Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa
File:                     9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa (raw, json)
Hash identifier:          SP2Tv/nqrIz20MZxKRFDvD7RW/VbmAQjjWJNlJjvCCs=
Subject key identifier:   76:E6:1E:8C:56:B4:F3:E0:83:13:9F:D9:02:EB:D0:AC:F2:3F:60:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584701204C2992890A7E1D93A800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.213.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:4c:29:92:89:0a:7e:1d:93:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=2d19e68a-02ee-4934-af86-69ae60471e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:de:55:37:3f:ee:5f:39:e9:e1:a0:3c:fd:
                    ee:ac:b7:f5:0a:d5:0e:a3:2a:c3:70:38:6e:b8:27:
                    93:66:1c:30:5f:3f:29:3a:3e:20:d0:75:62:b9:ad:
                    67:5b:40:de:b9:d3:1c:c2:e6:1a:c6:36:06:47:67:
                    54:c2:d9:ed:c6:52:67:08:a0:2c:dc:7b:86:f9:6a:
                    24:c4:de:3a:74:a8:db:71:73:64:89:c4:6c:29:c0:
                    c7:82:92:5c:7d:fb:2c:9c:a7:8f:27:0d:6e:d0:3e:
                    e2:b9:2b:02:43:04:1d:b9:fa:41:a1:12:80:a8:5f:
                    d8:72:6e:3c:f5:4a:f3:37:2f:bd:c7:22:21:21:e6:
                    38:47:7d:22:14:2b:51:d4:b5:cf:2d:da:92:ab:26:
                    ff:0c:44:24:d4:3d:c0:bb:6f:e4:3e:e4:16:99:69:
                    b3:dc:82:05:bc:c2:e0:d5:58:9b:5e:4b:c4:fd:26:
                    82:d2:27:ed:7f:69:55:07:70:c7:71:0f:6a:6e:d6:
                    f4:b8:c9:7d:dd:6e:66:d6:d2:59:4d:b6:3e:1e:dc:
                    83:58:87:96:f0:13:4d:df:58:0c:b9:28:7c:db:74:
                    07:36:2b:d8:dd:59:14:13:19:4a:31:33:09:05:81:
                    1c:0d:8f:a8:e9:ca:27:68:31:47:98:da:67:3d:34:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E6:1E:8C:56:B4:F3:E0:83:13:9F:D9:02:EB:D0:AC:F2:3F:60:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:88:c0:7e:b6:b9:35:ed:f3:c2:04:90:6f:66:39:9f:ac:
         41:78:41:5f:dd:f2:02:5c:93:0d:44:21:09:ba:02:96:a1:d0:
         28:17:76:5b:57:55:66:b2:a2:73:69:4f:8b:94:d9:39:06:ca:
         77:95:4c:69:c0:ea:00:44:fb:b5:4b:ef:c6:a1:07:f9:ef:0a:
         c9:09:5f:6b:47:44:ec:df:f4:9f:8c:3d:7b:79:36:df:f5:45:
         d5:79:1b:5f:6e:36:70:90:da:11:c7:e9:6d:84:e0:7b:b5:88:
         aa:9e:4c:26:1e:d7:91:66:ec:58:1a:ed:bf:1c:7a:7d:9b:5a:
         b5:80:e2:48:b3:ab:f4:90:4b:ee:ae:b1:e9:f9:d1:7f:1f:65:
         f7:28:ec:1b:6b:9b:4d:6d:29:7e:63:20:12:7e:7c:21:57:05:
         04:58:21:ab:be:16:ca:cb:37:c7:b4:18:69:38:52:e1:b9:c8:
         3a:83:11:48:27:ec:a7:dc:07:c5:07:80:86:fd:0e:ce:cf:7d:
         0f:0d:11:70:a0:a4:c3:b4:84:74:7f:52:94:ed:d9:4d:dd:ad:
         bf:f6:c3:5d:29:09:c6:52:29:d3:91:f8:e5:c4:f6:4d:de:f9:
         d8:59:03:fe:67:46:72:74:c5:68:af:77:d3:a9:e0:3c:db:81:
         ea:1e:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:07 2024 by rpki-client on console-fra.rpki-client.org