Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa
File:                     bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa (raw, json)
Hash identifier:          Llts9w9bkeG4ZPCulg2osEueNuXe4jUoW/PDzjQOYkQ=
Subject key identifier:   86:01:F5:3A:AB:24:92:D1:6F:C6:54:67:17:F0:17:86:07:D0:85:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835EF05BB18CF940DC7C700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.248.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:ef:05:bb:18:cf:94:0d:c7:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=d069cbc9-2260-4ffc-8de3-c713a08b45de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:89:ae:9b:72:ac:55:b2:00:8f:9a:37:a0:
                    7b:26:29:66:8e:fd:93:c5:34:5e:b9:cf:39:c6:4f:
                    1e:18:78:e5:3c:67:78:e4:aa:bf:a4:eb:72:63:eb:
                    8c:cc:85:b1:53:97:0d:23:82:8b:68:a5:03:80:46:
                    b1:c3:ac:01:a2:e2:ca:14:96:7c:a2:f2:60:25:60:
                    72:e9:9c:4c:a8:da:66:db:63:ec:57:95:63:b5:45:
                    15:b7:d9:19:7e:59:0d:f6:82:93:7f:2d:8e:e8:e1:
                    8c:da:34:54:3c:61:cc:9a:f8:d0:04:45:f9:65:ab:
                    62:69:d4:8a:d1:14:35:3f:d9:13:ae:40:71:97:a5:
                    9e:58:bc:4f:f7:fe:0d:45:24:01:55:43:c1:76:0d:
                    1a:0b:8c:c0:9e:74:2b:cd:e0:54:e1:23:2d:37:26:
                    74:8a:ff:fe:bc:ee:db:8f:06:af:57:41:8f:cd:75:
                    d6:41:b3:42:83:1f:d1:cc:29:23:ea:41:eb:43:f4:
                    e5:80:c3:14:46:ee:69:24:63:fc:e7:fa:fc:7c:f9:
                    cf:c6:b1:31:68:1b:a9:24:bf:33:48:74:dc:a2:ed:
                    ae:2c:cc:1d:64:8e:fa:a3:d7:59:55:0a:fa:07:c3:
                    2b:9f:6f:c9:e9:ea:31:15:0e:54:c7:24:41:f7:88:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:01:F5:3A:AB:24:92:D1:6F:C6:54:67:17:F0:17:86:07:D0:85:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.248.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:28:f0:e2:09:9b:84:38:5f:1c:41:04:dc:23:5a:d8:70:bf:
         b3:9c:f9:14:17:2a:f1:2b:f1:ae:d2:a9:aa:6d:11:3f:84:42:
         3b:04:e5:e2:24:91:3f:10:95:c3:92:99:36:d8:92:68:49:27:
         bb:15:f7:ac:ab:8f:14:e9:98:73:d1:d7:3e:57:85:27:f1:0e:
         5a:bd:cf:64:e6:7f:02:7a:9a:55:e4:2c:96:93:64:b0:25:01:
         02:e3:59:56:54:20:d3:30:09:05:40:5b:f6:4f:10:cf:a5:e3:
         d9:c9:de:92:6f:1b:92:bd:90:a8:8e:27:a3:1b:f3:e5:b1:2e:
         fb:62:ac:fa:06:26:03:f7:2d:6f:30:2a:c8:4e:f1:08:90:8d:
         93:62:e0:dc:e2:d4:77:ad:4c:11:e7:08:93:3f:92:a4:e7:5a:
         01:20:82:34:2a:17:ff:bf:d0:2f:7c:49:80:2f:95:23:36:29:
         a0:14:f0:cc:37:45:77:68:44:4f:c7:bd:af:1b:3d:71:7a:e0:
         2c:7e:aa:ab:5b:e7:e4:a0:07:8d:26:72:7c:25:fa:0c:0f:e1:
         87:38:df:2c:c1:e6:fe:49:7b:b5:20:84:8c:df:42:cb:ac:be:
         a8:1b:d7:52:46:9d:c1:76:ba:7c:a0:26:39:cc:ad:fe:e4:cc:
         f5:a2:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:16 2024 by rpki-client on console-fra.rpki-client.org