Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa
File:                     b39ec023-ac87-34ae-a387-3c24998f6c03.roa (raw, json)
Hash identifier:          a4Fl5r2/I6+PrbxnlVMBtbA1s8rVURAimPAFDsIfsFk=
Subject key identifier:   CD:C4:21:75:72:03:88:B4:90:48:00:88:A6:0A:26:A8:DE:19:72:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E3AD2029FA1A7B4A7B20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.238.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e3:ad:20:29:fa:1a:7b:4a:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=f6ce04c7-be05-4827-bd79-eaab1da7b4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:80:38:3d:ba:3a:70:bb:c4:0a:57:b2:12:
                    bd:dc:6c:42:81:40:1f:d8:3f:99:0f:89:23:b5:6d:
                    57:8b:36:2c:0c:70:2e:50:49:b1:40:70:c2:78:e7:
                    25:be:ce:8b:d1:32:45:70:25:a7:38:61:98:5d:dc:
                    f5:7a:19:e9:c9:ab:42:25:e1:ea:6a:8a:67:31:ab:
                    c8:fd:23:04:da:43:11:49:36:85:33:ed:71:e6:9a:
                    09:78:59:be:5a:23:13:53:0e:14:cc:8d:d8:92:37:
                    23:f1:cb:3a:ee:47:45:3a:49:6f:9d:b3:2b:89:5b:
                    70:cd:0f:03:76:4d:fc:4e:3e:c3:fd:5a:b1:e7:6c:
                    35:70:81:98:3f:51:09:71:59:58:1f:8a:66:f2:f0:
                    dd:64:79:33:e5:13:5f:bd:65:ec:5b:5d:9c:ee:c3:
                    d7:fd:9a:c2:9f:8a:39:4e:19:38:4f:f0:b5:a0:39:
                    63:f6:48:6e:6a:5f:59:72:03:6c:6b:45:73:b0:a1:
                    0b:63:97:ec:d9:de:67:22:58:fb:6e:ae:65:17:59:
                    f9:f5:7c:28:f4:3a:f9:af:7b:6f:a0:23:5e:c7:25:
                    47:25:c4:a2:d9:a0:2d:f2:05:0c:ca:28:2e:e2:8d:
                    e7:e5:0f:ee:8b:ae:8f:17:a3:07:39:50:8e:17:62:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C4:21:75:72:03:88:B4:90:48:00:88:A6:0A:26:A8:DE:19:72:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:19:51:c8:10:31:c3:4b:8e:93:32:1b:47:38:8f:5a:20:
         34:7f:bb:71:e4:54:83:74:8c:f3:c1:b6:19:c0:01:d4:25:5c:
         0c:2a:e7:d2:67:cd:8d:c8:5f:11:23:d2:f1:31:09:55:af:13:
         e8:4b:2f:e4:d2:b3:15:cb:c6:55:24:c5:27:57:ed:39:b7:bf:
         20:bb:4e:2d:ca:86:8f:0e:02:ac:3a:5d:a9:65:89:64:9f:da:
         3d:91:53:f0:2a:f3:d1:e2:52:97:08:3c:2a:29:66:5a:cd:2a:
         8e:49:c6:a7:39:58:f6:10:91:c3:b7:12:59:61:80:b8:ce:65:
         b3:f9:e9:28:7e:47:46:d9:4c:2d:e7:61:87:8a:e0:30:35:7f:
         61:4d:e1:8d:2a:6c:c0:bb:9d:1e:22:92:d6:c0:0b:11:7e:d1:
         51:59:ca:8a:63:12:ff:e2:dc:c6:25:48:94:22:ee:ab:bc:93:
         ce:91:bc:ad:d7:7e:4b:ee:b7:c4:64:8c:71:dc:57:40:04:fa:
         8a:2c:e6:29:6d:03:d7:2c:86:94:d6:70:ec:24:40:45:31:74:
         ad:c2:da:9b:27:7f:b8:dd:1e:3e:d7:b6:7e:56:00:4b:38:db:
         eb:79:11:48:cf:04:2d:52:ec:09:bd:1d:45:d0:0c:e4:17:a3:
         9b:c5:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:14 2024 by rpki-client on console-fra.rpki-client.org