Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac1e076a-f706-3845-b431-7a7912cd0ee0.roa
File:                     ac1e076a-f706-3845-b431-7a7912cd0ee0.roa (raw, json)
Hash identifier:          LqRENX9+vSOOP7iGv2L33c0FwYfFS1kYD7CGQW4sFmE=
Subject key identifier:   93:94:30:4C:6F:6B:F3:59:FE:7F:D9:AA:1F:AC:DD:18:E6:F5:2C:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E698B69246D431CCE680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac1e076a-f706-3845-b431-7a7912cd0ee0.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.241.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e6:98:b6:92:46:d4:31:cc:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=f016b81f-345b-4a6a-95bd-9c8c95c95492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:87:bd:bd:c2:e4:63:05:3b:de:07:5d:e8:
                    33:d3:c0:75:65:56:e8:cc:63:6b:e7:33:43:54:6f:
                    dd:96:3d:37:80:a8:c5:d2:11:d4:34:7b:7f:88:a2:
                    28:f1:1d:17:5c:d7:22:ab:ce:d0:5b:80:15:5b:da:
                    02:ba:bb:9c:3f:a1:42:53:73:96:96:5f:ff:26:b2:
                    e0:7c:8e:88:6d:5c:16:dd:b4:cf:e9:36:30:9f:33:
                    8a:80:a0:2f:66:ec:44:c3:14:08:04:0e:73:4c:50:
                    1f:20:cd:bb:62:08:d6:f4:95:74:ef:c9:17:90:9e:
                    b4:af:d4:8f:e8:71:0b:97:3a:52:76:a8:59:cb:b4:
                    43:2a:f7:dd:fb:89:da:ec:91:a0:85:f9:97:0d:01:
                    4e:c1:e7:cc:d5:12:52:ca:44:7e:02:79:03:71:9e:
                    e9:6e:6b:fd:53:50:90:dc:df:88:70:de:84:8e:d7:
                    5f:ab:c2:60:d9:25:2a:bf:d9:9d:c0:b6:82:e3:dc:
                    21:cc:a3:70:00:84:02:e9:e4:b3:c2:06:80:1b:12:
                    78:1b:d2:7d:f3:f3:42:79:17:5e:ee:5c:b4:86:34:
                    c7:e6:72:3b:2d:89:b5:86:9b:69:3d:4d:24:0a:27:
                    03:4c:4c:2d:f2:c5:0a:cb:9a:58:9e:ab:48:27:0d:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:94:30:4C:6F:6B:F3:59:FE:7F:D9:AA:1F:AC:DD:18:E6:F5:2C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac1e076a-f706-3845-b431-7a7912cd0ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:92:87:de:b4:0e:42:63:f7:fc:aa:ab:a8:0e:a2:20:fa:0b:
         c3:db:95:4d:3e:72:a3:b4:4b:33:a3:d5:c3:71:35:59:99:99:
         c0:54:4a:3e:9d:3f:45:f6:ae:66:5d:d1:55:a7:5f:e0:2d:b7:
         09:07:54:b3:d5:11:89:3a:8a:45:87:45:f4:57:a3:66:ec:15:
         2b:02:b8:4d:40:f6:13:62:0f:ab:33:b1:31:37:45:16:31:10:
         a0:54:ef:e7:d9:5f:9e:1f:98:73:0e:7e:76:c7:2d:40:88:d7:
         33:33:ed:95:09:fe:62:a0:61:60:93:04:2c:c0:95:b6:30:58:
         b1:ff:69:1e:c8:73:cb:e5:bf:94:b3:d4:b2:ba:36:02:29:2c:
         2f:1b:97:0c:3e:a7:14:ee:da:48:d9:56:c7:a3:5d:d1:b2:0e:
         31:9c:43:7a:84:4a:90:d5:72:7c:f4:ec:64:cb:82:26:54:86:
         03:c1:d4:db:1a:cb:ab:74:f4:75:3a:40:04:c1:eb:7b:1b:8b:
         ce:34:a4:ec:cf:7f:65:1f:6f:b0:f0:76:90:d2:c0:00:96:77:
         7e:2a:6a:70:bd:2b:7c:52:a9:c5:c6:75:c4:d4:f3:a8:07:89:
         99:f3:36:cc:57:20:a1:2c:ce:a1:b4:9e:08:94:8c:24:83:34:
         67:33:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:47 2024 by rpki-client on console-fra.rpki-client.org