Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a92d969c-fc39-35b6-a008-93208b1378ed.roa
File:                     a92d969c-fc39-35b6-a008-93208b1378ed.roa (raw, json)
Hash identifier:          8dkRfMC40KV+DI9JFV0cPIhBT2LOgMELRRW+qZ6uJQg=
Subject key identifier:   A0:9E:97:8E:CF:0F:40:A9:40:E7:D4:15:67:92:41:AF:DB:A6:87:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0431C9B2C90A83834280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a92d969c-fc39-35b6-a008-93208b1378ed.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.213.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:04:31:c9:b2:c9:0a:83:83:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=677b6bac-be33-4080-a069-b6e4718de078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:ee:76:89:47:0e:cf:6c:b6:20:58:6b:cc:
                    50:6f:78:4f:48:99:7b:40:aa:ba:18:81:ea:ab:56:
                    24:ee:a5:e8:4e:04:6a:99:84:d5:92:75:c0:2f:5e:
                    71:f0:34:9d:d5:b2:41:58:7d:c1:94:ca:27:d8:10:
                    53:b7:b8:01:aa:39:5b:4c:66:fc:61:da:8b:47:ae:
                    ad:87:ed:98:38:c0:cc:51:ec:34:41:6d:b6:8f:ac:
                    39:61:91:fe:2f:4d:6f:1f:c6:a6:12:d9:13:62:38:
                    71:e9:f7:e3:67:7b:77:69:c6:50:fc:3b:01:94:23:
                    9c:c0:74:13:76:dc:50:54:a0:c1:74:87:0d:d9:c9:
                    20:b9:3b:ab:66:64:2c:d0:30:8c:28:71:cc:5f:57:
                    2e:d0:8d:3a:cc:7a:29:f4:08:27:35:68:cd:ec:ca:
                    b3:e0:5a:c0:d5:9a:96:e9:97:1c:cc:ad:ba:21:c1:
                    fc:6c:ae:f1:1b:b0:a8:aa:57:83:9c:98:bf:74:32:
                    54:fa:89:8e:fa:6e:61:33:f5:75:8c:84:53:1a:da:
                    7c:1a:be:be:36:a7:a5:ac:a4:7f:54:77:cf:c5:eb:
                    16:de:6a:3a:30:0f:5a:fe:7c:73:39:8d:0c:b7:4a:
                    b2:fa:bb:57:60:8c:65:8a:65:c3:f9:f5:be:c7:78:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9E:97:8E:CF:0F:40:A9:40:E7:D4:15:67:92:41:AF:DB:A6:87:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a92d969c-fc39-35b6-a008-93208b1378ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:4e:3a:64:0e:31:cd:4f:c1:20:5a:0e:6d:88:fd:86:90:
         cb:19:40:76:55:8c:a7:12:2d:2b:40:dc:14:53:3a:8d:43:2f:
         ae:29:37:07:68:57:ee:01:6a:85:58:bd:9a:e2:53:86:49:be:
         f8:a4:a1:26:86:58:a2:31:72:9e:95:14:4f:91:c6:31:dd:1a:
         af:20:2d:78:46:d7:75:3d:1e:79:d3:fe:46:ef:eb:41:a0:d4:
         5f:23:1d:8e:d9:15:8f:e5:32:93:59:d0:75:f4:db:16:09:65:
         79:59:f3:96:92:94:17:f6:5f:61:11:81:21:4e:4e:e9:a5:43:
         14:ca:91:e0:95:72:ef:05:5a:b1:41:32:39:9c:f2:56:5a:ca:
         36:4c:32:30:fb:ab:fb:62:75:ab:2c:13:29:38:00:bb:26:95:
         11:64:22:3b:88:86:29:b0:6f:a5:73:45:34:53:ff:68:f8:24:
         a8:f8:53:60:dc:40:38:a2:e8:e6:17:fb:64:c3:c6:ba:38:ee:
         e8:e3:ec:69:4f:37:77:9b:67:80:88:61:bf:56:f5:c9:b2:2d:
         0b:94:29:5f:94:d6:f9:19:f8:ec:03:76:61:13:fe:bd:01:78:
         ca:44:a7:aa:c2:2c:d2:32:41:21:4c:9f:32:78:63:f2:c9:61:
         0e:f6:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:47 2024 by rpki-client on console-fra.rpki-client.org