Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a734e87c-407f-3142-8e19-dbe9a7710c45.roa
File:                     a734e87c-407f-3142-8e19-dbe9a7710c45.roa (raw, json)
Hash identifier:          kLOJUCUQnIHVTrkUtzM23ODPqAnFET+TavhINEa46kA=
Subject key identifier:   7C:98:97:86:1B:D8:32:8C:C0:CF:0A:A4:9F:E3:69:BB:EF:70:99:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B14C50986F2665FA0C140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a734e87c-407f-3142-8e19-dbe9a7710c45.roa
Signing time:             Fri 05 Apr 2024 01:16:50 +0000
ROA not before:           Fri 05 Apr 2024 01:16:50 +0000
ROA not after:            Thu 04 Jul 2024 01:16:50 +0000
asID:                     6167
IP address blocks:        174.43.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:14:c5:09:86:f2:66:5f:a0:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:16:50 2024 GMT
            Not After : Jul  4 01:16:50 2024 GMT
        Subject: CN=96dc77e3-93a7-4ca8-b4dc-bc2cb32c30e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:f8:2d:52:a6:7c:09:85:b8:b1:7c:81:d7:
                    ea:8e:8f:25:33:97:b3:b0:49:47:97:a1:63:28:47:
                    c1:8c:9e:1a:81:1e:2c:3e:ca:01:c8:35:ff:f4:25:
                    65:98:cb:0c:ff:f0:2b:f1:74:f8:3c:54:4c:08:89:
                    81:76:ba:3a:4f:4b:3e:2d:b8:b5:ca:84:c7:af:76:
                    21:78:18:4f:c1:88:f1:66:8d:43:0e:61:42:5a:d2:
                    25:a0:dd:d4:87:44:a9:5b:e6:09:77:5f:53:87:40:
                    78:aa:42:2a:ef:7a:ca:b9:9d:76:5a:5f:de:4f:e4:
                    0c:37:5a:b5:b7:ed:38:af:e9:82:23:1b:d2:fa:25:
                    5b:0d:4e:d2:1c:4c:87:c5:14:b3:c4:45:e7:60:71:
                    44:ba:ca:39:66:48:5a:80:6a:02:43:87:c6:c4:5d:
                    eb:98:82:25:77:57:e4:68:ea:19:e9:12:84:c2:b0:
                    28:79:65:82:2d:f6:a2:73:48:fb:9b:31:ad:18:5b:
                    77:80:ec:4a:5a:00:e0:2e:b6:32:24:ff:4b:8b:69:
                    76:fc:99:72:28:75:10:3b:cb:90:01:64:d2:fc:77:
                    ac:b8:ff:02:cf:59:fe:1f:b3:46:93:06:fb:b0:98:
                    7e:0e:c4:d0:80:fb:0b:a4:12:ad:33:79:83:6c:0d:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:97:86:1B:D8:32:8C:C0:CF:0A:A4:9F:E3:69:BB:EF:70:99:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a734e87c-407f-3142-8e19-dbe9a7710c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.43.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cc:ab:d3:36:4b:a1:03:75:7f:3f:85:0e:bb:75:f9:0b:d5:
         2e:15:f0:56:ec:10:db:59:2d:f6:9a:0c:64:35:6e:b8:bf:f6:
         d0:e7:ae:54:4c:58:a3:a5:ca:89:8f:13:ed:fe:91:0d:88:16:
         1d:15:88:be:71:ad:6d:cf:bf:88:a3:cc:66:e5:3c:a8:01:fb:
         ea:2f:6e:30:77:aa:92:97:3c:f0:85:7d:a4:3f:26:b2:63:fb:
         e7:13:07:6c:88:c8:1d:98:e9:d8:96:3d:25:94:67:85:d6:a7:
         90:e7:ff:88:44:f4:09:9d:21:71:99:23:fd:64:f5:79:98:d0:
         e8:98:38:b7:a8:35:e6:39:f8:6c:bc:57:8d:99:83:33:79:ad:
         ab:f4:a5:09:12:28:50:00:35:6d:fc:6d:dd:18:b5:c2:be:5e:
         59:d0:3c:f1:c7:4d:c7:73:d2:43:90:6d:8d:57:b8:bb:01:2b:
         ac:58:38:d8:db:93:26:84:37:fa:66:62:58:ac:76:cc:05:50:
         70:27:55:97:99:f4:ba:97:7e:95:1b:5c:02:15:68:b3:cc:a3:
         a4:7a:fe:ba:a3:e5:e6:7b:2b:f9:63:c6:01:85:b0:91:85:dd:
         64:ee:41:d2:7c:c4:da:c1:27:dd:4b:6e:55:4b:5d:ad:46:cd:
         99:1b:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:37:51 2024 by rpki-client on console-fra.rpki-client.org