Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa
File:                     b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa (raw, json)
Hash identifier:          bXvO5jW6TyBFxI/kyfYgWi2gID3jWKISB4McrtN+YD4=
Subject key identifier:   2C:8B:33:FE:5D:71:E5:EC:94:CF:88:F3:32:5B:84:84:E1:8C:FE:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E01A9C5D49B9888591C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.232.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e0:1a:9c:5d:49:b9:88:85:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=628640c0-4760-4897-8508-962517d7536a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:87:ea:b3:76:1b:2c:78:dd:4e:d9:dc:b0:
                    84:e1:23:26:73:a0:91:44:1a:c3:80:53:8d:ac:75:
                    1b:8f:36:05:d1:b0:a9:0d:63:62:f9:30:87:17:b4:
                    b7:90:b2:3f:cb:6a:d9:d6:a8:86:34:aa:f6:8e:52:
                    31:b9:83:5d:3c:2d:91:f6:e4:05:83:3e:05:77:d8:
                    ee:b9:d7:b8:25:b8:4e:f3:04:00:a3:1f:74:20:fd:
                    a7:42:05:56:6a:07:c7:9e:a7:39:32:7a:34:b1:68:
                    43:a5:45:c5:07:25:c0:a4:41:3f:87:87:f0:f9:e8:
                    79:fb:33:02:af:02:fb:6b:9e:e0:8c:9a:64:95:ef:
                    31:d8:ec:ab:05:6e:05:7b:a3:ca:44:c4:2f:4e:5e:
                    10:db:05:a2:cb:00:1f:85:69:de:a1:b7:36:b6:ed:
                    61:54:9e:99:63:37:fd:d3:6e:7a:46:da:14:15:70:
                    a6:02:33:9b:1d:73:23:9d:cc:fb:9f:5d:90:0f:3c:
                    af:1e:4f:21:6d:29:e7:ca:2b:50:ee:74:eb:c9:da:
                    ca:16:33:b2:b9:a8:63:26:65:33:54:77:bb:b1:c4:
                    c1:73:19:36:eb:cd:8b:18:be:0a:b8:55:36:8b:de:
                    fe:07:32:44:5d:ba:cb:59:5f:ce:64:cd:57:b4:c8:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:33:FE:5D:71:E5:EC:94:CF:88:F3:32:5B:84:84:E1:8C:FE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4a:df:c4:8c:d2:31:b3:6a:37:dd:da:64:05:e3:c1:13:26:
         33:fb:1d:b4:02:8c:d4:92:07:0d:1f:83:3f:be:8d:10:58:c2:
         3c:91:21:21:2e:ae:fc:c6:ef:9a:4a:8f:73:03:ef:2b:63:4e:
         e5:73:49:ff:aa:d4:ea:c4:fa:2e:7e:78:6e:5a:59:a7:36:b2:
         55:39:0b:22:9f:4f:14:e0:a6:d2:30:d6:33:67:42:9b:65:c1:
         6b:8d:73:98:88:a3:97:66:48:4a:4f:6e:bc:75:2d:98:9e:72:
         bf:f5:89:ac:99:ad:13:91:40:07:01:82:9f:8a:43:ea:b2:b0:
         eb:0e:ee:9b:7f:5d:9b:92:65:f6:4e:01:fb:66:dd:83:e6:eb:
         0c:92:f6:1a:07:ed:2a:19:8c:6c:79:b4:67:e7:45:b8:c5:ad:
         39:0f:2d:28:20:5b:cb:2f:18:4c:61:b6:fa:ae:1f:0c:cd:99:
         45:aa:fb:18:2c:2a:e7:b5:fa:3c:6d:f6:71:39:a3:e4:e0:c5:
         7a:49:f5:2c:65:79:fd:ee:76:38:86:5c:4e:4a:8c:08:1d:da:
         09:61:b7:ad:e8:2d:6c:c8:86:a8:63:30:f6:45:f8:80:45:6b:
         27:17:26:b4:55:fe:3c:00:b3:b7:02:1d:59:5c:c3:b6:ec:0d:
         5d:d8:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:14 2024 by rpki-client on console-fra.rpki-client.org