Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f564939-4ae5-395c-b6ff-48e9528fae2e.roa
File:                     9f564939-4ae5-395c-b6ff-48e9528fae2e.roa (raw, json)
Hash identifier:          JiKxUApF5dr3i3Hz6L5+PTi5HfPqY8bZXofkyxKOHRw=
Subject key identifier:   F7:06:23:66:27:37:E9:60:9D:E9:36:0F:73:10:5F:CC:A7:95:12:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1F9FE6945FE6A0D2E5DC4D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f564939-4ae5-395c-b6ff-48e9528fae2e.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.201.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fe:69:45:fe:6a:0d:2e:5d:c4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=7782362c-406e-4aba-8fe0-8613e9a5869c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:75:17:fe:65:d7:ef:a2:97:14:62:98:a9:
                    4b:94:3e:b5:c5:e5:11:54:ba:f9:46:2b:71:bd:a9:
                    fd:c7:e2:ad:5c:90:df:5f:78:db:0e:59:cc:d2:98:
                    45:b2:67:a1:56:cd:a8:ef:52:71:e6:fd:be:cf:72:
                    c1:48:5e:a3:73:02:4f:ab:b5:36:84:2a:f2:28:2a:
                    e6:14:59:9b:bb:90:6b:73:0d:3e:cb:e1:0b:e8:65:
                    a3:83:c9:9b:78:47:96:ac:dd:bc:e9:b4:e0:6a:19:
                    9e:93:bc:6d:da:d1:1d:01:74:6e:29:6a:76:a2:64:
                    70:14:ee:0c:5c:49:cb:ca:59:83:d3:73:0a:6e:20:
                    fb:47:9e:90:64:1c:65:8c:0a:32:5e:65:07:c6:fc:
                    2e:e9:57:d7:81:28:8c:05:f2:30:78:da:b6:ec:3a:
                    c4:d5:85:bb:b9:da:84:a6:48:b4:22:c2:17:e1:8f:
                    21:b4:15:ff:ae:92:c5:00:85:18:1c:4d:08:69:68:
                    dd:e2:34:72:56:22:31:27:6a:c9:5d:06:e1:23:bf:
                    5e:b1:0e:99:bd:b2:93:8b:81:10:8c:de:a3:e7:fe:
                    3d:3e:75:85:14:7d:6d:82:79:3b:e1:45:b6:cf:3b:
                    a0:fa:5b:3f:cf:81:74:2c:0c:ac:ef:1a:c0:aa:10:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:23:66:27:37:E9:60:9D:E9:36:0F:73:10:5F:CC:A7:95:12:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f564939-4ae5-395c-b6ff-48e9528fae2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.201.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:77:f1:31:9d:81:4d:c6:62:9d:03:09:11:5e:0b:64:92:
         77:79:b3:f1:ed:31:78:21:77:45:27:1c:cd:42:77:5c:a8:fe:
         0d:af:e8:c2:36:7e:b3:68:67:54:21:08:e9:b9:c8:24:ff:e6:
         08:e8:09:ce:08:93:a8:f6:c0:25:4b:51:23:82:02:62:0a:db:
         71:08:be:64:65:31:a9:55:f0:5e:15:d8:b0:ae:dc:2d:8c:a0:
         c3:23:6f:43:fd:7a:a0:91:e3:15:fb:6f:e8:9d:de:03:96:43:
         fb:2f:0e:63:e6:e1:3e:97:60:11:08:a1:a4:a5:e6:58:fa:f9:
         1d:ab:e2:f8:f6:f8:4b:32:59:7c:d7:b2:d5:17:21:ec:0b:5f:
         19:09:5f:c7:28:77:f4:b6:35:eb:59:c6:83:a2:b7:8b:17:a7:
         46:7d:46:25:00:d0:ad:ea:8a:aa:ab:a4:93:81:3e:43:46:cd:
         0a:31:4c:4d:88:0b:13:82:48:4c:4f:fa:e8:c7:73:5e:1f:21:
         00:26:d1:f7:56:fb:76:57:1a:33:d2:d8:ee:b0:92:e5:2e:39:
         47:2b:53:e6:dd:cd:ac:19:56:75:e8:cc:48:76:56:f3:c7:7b:
         7c:4f:04:b8:06:a4:8c:cc:25:68:3a:19:36:14:4c:8b:00:a2:
         c7:3f:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org