Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa
File:                     cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa (raw, json)
Hash identifier:          qPu/ImqEFjcZ7y8DuEpmV6KFjDPC66xoJYeeCiySgRM=
Subject key identifier:   C6:21:9A:2F:A2:F1:95:0A:B1:45:17:E0:6E:82:E6:50:7F:61:81:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0F5A1BA4FF7557479300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.193.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:0f:5a:1b:a4:ff:75:57:47:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=69b0efbc-7d1c-466e-b3c3-f8a52ef8c5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:bc:a5:c9:41:17:fe:41:20:c3:21:73:93:
                    d1:ac:7b:4a:0c:44:59:35:b9:09:9a:33:f4:5d:17:
                    86:4e:3c:5a:bd:4a:8c:a6:5d:1f:9f:04:78:15:1e:
                    9e:bb:ee:0a:99:05:9f:f6:27:11:d8:ea:72:39:68:
                    11:bc:4e:38:88:53:df:b4:59:95:78:3b:06:cc:b3:
                    68:ff:7e:e0:e3:da:57:bd:1b:b8:3e:08:65:0a:a2:
                    3d:62:81:2d:86:7e:14:38:11:a0:06:e1:4e:ac:c2:
                    b3:f3:b5:ee:d3:57:5b:7c:cf:83:55:e8:d8:68:6a:
                    a6:e7:5d:10:30:2a:c9:4a:81:96:f8:34:73:d0:f7:
                    a1:3c:2b:7e:c3:11:c8:e4:56:6a:49:da:9e:9d:d3:
                    bf:d0:ab:f5:a0:96:d0:7b:32:d7:18:fd:88:12:86:
                    77:e4:50:79:87:2f:a9:fb:50:13:76:d6:b4:28:78:
                    17:46:a8:2b:31:2c:33:70:30:f6:51:aa:bd:c5:a3:
                    e1:70:d6:d4:29:1d:bc:bd:28:66:6a:20:2f:92:95:
                    02:65:a2:ac:8a:5a:55:6c:48:6e:98:3f:c5:95:35:
                    15:58:40:1c:70:2c:9f:81:e3:13:45:58:03:2d:33:
                    57:d7:92:e0:de:d5:e1:50:46:58:35:a9:26:96:91:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:9A:2F:A2:F1:95:0A:B1:45:17:E0:6E:82:E6:50:7F:61:81:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.193.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:4d:c9:61:dd:94:7c:0a:ca:70:76:ed:0b:7e:bf:9d:37:
         54:9e:6b:fc:bc:f5:fb:d8:1f:c0:a6:2d:f6:94:97:94:f6:86:
         2c:da:b9:7c:19:bd:d8:91:3b:f4:32:c1:69:b7:46:d1:4e:36:
         d7:74:e6:cf:cf:91:5d:98:ac:ad:5f:bb:a6:6a:3e:9e:d0:25:
         d4:64:c1:92:2d:da:59:e0:33:60:00:d9:9c:77:a3:0b:bc:34:
         d4:bd:9e:25:db:37:89:99:46:2b:9c:bd:a0:c9:af:6a:69:3f:
         f2:cf:3c:c5:46:c8:49:e6:50:64:9c:05:8a:74:68:fc:94:ff:
         66:66:34:ca:d9:e5:46:5f:e4:f4:db:db:c8:ce:20:c8:e2:d3:
         e4:25:a1:bd:4e:16:80:cd:0a:e3:b8:6b:f8:30:fc:94:a9:0a:
         7b:19:93:42:af:c1:42:a0:ce:dc:fb:18:1a:de:47:ce:15:cf:
         3e:33:a9:0a:20:02:71:4e:b4:a6:74:e0:2d:f2:9c:ef:9f:fe:
         e6:f7:16:e8:20:f6:27:42:58:da:4f:da:cd:7f:26:f0:a7:3d:
         49:59:4a:44:5c:f4:a5:5e:50:aa:68:10:2e:dd:69:ca:a8:c8:
         d2:d3:87:58:00:d7:99:ab:a3:79:6c:a2:72:9b:72:ec:f1:dd:
         5f:4b:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:54 2024 by rpki-client on console-fra.rpki-client.org