Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa
File:                     ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa (raw, json)
Hash identifier:          4xtKRa5AnH386rZceNK2J2hecb6AchVf6hyxzKlXWOs=
Subject key identifier:   8D:83:2B:48:C4:8F:05:FC:13:E3:42:D4:C5:FC:19:26:50:9C:63:6A
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285847924BDFA620919E80A3181F80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     18345
IP address blocks:        173.239.194.0/24 maxlen: 24
                          173.239.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:df:a6:20:91:9e:80:a3:18:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=6fb04ca2-d5d4-4c5b-89f8-ea4c95545de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:9d:fe:24:c7:c8:da:58:dc:e8:1d:0c:4b:
                    e6:56:fe:67:92:fa:de:87:90:9d:65:ae:d9:62:05:
                    aa:18:8c:14:81:a1:5d:51:6c:2a:c3:3f:f7:d4:0a:
                    67:be:3e:3c:4b:07:ad:fa:73:5e:c4:37:0f:58:8e:
                    85:f0:63:fd:51:bd:10:ac:f1:06:b6:6f:77:43:66:
                    1f:a5:ba:9d:eb:9c:e2:18:86:80:eb:ce:48:b4:78:
                    2a:5b:fd:fa:c1:05:1a:c5:df:d2:ee:14:c0:c6:95:
                    8f:f8:b0:69:cb:8b:af:e9:73:9b:ae:0b:f9:14:99:
                    48:5b:32:91:76:c5:e1:9c:fd:1f:9d:4f:43:04:bd:
                    99:b0:fd:b5:32:de:89:5d:a0:d7:c2:b4:49:3f:45:
                    a8:6d:bb:56:f1:e2:ce:52:24:54:e1:d7:6a:62:83:
                    b8:04:d5:7c:01:5c:fd:af:6f:38:61:ee:32:6c:36:
                    b8:0c:25:08:3a:ff:10:cd:74:94:cf:9e:67:39:ea:
                    bf:d7:5f:0e:bb:0c:60:fc:a3:a9:95:1a:fe:01:15:
                    92:cd:dd:b2:1c:31:fc:e2:63:60:05:8c:ff:d2:ac:
                    2d:c3:ef:9f:68:a4:fb:e3:0e:a4:4f:62:b9:27:61:
                    98:03:90:9e:40:9b:b7:fc:6d:4e:90:47:a8:31:6a:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:83:2B:48:C4:8F:05:FC:13:E3:42:D4:C5:FC:19:26:50:9C:63:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.194.0/24
                  173.239.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:c7:82:53:95:6a:f0:65:b9:18:e8:af:34:1c:6f:88:d9:
         de:4a:93:81:34:36:12:fe:70:e4:e5:e0:b8:ba:fd:40:73:69:
         0e:21:18:f6:10:a6:9a:6c:6b:8b:df:cc:b7:96:09:2e:2f:83:
         bf:40:7f:fd:3f:db:23:2b:f1:b0:ca:1b:bd:e1:f5:42:f1:8f:
         e8:19:3d:c6:80:2a:e1:57:a3:bb:d3:c1:5e:a6:93:1f:66:a5:
         0a:c8:1c:8c:4f:65:b5:8f:5a:d3:6c:79:3e:49:64:77:73:72:
         60:fe:64:d9:45:75:85:96:54:a0:e5:b5:77:17:67:e0:cd:07:
         4b:3a:0c:66:97:19:86:2a:b8:d9:85:a9:8e:b9:3b:42:96:6e:
         04:3c:18:f4:f3:7e:f6:97:83:e3:3d:98:67:17:9b:ef:29:db:
         17:67:29:a2:ea:81:14:61:b6:bd:4c:34:12:29:4b:cf:7f:f4:
         09:e9:38:1b:e5:8f:ac:e8:2b:df:ba:87:d3:3a:89:3d:85:52:
         24:6b:11:b9:cd:55:f9:d9:d5:41:64:40:df:6c:7f:9d:e2:b7:
         f2:38:75:07:76:8a:e5:62:6b:9e:c1:80:d2:16:64:f9:61:8d:
         79:81:f5:51:b8:92:ba:34:ee:95:9f:34:8e:2b:eb:10:04:d4:
         36:f2:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:10:00 2024 by rpki-client on console-ams.rpki-client.org