Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a57216-5402-387d-9bc6-24e318cb3337.roa
File:                     c0a57216-5402-387d-9bc6-24e318cb3337.roa (raw, json)
Hash identifier:          NlC+k8EFreRzn08zhttPokYKxChhwqjQ0WkauXJ5XXU=
Subject key identifier:   72:62:1C:F3:A3:64:C4:CE:22:11:C6:CA:AA:F6:0B:0E:4B:7D:88:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835D8B8D587C0447FB4E440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a57216-5402-387d-9bc6-24e318cb3337.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.232.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:d8:b8:d5:87:c0:44:7f:b4:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=64373ba2-fc22-4b85-95f1-f96653d8a3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:30:47:26:27:14:46:99:2b:06:e9:63:b0:
                    cb:2c:e8:85:91:7e:06:5b:1a:62:54:f3:70:0e:d8:
                    33:e2:bd:eb:06:8c:49:d7:6b:48:f1:2d:33:1c:63:
                    b2:d1:68:3d:64:7a:b4:02:76:c2:8f:b7:65:67:fe:
                    97:7e:8a:52:a8:bc:63:01:be:0e:ad:bd:50:63:91:
                    c6:71:7c:c4:fe:17:6b:cb:dc:38:d5:e7:87:81:70:
                    39:63:fe:b7:1e:d6:0b:c5:e7:6a:f1:a7:33:e2:3a:
                    26:b1:14:02:4e:8a:f9:24:12:e3:5d:28:8d:94:ab:
                    96:be:4f:d7:e4:4a:9e:bf:2c:b7:a4:b4:58:c4:40:
                    ab:5f:a6:f2:dd:7a:e9:b2:dc:a5:8e:d8:a2:f1:12:
                    0f:af:95:33:5b:c6:8f:dd:5d:38:30:c0:48:0c:69:
                    ea:18:7f:8a:da:4e:8a:a3:5f:f2:8f:f2:4b:e7:53:
                    79:74:5c:98:52:ba:fa:f0:65:5e:84:d4:54:36:06:
                    cf:44:29:40:68:da:8f:b1:f8:d8:74:9e:57:6b:f7:
                    a1:87:53:9d:4d:78:ef:27:8e:3a:a5:94:ba:6c:f3:
                    21:bd:05:90:86:ad:fb:7f:f5:22:5e:51:96:17:58:
                    2a:c9:19:73:e2:cb:18:0c:9a:81:f5:61:6e:de:e8:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:1C:F3:A3:64:C4:CE:22:11:C6:CA:AA:F6:0B:0E:4B:7D:88:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a57216-5402-387d-9bc6-24e318cb3337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:32:71:da:a0:09:c0:a1:2d:fb:12:0d:59:80:81:d7:0a:
         25:2f:c9:fa:a6:40:70:d7:5c:d8:63:14:92:0e:75:87:3c:88:
         3d:9c:8f:c4:45:af:72:d4:6e:27:23:5a:a8:ab:04:4e:ae:af:
         f6:b6:03:da:84:ec:8f:8e:97:c1:ad:e5:ae:7e:f6:1a:af:df:
         55:df:f6:34:ef:04:ac:ab:90:c4:bb:b8:a8:81:6b:0b:0b:47:
         8b:aa:30:b2:78:9d:5c:55:a5:99:ff:16:ee:28:7a:66:2c:7e:
         74:6c:aa:63:d0:19:7e:86:12:fa:c6:b8:4a:4d:19:14:8d:15:
         9a:7d:5a:64:07:66:74:65:d9:d7:66:6c:68:a2:09:06:de:04:
         ab:2d:da:39:9f:db:7b:45:1d:e8:1c:10:f9:4d:5e:d8:98:37:
         6a:9b:a4:02:0a:bb:44:ff:22:bb:7c:0f:6e:58:d8:06:1e:f8:
         e2:21:45:3c:a0:71:4b:2c:b9:1f:ed:e5:5e:2a:45:13:62:3a:
         8e:b6:f0:bb:95:6f:08:95:57:af:b6:2c:bf:46:34:11:f7:45:
         1d:bd:03:6c:09:a1:3a:ad:00:09:6d:7e:6a:ba:73:2e:81:40:
         a5:15:10:1c:05:40:f8:7a:68:dd:d8:ff:56:47:27:1b:28:f9:
         bc:82:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:52 2024 by rpki-client on console-fra.rpki-client.org