Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd041f38-e509-3585-af7e-f77914fcf66b.roa
File:                     cd041f38-e509-3585-af7e-f77914fcf66b.roa (raw, json)
Hash identifier:          w0u9xuwf7S4Vt2NZum7938//fIaEaieNzTpJiWNmeCI=
Subject key identifier:   B6:D4:42:75:D4:2D:81:85:AE:94:62:DF:2F:79:B4:F8:CE:80:05:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835EA04B71CB5DA04195500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd041f38-e509-3585-af7e-f77914fcf66b.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.247.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:ea:04:b7:1c:b5:da:04:19:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=56c40d44-982b-46a8-984d-c39845b2e8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:74:1e:9c:ea:21:88:d3:d5:13:84:40:7f:
                    67:d6:ff:95:83:06:87:65:03:a7:eb:9b:f1:e2:4c:
                    23:bb:64:1a:d8:76:db:ac:8e:3a:f5:7d:b9:9d:71:
                    a2:a9:ae:b7:17:ed:9e:90:ad:93:8d:32:f6:43:b4:
                    8d:19:d6:6a:06:46:25:af:a8:7d:3a:64:7f:c1:0b:
                    55:64:82:ac:43:09:22:fd:d5:a8:ed:96:ec:dd:78:
                    22:2c:7a:e6:43:21:de:67:a4:42:28:74:6a:18:6e:
                    b8:1c:76:be:86:0e:2e:c6:28:75:d8:cb:86:5e:c0:
                    8c:77:da:8f:80:9c:7e:91:e7:87:68:10:bf:30:4e:
                    46:3c:42:61:11:bf:9b:d5:14:fe:6d:63:6d:b6:f1:
                    56:4f:89:d2:a2:b0:f8:3e:3a:39:55:70:60:02:04:
                    12:76:99:3f:82:f1:0e:b6:bb:f8:c6:8f:1e:9f:f2:
                    ec:a7:0c:be:f3:ba:f4:c0:c8:5c:29:1b:18:fe:33:
                    e5:b6:3d:da:8c:19:30:27:f9:10:07:b4:c2:6d:e7:
                    52:76:5e:0c:5c:74:ca:62:c3:20:25:69:07:99:24:
                    bf:0e:b1:60:13:95:b8:c9:b0:82:e2:3d:55:08:4f:
                    4f:c7:3c:cc:7a:d8:cd:51:c3:97:16:fe:40:f9:2f:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:42:75:D4:2D:81:85:AE:94:62:DF:2F:79:B4:F8:CE:80:05:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd041f38-e509-3585-af7e-f77914fcf66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:65:54:b9:6a:76:91:cb:0b:ef:73:58:db:6c:b0:d0:5d:86:
         06:c0:c7:45:6b:e5:66:64:96:c4:d4:94:1d:b8:2a:02:74:8a:
         d0:5d:fb:86:d1:c0:76:33:be:cf:fa:f8:e5:55:41:2c:fa:bd:
         62:12:40:19:da:c8:e7:db:f7:e7:9a:f2:30:6b:39:fe:74:9a:
         75:79:aa:19:d0:ae:b2:13:f6:56:ca:f1:ab:3c:ca:dc:2e:5a:
         6a:88:02:c7:91:ac:ea:d9:59:21:d4:22:e7:e2:11:64:0b:e8:
         d4:8d:c5:dd:34:86:cf:69:7a:6a:3c:2b:16:3e:d2:f6:24:b4:
         a7:9e:74:e7:56:55:8f:35:4f:25:ae:12:50:21:cc:45:b1:9f:
         54:04:6a:d5:ed:ad:0f:36:c6:0d:ab:ce:cd:6f:7d:84:89:3b:
         1d:16:0b:4f:36:33:63:b8:e0:7b:ef:16:fb:ac:40:53:d7:fb:
         fb:38:a0:3b:8f:11:d2:e4:e9:1d:f0:34:15:63:2a:4b:7b:5d:
         3c:14:fa:a9:a9:d5:78:42:b8:b2:19:d0:de:75:f6:96:d8:ab:
         57:25:93:a7:9d:2f:65:43:09:25:37:1e:d4:a8:04:db:cf:d3:
         1b:7e:64:6b:af:81:7e:19:53:dd:1b:27:46:bd:da:bd:22:db:
         fe:d4:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:20 2024 by rpki-client on console-fra.rpki-client.org