Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa
File:                     3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa (raw, json)
Hash identifier:          T/66APLAn3EcYUQTPdyFcgYIm+bhbI2AOCeOZyoK71M=
Subject key identifier:   5B:80:2F:A0:52:E2:6B:F5:5D:29:27:3C:8D:D1:1D:2F:15:7B:80:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0FCBEFD21EB5CF3372C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.194.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:0f:cb:ef:d2:1e:b5:cf:33:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=a47bfaa4-c78f-4ad4-aae7-4abeac6f47de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:c7:18:f1:0c:d3:b7:b1:b2:01:ca:9b:7f:
                    d7:91:5e:bd:22:08:61:a6:38:1b:cb:a6:83:f3:04:
                    f0:ab:e8:33:87:1b:ae:84:66:7d:1c:75:7b:2c:bf:
                    40:f9:63:a4:95:0a:b6:e8:01:69:7e:9d:6b:66:76:
                    ba:e6:0a:21:18:0e:2f:b0:44:cd:9e:69:77:4e:fa:
                    e3:e4:d7:bd:95:01:17:e6:e5:4d:f1:d9:03:5f:06:
                    d9:b4:f5:92:fc:3e:25:78:e0:07:d5:6f:66:b6:74:
                    19:74:65:a0:64:0d:c6:3c:a2:dd:c9:bf:3b:ec:c6:
                    41:a8:03:ad:0e:52:76:e6:f4:70:76:dc:86:88:ee:
                    33:a8:50:4a:34:58:8b:7d:d4:ef:c3:f4:e1:79:f1:
                    a5:53:36:02:b8:72:5b:34:c2:31:d6:d3:89:40:0c:
                    0f:92:a6:76:38:3b:1a:3e:4f:d0:1b:6d:be:64:42:
                    7e:92:e0:44:8a:58:55:db:82:73:95:5a:fe:29:d3:
                    b1:e3:3d:d8:fd:07:7a:39:2f:26:df:e7:45:43:e0:
                    5a:80:a1:2e:60:c6:56:89:00:71:f9:9f:e5:f1:91:
                    e4:cd:37:7e:6e:69:39:0e:86:ac:ec:0d:7a:13:46:
                    29:da:26:ec:f2:e9:30:92:60:bf:ef:f7:f8:6e:e5:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:80:2F:A0:52:E2:6B:F5:5D:29:27:3C:8D:D1:1D:2F:15:7B:80:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.194.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:1a:50:14:dc:e6:1a:77:7c:bb:5e:d8:34:4b:e7:96:42:
         96:30:24:da:00:c5:e1:8e:9f:01:1c:ab:06:72:a2:5d:4c:98:
         c0:9b:2e:ef:5e:0e:3c:d0:c2:52:57:d3:0b:3d:0b:dc:cf:a4:
         98:d9:88:2f:24:45:6d:46:5f:eb:9f:cd:cb:2b:4b:a8:2e:7c:
         8c:bc:c2:3c:cc:1a:8e:c4:15:0d:83:4b:fb:0a:c9:52:e0:3e:
         fd:46:e0:c1:f3:d6:8b:e4:8d:f5:63:c8:f4:04:47:6a:b8:51:
         e2:36:c3:5e:06:5c:a3:3e:a9:c3:d0:69:06:aa:fb:44:82:f6:
         be:a2:13:94:e7:66:2a:38:88:b8:46:22:e3:1a:15:ab:84:6b:
         f2:0d:05:77:15:bc:25:9d:58:d0:4d:60:48:59:a6:63:ba:33:
         83:a5:20:1b:7c:c6:21:aa:4c:ff:24:6e:89:14:36:c8:4f:b5:
         99:cc:87:22:46:1f:bc:ee:6d:04:7c:72:c9:22:32:fc:13:0e:
         b9:20:90:b6:59:d9:ea:92:a8:d0:c7:2e:42:8d:7c:b0:a5:1d:
         78:60:ba:05:7d:1e:36:52:1c:ab:16:a4:79:23:8f:70:e5:f2:
         9b:c8:29:a3:d6:24:45:4b:8b:62:f6:7b:c7:5a:06:46:f0:ca:
         08:3e:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:25 2024 by rpki-client on console-fra.rpki-client.org