Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa
File:                     e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa (raw, json)
Hash identifier:          933614it5eIxj93l8pwW7ThdE2RC5PGnJhij1+Bg4E8=
Subject key identifier:   18:79:3E:C3:07:14:8F:F9:1D:47:53:D9:FC:17:6C:8D:28:32:40:A0
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285847E1FA1A3119D5239EDA4D4400
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     400859
IP address blocks:        67.214.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:1a:31:19:d5:23:9e:da:4d:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=422a9837-2421-4585-b606-a64c33b02fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:c8:af:20:8b:f7:d8:15:69:5d:dd:7e:bd:
                    df:99:82:4a:c3:2f:ad:05:3b:1e:70:c3:6a:e9:57:
                    66:ce:40:d9:76:24:d4:82:94:14:55:cf:98:56:6e:
                    ba:88:67:84:48:7c:ce:e0:8c:9b:bd:be:79:07:9e:
                    66:61:b1:5b:eb:8e:c6:c3:c8:1b:23:c9:ca:92:1c:
                    12:25:92:18:87:26:06:39:a0:e5:c3:0b:da:74:3a:
                    fe:20:d8:d6:d3:fe:f3:10:bc:a2:fd:3b:4f:ee:bd:
                    9a:64:87:24:e9:b1:e3:96:eb:6f:81:8f:d6:eb:c9:
                    5e:8a:ab:09:c2:cf:02:45:72:3e:e7:3a:ae:40:12:
                    a4:92:af:f2:c2:56:18:8e:a9:cb:96:c0:51:5b:fa:
                    14:06:b6:ad:cb:49:7b:3a:0a:e7:75:e6:25:7d:70:
                    9a:b2:75:89:e1:dc:d7:bb:43:4b:45:e7:85:9a:63:
                    9a:da:8d:87:04:51:ca:b4:77:c0:96:81:c8:4e:c5:
                    87:09:0e:85:6d:cb:1f:80:ab:58:62:52:5b:94:b2:
                    61:03:be:97:6b:f6:ff:c1:a8:1c:be:df:d9:24:4d:
                    3e:d4:09:92:ec:6d:65:bc:8d:f8:6d:50:ed:87:3c:
                    3c:d3:a6:81:88:83:23:02:76:c5:ab:06:e2:55:66:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:3E:C3:07:14:8F:F9:1D:47:53:D9:FC:17:6C:8D:28:32:40:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:19:ca:06:4d:a3:61:d0:c6:93:f7:31:bf:1c:c9:86:69:
         32:a5:01:ae:41:fd:2d:19:50:ff:bf:3b:73:bb:e7:8c:c0:73:
         f1:e6:8f:c6:57:04:92:76:e3:4e:a8:47:8c:00:cd:bc:ab:14:
         69:f1:da:5a:a8:f0:af:e6:f9:8b:df:f0:c1:30:de:c5:82:d9:
         86:69:74:34:1e:ed:6a:5c:aa:5a:0a:ab:a8:d6:7f:a3:60:39:
         a8:d7:0b:c5:47:de:21:5c:ba:fe:99:c7:1b:d7:7f:f4:3c:64:
         3f:e4:00:be:ac:4e:70:3c:10:8d:ad:05:78:51:ec:32:9d:43:
         4f:33:4b:fd:18:95:19:4a:fa:e6:d9:3c:58:03:b0:06:d2:88:
         e1:a3:55:0d:da:e0:34:ed:e2:88:02:fa:b7:a4:fa:c0:12:dc:
         4a:27:57:e7:40:e2:ae:25:de:8b:83:90:24:30:d9:c8:ae:3f:
         83:a6:db:37:b7:e9:5b:ee:72:ba:dc:49:ae:7f:da:c0:c6:ca:
         8f:50:41:48:2c:c5:0e:19:e1:9e:60:ae:0e:a6:16:9d:21:f9:
         27:25:5d:c8:a9:ea:81:08:3d:20:bd:cd:b8:c2:28:27:fc:ed:
         d8:fb:73:1d:40:81:85:b6:58:35:b6:f8:47:15:16:63:63:69:
         31:93:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:50 2024 by rpki-client on console-ams.rpki-client.org