Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa
File:                     c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa (raw, json)
Hash identifier:          VXlGah3ZrO5L0+4xW8t36NiDzOa3XOYG99MjcPLpn84=
Subject key identifier:   0A:1D:95:27:D0:AA:1B:1D:5D:26:5B:62:69:8F:04:19:07:00:82:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584704BBFF7C3194BA54C7FFA990
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa
Signing time:             Tue 27 Aug 2024 20:01:59 +0000
ROA not before:           Tue 27 Aug 2024 20:01:59 +0000
ROA not after:            Mon 25 Nov 2024 21:01:59 +0000
asID:                     6167
IP address blocks:        174.244.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:04:bb:ff:7c:31:94:ba:54:c7:ff:a9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 20:01:59 2024 GMT
            Not After : Nov 25 21:01:59 2024 GMT
        Subject: CN=943ec241-6dab-4fb3-966b-ef0da58521ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:63:2c:e3:c0:c0:01:13:a5:b3:b1:48:37:
                    f4:b9:26:a3:a5:6f:7c:2c:f2:9f:bf:41:0a:a9:bb:
                    2b:ff:73:91:e6:58:f6:5d:1b:e4:5b:5b:c3:ba:6d:
                    f5:b3:94:56:34:a0:74:c4:b3:77:28:d9:e2:ac:aa:
                    27:1b:c3:1a:06:30:22:54:26:ce:6a:76:77:6f:08:
                    39:ca:d1:db:4f:aa:fb:96:60:5f:a4:40:c2:a9:0b:
                    54:a8:50:9a:ea:b3:be:53:a1:51:11:46:a2:24:ac:
                    0e:d0:d6:7b:f6:44:2f:93:32:e7:19:6b:2c:78:41:
                    ed:ac:bc:35:6a:89:dd:d9:0a:02:d3:00:7c:af:e9:
                    72:0b:db:d5:68:c5:22:f2:7a:c9:1e:57:43:91:3c:
                    f3:df:5d:c4:a0:06:56:1a:57:28:62:3b:30:c7:8a:
                    54:f3:96:60:7f:3d:90:50:44:f9:18:de:52:97:68:
                    4b:8c:de:2c:99:e3:b8:a6:f9:ad:b9:d5:63:a9:29:
                    b5:28:b6:61:72:f0:56:4d:db:bd:9d:cc:c1:e3:1c:
                    27:b6:cb:c4:41:03:8d:22:e5:1a:96:f0:27:ab:0b:
                    71:13:cc:96:31:8c:67:3d:fa:d0:b5:8a:0e:47:4d:
                    6b:71:89:d0:f3:9b:77:29:95:d5:bf:13:fe:f3:19:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1D:95:27:D0:AA:1B:1D:5D:26:5B:62:69:8F:04:19:07:00:82:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:52:27:23:45:19:6c:c4:5b:45:21:0b:17:f6:d7:97:2d:23:
         f2:d1:b9:ee:0c:fe:9d:09:a2:f7:1e:4b:26:04:4a:f7:e9:60:
         86:ea:8c:4a:f5:67:8c:f1:1f:a6:2d:53:1f:ce:93:8d:a7:7d:
         a0:e1:71:9f:f3:f4:df:f3:22:2a:54:a2:d4:4b:77:0f:bf:fc:
         25:ac:a6:22:b8:e4:0f:62:4c:63:dd:6d:33:b4:e5:e2:8a:d2:
         1c:dd:57:76:61:d9:02:6d:a0:08:48:3b:79:4b:26:3f:bf:4d:
         89:24:dc:6d:b5:e1:05:58:21:d1:de:59:95:b4:35:9e:ad:a8:
         9d:ef:9c:0f:91:47:18:d8:d4:77:b9:6e:f0:57:d4:fe:7e:d6:
         2e:ac:96:ec:0f:89:b0:ae:5f:51:4b:36:0f:7f:a6:35:6f:bb:
         2d:8c:fb:e0:61:34:9b:79:5b:6a:ab:f0:98:c9:65:bf:b0:1b:
         c6:6d:99:e3:b7:30:1b:2d:ee:2d:ad:b5:e0:94:2c:3d:5c:31:
         81:25:b0:b0:af:57:88:1f:72:df:b1:0d:6d:f6:00:15:c3:96:
         a5:b6:5d:34:19:69:74:6c:36:e9:ac:a7:05:54:9c:4e:6b:2e:
         46:9b:11:a4:c8:05:fd:7a:9e:1b:f2:59:a3:38:fd:9e:ae:31:
         82:53:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:18 2024 by rpki-client on console-fra.rpki-client.org