Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b323658b-6056-3a13-a095-96ad6aa2a934.roa
File:                     b323658b-6056-3a13-a095-96ad6aa2a934.roa (raw, json)
Hash identifier:          exjq6VWr5L6Z7yZx/3DYF6az6KJd0R4uOGAHdMZQlWg=
Subject key identifier:   D3:BC:E7:12:F3:C7:B3:D3:84:E2:65:F5:51:D6:B0:DD:17:6B:46:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D7C3D35561CD370DB300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b323658b-6056-3a13-a095-96ad6aa2a934.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.232.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d7:c3:d3:55:61:cd:37:0d:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=56af0dd8-1b89-4f08-9217-a5f99363cd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:8b:e8:27:0f:34:72:68:a3:8d:78:8f:1a:
                    9d:f8:52:1a:ab:f3:f5:fa:22:81:36:0a:e5:38:5a:
                    ec:6b:be:e7:01:54:ab:9a:d6:64:37:96:86:27:a3:
                    f3:79:e6:1f:11:df:96:3e:e2:de:b4:5d:7b:d4:7d:
                    8d:94:bb:07:c9:da:95:c3:aa:c8:da:67:51:0a:91:
                    56:89:ff:2e:4a:6c:e6:e7:b6:fc:b3:de:42:11:59:
                    35:4a:88:4e:b2:c7:49:0e:07:77:98:7e:f2:27:d1:
                    6c:37:f0:20:d4:67:f2:fa:e3:47:f0:90:9d:f4:79:
                    61:44:2b:93:d7:19:2e:12:50:23:83:7b:e0:82:a6:
                    da:48:8e:50:6f:f8:3f:9a:47:98:e9:32:39:ec:ed:
                    d2:b6:14:11:2c:4d:ef:6d:4a:08:59:8c:a0:15:a5:
                    fa:7b:b2:77:e4:29:43:64:c1:96:e1:31:53:52:96:
                    1d:dd:5b:fa:40:33:78:eb:b3:0e:1e:e3:61:21:8d:
                    95:28:12:e0:4d:e8:d1:01:13:29:18:3d:2d:86:a1:
                    da:16:0d:79:0f:f6:31:c4:b3:11:0f:62:69:8a:96:
                    ca:c2:33:fd:31:3a:0d:85:0c:9e:45:82:ee:2d:76:
                    22:0f:e8:5e:59:74:30:c3:fe:e5:2a:3d:d9:c0:7a:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BC:E7:12:F3:C7:B3:D3:84:E2:65:F5:51:D6:B0:DD:17:6B:46:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b323658b-6056-3a13-a095-96ad6aa2a934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:67:e6:ac:b9:57:f9:4b:73:0b:9e:7c:56:17:10:29:89:0c:
         20:6a:59:d7:1b:13:de:f6:00:a9:74:05:81:41:3b:99:4b:c1:
         77:ed:4a:ec:3b:10:46:be:5a:70:1f:45:56:60:0b:f4:43:b8:
         ff:46:75:ee:3f:68:ad:29:38:de:4d:2f:cc:c4:12:46:0b:b9:
         5c:3b:4e:4d:96:ee:8e:d0:a9:6d:2b:23:6b:a2:ed:78:98:10:
         32:0c:e4:91:48:5d:a6:31:8d:c6:86:08:9f:63:49:9b:7f:66:
         10:81:ad:9b:17:45:da:69:39:87:48:f7:94:e8:f1:aa:e9:f2:
         46:79:13:b9:43:1c:3a:59:cc:6e:cc:0b:c5:eb:d0:e7:62:66:
         ce:4b:4d:4d:d9:8e:54:50:42:e7:e6:ae:94:d1:37:eb:f3:0a:
         ad:1e:a6:a5:40:d5:59:fb:9f:7d:5c:1b:4c:21:02:9b:6e:76:
         25:19:12:34:3e:28:07:f8:a5:ad:40:7b:2d:13:85:fc:88:03:
         ea:cd:f7:00:7d:f3:dd:db:60:70:c1:a3:16:6d:d4:92:af:67:
         49:6e:d8:b4:f4:b1:3c:09:b0:52:08:55:91:f8:52:a6:02:10:
         fd:23:d0:77:fb:59:b0:5c:25:a2:b5:5d:e5:de:83:c8:df:cc:
         2b:7a:3e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:14 2024 by rpki-client on console-fra.rpki-client.org