Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c527de97-6735-3b5a-9963-fe5eff48857f.roa
File:                     c527de97-6735-3b5a-9963-fe5eff48857f.roa (raw, json)
Hash identifier:          m8N/hxF9NKa96k8qsPfQJcNqLbXrbpZPMNcbVUFMy+8=
Subject key identifier:   CB:19:11:3F:78:6B:67:59:1E:8F:10:E2:47:29:4B:75:97:0E:A0:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E4057C5C081A2A6F54C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c527de97-6735-3b5a-9963-fe5eff48857f.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.238.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e4:05:7c:5c:08:1a:2a:6f:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=ca807c9e-457b-4540-88b9-06a6d7edf95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:c6:2e:cb:04:a6:e8:ea:d0:cc:05:01:df:
                    81:4a:8b:d1:7b:8a:08:3f:98:91:62:5e:b0:0d:3a:
                    02:19:78:1a:0e:61:75:ce:6e:2d:16:90:f2:04:05:
                    7c:33:14:fd:c9:2e:76:b3:04:91:ac:ca:d5:0e:d2:
                    ed:1c:26:06:70:a7:f0:30:43:af:02:50:3f:f2:15:
                    69:aa:4a:ac:ee:17:46:36:16:9e:b7:bc:44:c9:05:
                    51:f0:d3:78:8c:e1:4f:dd:3d:4e:62:fe:c4:8b:e0:
                    95:1c:30:1a:86:d4:32:d9:5e:0d:74:66:1b:a3:59:
                    7f:47:f7:38:ba:12:ff:8b:46:06:93:3a:63:13:40:
                    be:06:e9:59:d4:6f:f4:73:13:61:5b:b7:2d:16:5b:
                    c8:bf:bd:f4:ed:fe:68:26:8e:02:b5:70:14:e0:94:
                    21:05:ea:11:78:8e:b7:7e:59:08:ea:c5:5b:b4:75:
                    0b:29:f3:78:3e:e2:92:1f:e7:60:dd:fc:cb:f0:3b:
                    30:1c:63:8c:fe:f1:4b:65:de:a5:8d:e7:27:e8:cf:
                    f5:eb:1d:d7:d0:28:e7:33:11:08:c8:fa:5e:b6:f4:
                    33:39:e0:17:05:62:63:0a:8d:97:5f:59:c9:00:ca:
                    04:56:de:dd:a3:1f:54:17:b9:d9:6a:d6:01:fa:f2:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:11:3F:78:6B:67:59:1E:8F:10:E2:47:29:4B:75:97:0E:A0:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c527de97-6735-3b5a-9963-fe5eff48857f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:17:97:0d:f3:7f:e1:47:ac:9c:ce:47:31:b0:bc:a6:b1:79:
         8a:03:a7:fb:de:97:cf:26:4b:07:ea:30:9d:52:d9:14:30:fc:
         51:7c:90:68:4d:23:b5:62:12:64:c6:d1:38:81:c9:d5:2d:71:
         b4:66:8e:44:d6:af:64:3d:9f:8d:5a:32:db:33:e8:4d:23:6c:
         3a:eb:29:34:41:aa:0b:78:de:78:fd:b4:fe:06:52:85:5c:2a:
         aa:7f:30:fe:e9:75:c7:e3:1f:48:ce:48:21:4a:60:99:63:1e:
         c9:54:e6:74:6e:4b:38:f8:7b:26:e6:98:1a:3d:4f:56:20:a0:
         ce:6a:2c:d3:7b:4b:5a:99:82:0f:c8:7c:19:62:b6:19:10:0c:
         5e:d6:32:00:cd:a1:50:41:94:69:39:28:c6:9f:40:76:b9:40:
         27:4a:61:9e:32:6a:69:fb:9a:fb:e7:84:dc:d8:d3:67:b9:76:
         22:f5:d9:51:14:dd:f0:ba:e6:b7:6d:36:e8:95:bf:51:4b:6b:
         a5:e3:81:e3:8b:2b:7d:67:ef:aa:64:ec:a3:31:99:63:90:d9:
         98:fe:0d:4e:b9:42:c5:9a:37:07:38:f9:17:16:72:33:6c:7e:
         24:8c:20:32:23:83:ec:2e:0d:04:6f:e9:73:24:7a:b1:0b:91:
         b3:a6:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:53 2024 by rpki-client on console-fra.rpki-client.org