Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53efc1c1-3b8a-30ea-82ef-b387bd5c37ef.roa
File:                     53efc1c1-3b8a-30ea-82ef-b387bd5c37ef.roa (raw, json)
Hash identifier:          xjGKZxgz7pUleLqdic/waa8eG3CQWlnc/8F5pzt8UYU=
Subject key identifier:   37:8A:1E:DB:10:7C:6E:E4:6D:AC:2D:E7:4E:2B:EC:DB:D7:DA:0D:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D6437EA5112280A5350980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53efc1c1-3b8a-30ea-82ef-b387bd5c37ef.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        199.224.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:43:7e:a5:11:22:80:a5:35:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=9c0a79b0-feed-4b44-a021-681cc9484710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:af:ce:64:d4:61:49:b0:0a:f8:c9:3b:4a:
                    8d:cb:57:e6:b9:f2:dc:1e:41:87:45:59:e6:fc:58:
                    26:96:03:6d:2b:30:5a:e9:fb:91:c4:1c:69:e2:9a:
                    a3:dc:a8:66:9f:7b:a6:a2:3e:bd:92:24:ef:86:6d:
                    c2:49:5c:4a:04:3e:ab:77:dd:f4:ed:6a:c7:eb:20:
                    13:e9:98:e5:c3:1c:3f:2a:39:83:32:e0:87:9c:8d:
                    0a:3c:12:27:39:94:7b:47:54:ee:9f:a7:d2:f2:87:
                    7c:57:94:00:e0:70:fe:46:3e:27:e2:43:98:fb:cb:
                    3e:d3:a6:59:e6:f6:d2:67:f2:83:37:02:21:11:11:
                    b3:19:2f:52:a3:62:b3:d2:7c:66:4b:5f:f2:3c:0d:
                    4c:89:49:51:f3:1d:93:f7:bf:a5:25:66:64:9e:6c:
                    6c:27:72:f1:37:ae:3a:ab:4e:c5:13:d6:8e:a8:5b:
                    4f:55:b2:98:49:46:c4:c6:0a:fd:9f:7b:f0:fc:7b:
                    d4:ae:29:14:f8:e9:df:81:42:88:c8:2e:52:17:2f:
                    01:0c:58:37:ec:d6:e6:85:b8:a0:79:50:18:63:85:
                    c6:27:27:31:7f:45:55:19:52:54:bd:80:b5:6a:d4:
                    9e:63:be:35:e5:66:1a:00:08:ac:32:6a:f0:1c:40:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8A:1E:DB:10:7C:6E:E4:6D:AC:2D:E7:4E:2B:EC:DB:D7:DA:0D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53efc1c1-3b8a-30ea-82ef-b387bd5c37ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.224.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a0:27:9a:be:83:ba:34:38:da:dd:1b:bd:dd:33:5c:7e:4b:
         ab:7c:fd:a8:05:45:59:41:12:88:28:ec:17:f0:8e:d5:87:36:
         6d:ff:6e:e1:d0:26:87:dc:90:aa:27:c8:ef:3f:3a:35:b6:7e:
         cd:c3:85:66:51:e2:07:ed:fb:d5:4c:53:5d:0e:ea:42:2c:ce:
         c6:57:5c:04:6c:bf:c0:2b:99:63:52:a3:13:c2:c5:4d:a7:7b:
         3a:38:bb:c9:d8:5b:cd:32:62:8c:ca:95:2a:9d:72:bb:30:a2:
         1f:96:97:d2:a1:4f:6a:41:a8:4b:06:31:6f:ad:82:49:87:70:
         b8:90:3d:2d:e8:b9:0a:99:f5:a0:87:11:1e:25:74:e6:25:f2:
         e9:ca:0e:57:5b:13:40:1b:80:de:4f:b9:ab:15:58:7f:36:23:
         0b:42:21:87:cc:8c:65:6b:7e:20:7b:02:77:2d:ac:cf:8b:a8:
         32:f3:4c:a6:ff:89:11:d8:de:10:c7:c5:dc:9f:21:e7:37:a2:
         ff:f4:65:58:01:d0:21:ae:2b:27:4c:0d:b8:bb:c5:de:3d:07:
         07:21:90:68:c2:e0:a7:97:91:37:1b:51:e4:80:3c:e5:0e:23:
         7f:d6:45:f6:e2:05:93:0a:85:1c:e7:e3:8d:a9:ff:0a:eb:62:
         ae:3a:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:27 2024 by rpki-client on console-ams.rpki-client.org