Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa
File:                     b47db3b2-9230-39e2-be23-e199e335642d.roa (raw, json)
Hash identifier:          7tmbb2UTpmcizCjeiUorkmCsYf+h5LkuWQEHPuG/2Lg=
Subject key identifier:   7E:73:4D:82:78:D8:4B:6E:15:D4:6E:F9:2A:90:3A:C2:35:91:87:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847012045CD9BC035E2AD16F940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.203.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:45:cd:9b:c0:35:e2:ad:16:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=dc67aad7-8aa8-4f0f-9e87-0b5f4c4f9850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:7a:46:8d:43:b9:b6:c4:af:69:d4:76:98:
                    5b:3e:a3:f9:c6:a1:d9:fa:93:a6:7f:3e:bd:9b:d2:
                    1a:52:a7:e9:7d:fd:94:27:77:dc:a0:17:1c:6c:46:
                    fc:ef:28:21:9c:33:cb:ad:da:2c:09:5d:c1:83:97:
                    00:9a:7b:52:d5:b3:9a:70:ba:88:bb:ab:a1:df:26:
                    3c:8d:09:a9:ca:67:e6:7d:e5:77:e8:80:a6:e4:3a:
                    e7:0d:90:ab:88:4c:03:43:e2:27:1c:cc:e0:0e:fe:
                    7b:0a:35:0b:d8:0a:a4:60:94:f9:70:28:76:d6:34:
                    36:5b:c2:e5:0e:24:ea:6c:f5:5c:4a:7e:9b:97:24:
                    7c:0c:79:a4:5e:55:fc:fd:8a:42:4a:8a:f9:19:20:
                    5d:48:ea:f1:b7:c6:a9:73:f3:17:35:ed:0d:09:d2:
                    45:9a:ef:d7:9c:0c:ab:76:30:29:1a:56:b3:df:c4:
                    c1:e7:9f:45:3d:8d:d6:00:0c:95:8f:3c:77:1e:9a:
                    cc:6c:00:4d:6b:f6:d6:04:62:64:1d:f8:d3:31:69:
                    c7:1d:41:d8:bd:87:e7:5d:2e:91:28:0c:40:e8:a2:
                    87:fd:5e:f7:bf:15:9f:22:a4:af:12:82:1a:c9:28:
                    81:d6:df:f4:8d:c1:33:27:5b:80:bd:17:2a:3e:71:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:73:4D:82:78:D8:4B:6E:15:D4:6E:F9:2A:90:3A:C2:35:91:87:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.203.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d6:17:65:f8:21:d0:71:dd:79:50:40:ea:87:ca:3d:77:0c:
         f6:4d:1b:cc:fb:95:1a:2b:b1:a7:41:11:16:e8:ca:71:c8:e4:
         e7:8b:9f:8d:9c:cc:16:45:13:26:63:e1:cc:25:c6:d2:d8:e7:
         00:af:34:8b:9e:91:96:ce:91:5c:36:27:97:95:27:5e:f2:c8:
         f6:f8:f1:42:b2:a8:07:a5:ca:8c:d4:6a:51:53:f0:e6:6b:eb:
         bc:70:d5:d2:87:3b:bc:f1:36:cc:27:aa:6c:a3:93:c6:4b:44:
         7d:69:2d:66:dc:ff:e1:15:05:64:3b:38:44:f8:ac:d0:f8:a4:
         b2:e4:5c:bc:76:81:9d:f8:e4:15:80:d7:fa:eb:f9:71:c4:e2:
         29:ac:cb:71:69:ff:e9:57:67:de:ca:a4:22:a7:0e:21:07:e9:
         d7:9d:ed:c4:82:b6:e6:70:07:c3:8f:b9:e6:0b:cd:5b:10:9b:
         e6:d6:c9:75:7e:4c:8b:a6:f9:ec:84:36:5e:37:72:4a:54:fd:
         fd:8a:fa:a3:07:b9:3c:e3:6f:33:af:7d:4a:52:2d:85:f7:3e:
         96:f9:e3:3e:59:eb:c7:27:c6:ed:cc:f6:ed:46:3c:53:26:3e:
         7a:75:11:4b:24:b5:8b:43:6a:f4:ef:d5:19:19:ce:63:a3:af:
         44:1e:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:14 2024 by rpki-client on console-fra.rpki-client.org