Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dad3a67d-2209-3be7-8bb5-183f987494b1.roa
File:                     dad3a67d-2209-3be7-8bb5-183f987494b1.roa (raw, json)
Hash identifier:          iBVlHp4ZrZ1X80rV8t3+xgA4GOa6N5g+aHQqVdsUJx0=
Subject key identifier:   0B:3D:69:48:0A:FC:AA:41:86:26:CD:E5:0A:99:05:D2:4C:F2:1A:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E177B815C454C3894040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dad3a67d-2209-3be7-8bb5-183f987494b1.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.235.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e1:77:b8:15:c4:54:c3:89:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=5f86c41f-55f0-49b5-af07-792b8ba31dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:aa:2f:05:66:79:67:98:17:01:63:ef:42:
                    8c:03:6c:f7:00:1a:a8:aa:40:63:62:f3:0a:ea:52:
                    8b:3c:cb:b4:4c:83:91:8b:38:b9:c5:2f:f0:fa:0f:
                    21:eb:aa:3a:76:b5:05:bc:c1:0f:ff:ad:32:38:99:
                    c2:0b:55:49:e2:fb:5d:c4:d7:75:c8:c3:b9:f6:1f:
                    ba:d8:53:75:19:e5:96:f2:6e:2e:2c:dd:32:12:43:
                    47:71:29:65:98:1d:39:92:c6:38:38:01:16:6e:b5:
                    7f:47:4c:90:f1:bb:5c:ad:c8:c2:fe:af:71:86:1e:
                    93:55:1c:2b:61:3b:88:1d:00:ca:9a:90:0c:73:f1:
                    a8:2d:65:d0:72:c6:26:ae:b2:e6:4c:1f:c8:33:7e:
                    94:39:5e:97:74:27:7f:13:29:42:48:9e:b9:7b:5e:
                    66:a7:8e:89:ed:c6:83:c4:e7:11:60:7b:70:af:35:
                    05:c1:6b:9a:97:01:eb:7b:1f:88:57:a4:d5:76:00:
                    1c:0f:ef:64:1b:90:13:ce:38:55:07:41:60:8d:7a:
                    d9:02:83:73:68:81:ff:ca:15:3f:0b:03:d7:05:64:
                    38:86:5d:43:3d:11:c3:65:fd:e8:ac:d6:d3:7c:20:
                    5d:b2:16:d9:16:b2:ac:a1:ec:00:c3:a4:f0:86:66:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3D:69:48:0A:FC:AA:41:86:26:CD:E5:0A:99:05:D2:4C:F2:1A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dad3a67d-2209-3be7-8bb5-183f987494b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:26:1a:41:f5:f1:d5:c2:df:e5:15:3c:e0:e1:9c:a0:ac:ff:
         03:3b:1a:c8:c8:6e:15:57:9c:d0:d8:f2:21:65:22:03:8a:1d:
         12:62:71:2c:a7:1a:fd:8e:2f:f0:ba:4d:1e:df:56:95:31:51:
         28:99:f2:4f:25:2d:08:da:d5:3b:e0:b7:9f:04:f9:f7:64:b6:
         9e:6a:e9:da:e3:9b:11:10:e1:4f:c1:3a:52:57:66:11:04:6d:
         ce:5a:37:83:7d:6a:9a:1f:7e:48:b7:9d:82:74:93:c5:b9:f0:
         b6:c4:f2:32:7d:3f:89:7e:3c:3e:b1:12:dc:6a:1d:1d:5e:5c:
         b5:71:76:4b:60:15:ba:17:1d:44:ce:20:4b:1e:98:e0:8a:7c:
         ba:1f:96:31:1f:07:8f:27:8e:a2:0c:58:b6:ae:eb:d2:32:95:
         3b:6e:09:9c:aa:ce:6a:b9:cd:11:9c:92:5b:5c:5b:27:26:ae:
         71:1d:62:a9:ff:fa:5c:28:f8:ee:77:06:32:60:0e:af:eb:67:
         b6:fa:5a:08:3e:b9:6d:a8:6c:2a:2f:a1:2f:95:b5:ba:58:45:
         1e:ca:51:04:da:39:52:00:e3:b2:5a:98:8e:b9:b0:34:72:63:
         a3:1a:3f:af:db:d2:18:da:d1:3e:ca:76:7c:60:17:94:a3:5d:
         05:4a:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:57 2024 by rpki-client on console-fra.rpki-client.org