Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f0bcc7a-b79a-30ab-a77e-97cf1c007404.roa
File:                     2f0bcc7a-b79a-30ab-a77e-97cf1c007404.roa (raw, json)
Hash identifier:          Ez0XueEDwCcA53OFPYr/2Pj4z1H2m2WMyiWS3Sxl70o=
Subject key identifier:   70:EA:85:B5:5B:90:3B:02:F9:B4:B4:05:B4:5D:49:61:88:B4:01:D7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847012046EAC23CCC1D2783C980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f0bcc7a-b79a-30ab-a77e-97cf1c007404.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.206.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:46:ea:c2:3c:cc:1d:27:83:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=b70aa92c-d9b9-4daa-a4a9-e8877967587f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:c4:6c:91:26:4a:f3:11:92:3f:54:c0:5d:
                    27:e0:12:1b:92:62:b0:b2:90:b5:97:1a:12:b0:71:
                    86:6a:ef:19:f8:b3:6c:37:5f:56:95:7a:59:d8:01:
                    4b:ff:f8:8b:fd:c2:30:83:07:9a:da:8f:1d:fb:84:
                    cc:ac:5e:3f:b9:48:61:b0:e0:d6:66:41:9c:ec:f5:
                    48:b7:38:70:19:d9:a7:cd:5a:28:9f:57:38:61:9c:
                    47:4a:ff:01:3c:4e:70:21:60:2c:9c:bb:cd:64:d2:
                    cf:e8:87:12:ff:6d:dd:dd:ae:dd:ef:f8:00:09:a6:
                    f9:bc:a0:5f:13:48:4e:1c:ea:e5:33:47:d0:2c:25:
                    9e:63:6f:5c:85:3b:8c:65:26:d7:1d:fa:c0:43:b0:
                    7e:15:92:d4:7f:a8:51:51:f4:7d:e9:08:a3:85:60:
                    3d:76:f6:3a:44:8c:12:46:45:3e:f3:c7:9d:a7:94:
                    f5:88:fb:d7:6f:bf:93:e4:5b:2c:4d:83:fa:70:69:
                    20:35:cb:ad:04:74:80:68:fa:df:81:0b:f3:29:81:
                    29:73:10:ae:91:26:e0:c8:c9:79:f9:90:66:e1:10:
                    33:ae:55:3c:f4:b7:8c:d0:7d:8c:50:e6:9f:66:9b:
                    15:35:fd:ef:e7:b8:7c:a6:f8:58:23:6a:da:07:d7:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EA:85:B5:5B:90:3B:02:F9:B4:B4:05:B4:5D:49:61:88:B4:01:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f0bcc7a-b79a-30ab-a77e-97cf1c007404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.206.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:33:63:45:bb:91:86:44:a8:c6:0c:5e:8c:23:ea:80:27:
         3f:42:2e:74:83:1a:50:38:7e:84:06:6e:e4:7a:c3:d5:01:eb:
         08:52:b8:4a:f3:d0:16:84:08:9a:74:37:60:67:2d:e0:67:27:
         6c:90:c6:59:7e:71:53:9d:bb:ce:0e:7a:b7:20:e9:5a:65:4e:
         b5:cf:f9:82:cc:f5:36:3d:a4:8e:c5:ba:b5:7b:13:e1:38:fe:
         00:53:98:25:b6:b5:13:f9:1f:f7:7b:72:55:ab:9d:6d:99:23:
         f1:3c:b7:73:de:2f:3e:bb:f6:e3:18:dd:a9:b7:cc:0f:78:b0:
         bd:3e:ab:89:e2:72:2b:2a:29:5b:65:98:6a:34:0d:be:b7:80:
         10:94:20:0d:d6:72:7e:59:70:97:83:90:b9:a3:5c:fd:f7:a1:
         43:c1:61:60:be:36:a9:65:fc:4a:e2:a5:17:55:6e:b5:df:f8:
         e2:e8:bc:f3:4c:d1:e8:4b:b1:c8:bc:f7:a2:1a:ac:98:8a:b6:
         76:ab:77:9a:c3:1c:23:26:33:4f:1a:ea:3c:0a:82:10:14:62:
         40:e8:25:d4:bc:27:14:66:c8:70:53:b5:87:3f:a0:67:77:73:
         0d:1d:f2:8e:0c:fa:f6:91:ee:e0:3e:46:c6:5c:dc:85:dc:00:
         d2:18:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:36 2024 by rpki-client on console-fra.rpki-client.org