Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa
File:                     f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa (raw, json)
Hash identifier:          xdPVLYUfL2nYUh7Gmnat9xTygu/fJp3q0rfRWgubT7s=
Subject key identifier:   8D:61:B5:00:F3:B6:1C:2A:A0:D8:95:B2:BA:00:A4:96:BA:05:37:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D641B62A6B2B2B605FF740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        141.207.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:41:b6:2a:6b:2b:2b:60:5f:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=a6aa6e0d-8595-432a-9d43-e2c2b3f6a364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:9f:66:df:a4:4f:1c:10:14:52:c2:96:a7:
                    72:46:29:74:17:de:b9:20:75:9f:c8:21:aa:67:95:
                    8a:fc:9f:c8:4e:05:83:10:50:74:3f:91:30:cf:26:
                    b5:15:69:34:9d:e8:bc:6e:5a:ca:88:97:3f:17:be:
                    08:a0:c4:3c:4f:e2:63:87:b0:b3:57:df:e9:a8:de:
                    33:5a:83:c8:37:0e:88:62:ed:f0:f7:22:ae:e2:76:
                    41:8c:ba:55:9d:6b:48:1d:02:0b:ac:77:b4:14:e7:
                    46:64:11:9e:32:a6:07:40:3a:21:76:ea:3b:7e:a5:
                    33:f0:7d:6e:bf:3e:1d:ea:21:03:79:02:88:5e:e0:
                    e6:8d:40:56:e5:7c:70:b9:11:6e:d1:e6:01:14:54:
                    cf:df:89:ff:cc:e2:24:be:36:c5:86:73:de:7a:30:
                    9a:72:f3:fc:a4:92:58:05:6d:3f:e8:df:a1:6d:b1:
                    39:a7:54:8d:c1:a6:cf:49:8b:e9:86:a1:8c:c0:06:
                    d0:ca:cf:74:cf:58:f4:6f:e5:b1:80:6e:7f:9d:25:
                    10:92:a6:0d:0b:94:00:db:66:8f:3f:47:7b:6c:23:
                    da:41:95:03:6e:54:1d:c5:ce:56:85:44:c9:21:40:
                    a2:9d:b3:a4:56:3b:22:d3:ce:7f:24:d6:2c:b7:08:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:61:B5:00:F3:B6:1C:2A:A0:D8:95:B2:BA:00:A4:96:BA:05:37:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:75:eb:01:fc:15:05:93:b0:7a:f8:eb:89:32:d9:dc:63:
         5a:fa:d9:0f:18:e4:cb:01:a9:5e:a1:a5:27:99:8e:c0:61:c4:
         05:d8:2e:81:40:f7:59:8b:53:93:0b:d0:17:73:cc:8b:40:2f:
         fd:62:51:f6:40:bc:3c:ac:d9:b7:1f:81:eb:a6:0e:9e:7e:fd:
         d6:e0:c0:3d:ee:8f:72:27:c4:8e:b6:22:46:56:09:f1:f6:38:
         8e:86:34:90:75:ce:00:4a:41:73:65:6b:65:8b:f3:05:40:d9:
         81:31:b4:03:ef:a2:54:d2:da:93:3b:1e:d4:43:4b:b8:ba:6f:
         e9:de:5f:6f:d7:4d:a9:da:7a:cd:e4:8e:e5:3b:06:51:43:de:
         a0:0a:0d:2a:e8:bb:e2:1d:23:ba:1f:d8:7a:2d:51:17:a3:d3:
         9c:7c:2d:8d:88:80:3b:e1:5a:00:e9:fc:a6:e7:47:9c:b7:08:
         46:a8:ee:81:4d:86:b8:13:da:ee:17:a1:c3:66:75:ea:51:5f:
         1a:26:ac:d6:d2:02:d8:6a:5f:cd:42:81:c2:8d:3b:ed:f9:e1:
         de:59:89:f4:8e:88:7a:0f:c2:a6:a4:20:75:0f:a0:f1:e7:fb:
         0c:85:2d:2e:ce:bd:a2:7f:2e:b9:11:e0:28:c1:f6:cf:14:48:
         c4:93:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:03 2024 by rpki-client on console-fra.rpki-client.org