Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa
File:                     4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa (raw, json)
Hash identifier:          otQeYhCjPbXfJ3s4kb7zUAcn6gB/KYxlcYQYWRmQIUc=
Subject key identifier:   98:D5:5A:05:B3:1D:98:F0:08:7E:F9:48:42:B4:CC:03:C6:0D:8E:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA02261AB0FF0409CF5440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.208.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:02:26:1a:b0:ff:04:09:cf:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=2c504aa0-6bf0-47ec-a206-b1b58a2ca600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:75:95:c9:9c:50:99:d8:e7:8f:70:6a:2c:
                    09:68:45:bb:d3:27:ac:8c:5b:e1:28:ef:b6:85:f3:
                    88:20:15:09:98:2d:ba:91:d2:d5:fa:96:c9:d3:e5:
                    0e:c8:7a:17:7d:cd:81:3a:a5:47:bc:5e:d2:ff:8a:
                    88:71:b3:06:d6:98:6e:64:65:52:2a:26:28:71:14:
                    32:2f:28:47:7e:81:41:e7:7c:35:72:0a:c1:65:97:
                    77:dc:89:fd:0a:c9:5c:31:32:16:16:cf:f4:ee:a0:
                    6e:07:fe:17:80:eb:b4:40:2f:9c:bd:4b:e5:e0:89:
                    b0:ab:60:21:b5:c0:e3:5d:f1:22:7b:1f:dc:8d:df:
                    8a:aa:c3:b9:28:06:5f:97:49:9f:90:e8:71:b7:3d:
                    0e:dc:93:13:2c:84:b6:6b:5a:be:f0:22:cb:1e:a8:
                    2c:97:bb:26:5f:8d:35:e6:04:81:67:65:5f:a0:e2:
                    0f:96:d2:04:1a:1a:26:05:43:5e:4a:43:12:63:a8:
                    7f:60:02:b0:12:33:38:94:5d:aa:d2:66:6e:54:60:
                    01:51:9b:9a:63:e4:dd:d6:ba:29:85:29:b6:49:87:
                    ad:e6:12:65:43:7e:0d:16:b9:fe:af:02:7b:54:7f:
                    33:4e:66:75:05:d4:d1:c5:db:65:6f:0c:51:d1:ad:
                    d3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:5A:05:B3:1D:98:F0:08:7E:F9:48:42:B4:CC:03:C6:0D:8E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.208.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:ff:3b:85:b5:5b:70:4d:f4:a5:9d:c1:26:ac:69:e7:dc:
         2a:a6:95:2b:dc:14:de:61:76:c5:ea:ef:91:4d:b7:44:28:c3:
         dc:b6:6f:8d:ca:77:ee:df:a1:c7:c1:95:21:96:b7:a0:c6:fb:
         ee:15:e6:0e:4c:85:0a:7b:c4:aa:b4:c0:13:e8:81:d9:53:b5:
         06:7e:ae:73:f6:d5:fd:67:b2:01:d2:25:3b:d0:fe:b2:c2:10:
         5c:8b:3b:60:af:c9:b6:cd:de:dd:58:48:fa:62:87:e8:c5:eb:
         3f:1e:b4:eb:e4:fb:98:cf:24:24:d8:fc:33:fb:48:a3:1e:de:
         db:34:de:df:db:98:dc:fe:6f:05:d7:8b:44:53:41:3e:31:6e:
         3e:2f:99:7b:e7:32:74:05:1d:da:6e:2a:86:44:85:b2:98:62:
         80:cb:d0:65:b2:3e:74:1e:2a:6c:83:82:7a:f9:b6:ba:33:8c:
         f6:9c:0c:1f:47:1a:7e:93:92:18:b2:9f:ff:81:6b:17:26:16:
         ea:c7:3c:56:fb:0d:29:b1:9a:e8:69:f0:04:cb:6f:31:2f:db:
         2f:f5:7b:ea:97:e0:07:f8:a6:1e:e7:37:95:e9:bc:c6:fc:8d:
         fc:d9:40:f4:bf:cd:42:49:a1:d5:3b:6c:e8:d1:d4:62:16:f0:
         83:12:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:29 2024 by rpki-client on console-fra.rpki-client.org