Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d853747c-fb99-3324-ba14-887cfb2725c9.roa
File:                     d853747c-fb99-3324-ba14-887cfb2725c9.roa (raw, json)
Hash identifier:          UQg5sdGPFLwyaKa97vGGBt6k2AmXD0CbFYYChx4Oedo=
Subject key identifier:   AF:66:62:DC:36:E6:CC:76:A1:56:83:3B:37:5C:10:FE:55:74:7C:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584701203FAB234C4350AD424100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d853747c-fb99-3324-ba14-887cfb2725c9.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.196.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:3f:ab:23:4c:43:50:ad:42:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=a7bd7d33-3293-4fff-87c3-783999452dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:cb:80:b1:1f:1b:60:ae:c1:ae:fa:3e:22:
                    ed:7e:a1:f0:f4:ee:3d:19:2d:46:17:63:d9:5f:0f:
                    2a:85:8e:0c:22:a1:9f:f0:f2:6d:a7:c1:b4:92:15:
                    ea:6b:68:f2:12:e4:bb:4d:e4:8a:30:93:80:95:fa:
                    0e:3e:1b:4d:ff:de:34:0a:5e:a8:e0:84:5e:e7:81:
                    1f:d3:77:34:c0:ec:18:2d:9f:0f:84:3b:a9:b3:a5:
                    d0:12:de:8e:e2:70:81:89:7e:b7:7a:b9:49:e7:03:
                    cf:41:d4:1d:de:fd:57:fb:08:54:23:db:06:ab:4b:
                    06:57:dc:ae:6c:2d:30:8f:97:90:3e:72:70:ba:b9:
                    86:5d:fb:60:fc:5a:9f:cd:9c:80:e0:2b:7f:96:e1:
                    cd:6b:55:4c:72:56:a1:fd:28:03:be:e2:17:c5:ba:
                    25:a7:26:0c:60:81:c4:4a:52:a8:55:8a:3e:92:a8:
                    94:7d:41:8d:47:95:52:78:d5:29:f1:56:f1:5f:6a:
                    a5:82:7c:11:f9:1c:f9:6b:ed:49:54:70:d5:57:97:
                    95:29:6d:e8:8f:62:83:55:d2:1f:41:3f:a1:3e:7a:
                    91:32:e2:68:95:34:d5:c1:dc:f2:72:21:63:f2:c3:
                    d6:b1:ba:fb:0d:be:03:48:be:b4:8a:3e:da:41:93:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:66:62:DC:36:E6:CC:76:A1:56:83:3B:37:5C:10:FE:55:74:7C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d853747c-fb99-3324-ba14-887cfb2725c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:f4:a5:c0:99:5f:99:ca:ea:88:8c:87:74:06:6c:8e:16:
         9b:a2:d8:d7:b9:06:49:8d:19:a8:1d:3e:7a:06:1c:6f:24:61:
         38:e0:23:a9:c6:42:99:bd:85:d4:d8:37:82:3b:92:76:d2:61:
         a5:59:6f:8b:da:ca:a0:11:82:1c:36:15:6f:ff:c5:3b:6d:1a:
         7b:e2:d9:94:c5:49:d3:67:d4:df:0f:dc:70:e8:da:7d:3d:ed:
         4b:44:01:60:50:f0:c0:da:f6:61:ed:ad:b0:77:72:b8:52:29:
         86:1b:68:ed:52:21:df:19:3b:4a:6f:d1:07:af:9a:18:ed:c4:
         f7:37:57:75:e6:38:9d:b6:14:9d:71:0e:3a:22:38:ab:95:52:
         51:0f:37:fd:f3:76:df:6c:f9:21:e6:db:d6:df:88:ef:89:4b:
         ea:4c:df:90:3c:41:dd:16:71:b4:16:49:bc:53:45:1f:8f:9d:
         81:24:b9:a0:54:92:3a:24:ca:75:15:85:26:e8:47:53:af:23:
         97:41:0d:09:26:4b:fe:83:ec:d9:9c:f6:7e:23:a5:81:c8:c0:
         c4:ec:10:ed:d2:58:00:83:9c:ea:9a:9f:ba:30:5c:e3:15:46:
         15:c1:5a:23:38:10:00:54:32:19:d8:df:5d:5d:8f:20:05:ba:
         a2:29:b2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:23 2024 by rpki-client on console-fra.rpki-client.org