Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b933e39f-6713-3098-a5c7-15a0f1860563.roa
File:                     b933e39f-6713-3098-a5c7-15a0f1860563.roa (raw, json)
Hash identifier:          KAE2L5XJXOjJ4KbSUJ4J1tmc5YK4AXH7xaTJPhx51iU=
Subject key identifier:   A2:B3:C7:0E:EE:1F:92:35:86:B3:2A:5E:54:BF:D5:49:7A:0C:57:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584701205533C0BC544F6FA9DC90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b933e39f-6713-3098-a5c7-15a0f1860563.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.219.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:55:33:c0:bc:54:4f:6f:a9:dc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=a2972e29-4c35-4d71-962e-a3b4cdd1ea7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:16:94:4c:26:d4:3b:0f:1b:29:ca:32:2d:
                    c7:21:ca:1b:2f:2a:d4:96:02:0f:e1:d2:e3:74:ec:
                    ea:4c:98:55:e0:82:77:43:c9:79:0c:7f:bf:06:f9:
                    d0:80:8f:e1:7e:88:6a:37:5c:6b:28:52:1b:54:4d:
                    ed:70:fd:59:4d:d3:a2:2c:1a:21:18:46:04:39:f3:
                    37:44:f5:cf:7d:06:38:12:db:63:d1:a3:ec:67:48:
                    fd:bd:e9:7e:24:d1:ef:b4:84:f0:67:0a:fa:06:18:
                    a4:cb:98:8f:90:44:c9:1b:a7:b0:6f:fe:23:66:e6:
                    8a:36:73:bb:c9:52:52:70:53:1a:63:60:d1:e2:46:
                    0b:78:05:dd:71:a3:e5:87:cc:70:d8:dd:5c:e3:bd:
                    51:cd:e8:31:9b:a4:5b:01:c9:34:00:7d:1a:94:b9:
                    68:d4:83:3c:28:81:21:0d:27:93:8e:ea:14:31:46:
                    da:b7:2a:58:86:70:5f:c5:ba:3c:ba:58:dd:54:0f:
                    82:fe:8c:5b:0d:e6:c3:5f:a7:4d:8c:02:01:5f:7d:
                    8d:1d:47:5a:23:50:85:1c:fa:e0:26:94:d6:89:30:
                    0a:b5:a4:0f:f9:f6:70:02:23:76:b5:e8:c4:3c:0b:
                    3a:b3:b1:c2:cd:28:55:17:b5:eb:9e:eb:ce:b5:a3:
                    6f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:C7:0E:EE:1F:92:35:86:B3:2A:5E:54:BF:D5:49:7A:0C:57:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b933e39f-6713-3098-a5c7-15a0f1860563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:93:c9:ed:1a:3b:51:48:45:58:b9:c6:df:13:ff:b2:de:
         b4:05:89:0b:99:75:89:37:42:25:46:d3:41:9f:d6:33:1c:a5:
         58:94:1e:0a:ac:71:a7:60:91:77:b0:6c:9a:d6:01:8d:52:b0:
         a5:75:35:af:a5:21:3f:59:71:75:77:9e:0e:35:bf:1c:fd:80:
         e0:15:61:40:8f:1e:47:31:27:10:60:bc:85:a4:3a:20:10:65:
         79:af:7c:e8:b8:e0:e4:83:f3:8a:68:b9:7c:dd:46:50:46:9f:
         c3:3c:24:24:60:13:da:60:c0:f9:a5:12:a6:a6:04:e8:c7:e3:
         cd:a6:46:ef:94:eb:8f:19:2f:59:56:40:0b:03:02:ba:18:fb:
         41:4a:6e:4c:61:77:d5:22:15:da:cc:39:6b:a8:9d:f4:0e:46:
         1e:73:b5:b6:4b:47:d7:16:29:75:63:33:6d:60:8b:ae:c6:38:
         c4:d2:f6:91:46:65:81:a3:7e:a1:29:34:58:cd:fe:70:89:6c:
         fa:e8:8d:4e:ad:d2:a9:e3:bb:01:60:b0:43:16:cf:c0:68:71:
         47:35:fd:e5:82:bc:9a:31:54:22:f6:6d:bf:9f:4e:bd:8c:54:
         0c:4f:99:dd:2b:fb:28:71:bd:41:ee:41:ab:a4:9f:c3:2f:8f:
         02:4b:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:15 2024 by rpki-client on console-fra.rpki-client.org