Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa
File:                     bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa (raw, json)
Hash identifier:          9p7sNlR29NcgNm9URuBifwr+kIL3OEwFuFvdRuh9rJ8=
Subject key identifier:   CC:40:26:7B:58:8B:D9:86:48:8F:3F:85:18:61:78:D3:CF:AD:17:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584730960BBE67C9CEEBE3510F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     22394
IP address blocks:        174.40.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:0b:be:67:c9:ce:eb:e3:51:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=f19cbb8a-7014-4813-80b6-10e3ebe9c199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:d2:95:5b:cd:c4:24:48:44:a0:82:1f:d1:
                    85:e7:91:9c:84:bc:c6:2f:9a:21:12:9a:fe:cd:b9:
                    6d:db:45:5d:64:06:14:ee:5e:5c:19:2c:06:03:1e:
                    68:f7:bd:05:08:de:0e:d8:ec:17:c0:d6:13:68:86:
                    67:d1:48:e9:00:63:57:ab:2b:ec:98:b2:73:1d:78:
                    e1:07:f7:08:52:20:e6:5e:ae:7b:32:3f:55:f8:65:
                    29:bc:50:51:a4:b2:74:ee:1f:69:c3:d8:5b:01:58:
                    28:db:e4:2a:fe:80:65:52:ea:b6:cf:b2:06:cc:ef:
                    49:cd:ed:be:82:44:1f:c5:5c:90:7a:56:b1:b0:15:
                    53:41:01:da:81:34:ac:a4:22:e1:59:3e:05:45:a2:
                    cc:60:f7:8e:9e:f9:ef:fa:ff:e1:61:6e:e3:b3:51:
                    2d:e4:ca:93:ab:24:ec:d6:ad:3b:6d:ba:f0:6d:ca:
                    62:e8:2c:43:e2:e3:89:eb:7d:bd:e6:a2:4e:3c:c4:
                    64:7f:76:cf:b6:8e:cd:71:d2:cf:09:ab:16:94:74:
                    f1:2c:e5:ae:4a:ea:1d:52:28:26:3d:a5:89:27:df:
                    88:c5:c6:91:77:59:71:a1:33:2d:f4:27:62:fb:c2:
                    f5:0a:58:0b:ae:3f:55:1b:21:db:11:7b:14:ab:22:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:40:26:7B:58:8B:D9:86:48:8F:3F:85:18:61:78:D3:CF:AD:17:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.40.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:cf:b4:47:98:02:7e:09:14:52:57:b9:c4:79:ef:b5:69:
         98:b3:0c:d8:b3:88:37:8a:ce:71:f4:93:ea:d1:6a:a8:33:f1:
         cd:57:e7:0f:94:d2:50:1b:c0:00:12:cb:b2:bf:f5:e5:bf:4d:
         43:c9:37:bf:d1:d0:d0:2b:c0:de:5b:12:99:47:85:0f:41:bd:
         ec:86:e2:52:da:61:0b:8c:28:06:1b:f6:aa:6e:80:04:19:d2:
         74:c1:06:4e:74:e1:39:61:6a:7f:48:64:95:ae:40:9d:fd:25:
         08:f2:8c:7b:a3:3b:78:07:44:71:27:6b:15:05:ca:15:df:c5:
         13:78:06:50:6b:96:b8:cf:80:d9:75:71:4c:b1:ab:23:a9:15:
         05:d5:41:02:fa:11:f3:41:77:53:16:f9:35:d8:49:95:f2:cc:
         24:18:3b:5c:5f:c3:b3:93:1f:53:ab:b1:4e:67:7f:29:0d:66:
         09:37:39:9a:b3:3c:79:69:aa:f3:ce:22:ea:90:49:f3:2d:0e:
         66:1c:a7:4e:4d:bc:cc:ce:71:9f:b6:fb:86:2f:b4:22:a2:d9:
         fa:a7:70:53:24:b2:87:f6:ae:c3:fb:f5:1d:b5:7a:30:03:84:
         06:ef:0e:40:75:3b:70:95:42:40:2e:15:51:9f:6c:bf:a2:b2:
         fc:2a:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:46 2024 by rpki-client on console-ams.rpki-client.org