f-f76d-3e6d-9525-869338b4a73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.228.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:69:fe:c3:2b:76:4b:b1:46:b2:20:de:51:f3:ff:f4:72:60:
         11:cf:24:52:9d:53:ed:a6:71:62:c0:a9:ae:d0:a0:eb:54:8d:
         83:f7:c9:8c:ff:39:68:e6:ec:8d:58:82:ff:eb:09:60:fb:92:
         16:1b:3c:59:19:66:e4:7c:98:e2:be:89:73:47:39:94:c5:2f:
         19:1b:d8:2a:2d:16:f8:44:32:93:4f:e7:3f:d0:16:ac:0c:7e:
         2b:cd:7a:29:9d:2b:f3:98:c6:fe:23:47:2a:f8:3f:ed:ca:ee:
         3c:d3:cb:56:c1:51:55:d2:c3:f6:00:f1:c5:d3:6d:08:61:10:
         70:db:21:1b:3e:51:8b:39:45:f8:d8:e1:9b:dc:79:c7:0d:cf:
         69:7e:29:18:7a:29:ac:cd:c8:37:c2:ed:9b:c6:87:f6:c8:5b:
         d3:f2:42:8f:23:81:48:9f:cf:4c:d7:26:49:51:88:db:c1:3c:
         61:d1:71:7d:c5:97:46:82:24:26:0f:62:ee:9a:eb:91:7d:d6:
         15:a9:13:1d:20:f5:a1:98:9b:22:81:1c:26:2c:48:14:99:c8:
         70:56:ed:b2:a7:33:0b:94:2a:4b:af:d4:54:9d:7c:dd:36:20:
         a3:5a:80:77:de:d5:41:a5:c3:40:f4:ea:9a:7b:7e:5e:ae:bc:
         c5:59:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:43 2024 by rpki-client on console-fra.rpki-client.org