Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b198f632-5bd9-3a3d-a0c4-6beb271b0107.roa
File:                     b198f632-5bd9-3a3d-a0c4-6beb271b0107.roa (raw, json)
Hash identifier:          KhEyZnbQ7fuTI/Z6ZLSprdwogIaSJco9v1eL9Ebpjic=
Subject key identifier:   63:23:60:67:C2:6A:A9:2A:29:94:2A:75:C6:8F:F9:78:CF:6F:F0:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F32CC4AA613D8C778E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b198f632-5bd9-3a3d-a0c4-6beb271b0107.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.249.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f3:2c:c4:aa:61:3d:8c:77:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=56e69418-afc6-40da-bef0-85dc63e16e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:a3:17:1d:57:6c:ed:ce:f2:b8:aa:1e:12:
                    c1:07:2b:91:6b:f9:fa:c7:81:37:76:b2:52:46:1a:
                    ca:38:fa:fc:58:7e:5f:ad:db:e1:ff:be:60:d7:1c:
                    d4:77:af:34:d9:c2:33:2f:d3:72:aa:22:59:0c:21:
                    9a:f3:5a:cf:bc:34:a7:b1:69:0f:9a:b2:32:f7:c2:
                    3c:cf:ca:92:1e:71:37:41:93:93:23:6d:52:d0:fe:
                    f1:67:05:4c:c8:63:4b:39:51:c9:0e:b3:89:5f:6f:
                    99:9f:3f:c7:9e:42:e2:97:f8:92:91:0d:14:62:5a:
                    a7:9b:35:65:b7:8f:6f:bd:28:c4:77:6c:2d:ff:2b:
                    86:9b:6d:aa:77:be:a2:79:bb:d9:42:d3:38:2f:9b:
                    5a:fc:d7:42:35:a5:38:51:0d:05:81:5d:79:05:8a:
                    fe:3a:ac:5c:c6:a4:27:00:da:b3:10:9a:bd:44:2c:
                    87:31:8d:3d:0b:41:3d:93:66:70:72:5e:f6:e6:a4:
                    4c:81:7d:c1:bb:2a:bb:de:c4:ce:d0:81:f9:89:13:
                    64:17:f0:1a:ce:57:ab:76:c8:d5:07:3f:d8:68:ec:
                    63:21:5e:d5:9d:1e:ee:a3:81:33:ff:91:f5:e0:02:
                    d6:b9:dd:f2:6c:35:91:3c:4c:e8:41:9b:79:10:e6:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:23:60:67:C2:6A:A9:2A:29:94:2A:75:C6:8F:F9:78:CF:6F:F0:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b198f632-5bd9-3a3d-a0c4-6beb271b0107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:64:5b:8c:3c:a2:52:71:2c:b8:ad:2c:85:df:45:c3:cf:3a:
         a9:f2:d2:5b:48:11:b3:6f:87:9c:06:e0:b0:61:6d:8d:fc:b0:
         ab:ed:9b:7d:e3:de:77:1d:ba:d7:8e:ab:84:01:53:54:e5:36:
         78:f7:6c:8c:ef:19:01:90:ef:c9:02:ea:36:99:73:8c:27:12:
         50:e2:bd:a3:e3:c6:8c:4c:74:8f:3e:e0:91:95:a5:97:c1:a3:
         21:3d:e6:59:04:7a:6a:0e:63:ff:7d:b3:da:5f:ac:54:24:7f:
         0f:70:c1:fa:f9:1a:c8:5d:af:10:dd:db:a0:84:8a:58:b6:3e:
         fd:ea:12:ee:90:30:f1:a8:cf:a7:5b:0b:7a:bc:2a:87:0c:33:
         bb:ab:62:fd:1b:4c:09:55:a9:69:d3:1b:8d:a2:cb:38:6f:8c:
         ec:ee:ec:3f:9b:13:7a:08:71:61:0d:dd:b0:ed:01:6f:8f:d6:
         e9:06:57:04:19:0f:69:af:4e:e0:77:33:76:9c:b5:77:09:4d:
         e3:0d:77:84:7f:f9:48:1b:83:22:8d:04:6a:cf:cf:4c:a2:b8:
         dd:e2:c9:bf:92:74:06:ee:06:65:4f:de:6b:03:88:33:64:37:
         fa:1b:35:26:a8:38:30:59:f7:87:8d:c4:db:1c:9b:a2:12:6e:
         0e:35:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:48 2024 by rpki-client on console-fra.rpki-client.org