Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57ac783d-1359-3085-9377-2647f1a70c24.roa
File:                     57ac783d-1359-3085-9377-2647f1a70c24.roa (raw, json)
Hash identifier:          S8N79dqkwMWnWNcU8bo4xpx2wuzuON5pH4uzY84/mFM=
Subject key identifier:   1A:6E:D2:8E:0E:65:67:D3:C0:A9:4E:F0:B0:8A:5B:49:C4:F9:22:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA12E9E8331D613E00E6A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57ac783d-1359-3085-9377-2647f1a70c24.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.212.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:12:e9:e8:33:1d:61:3e:00:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=64ced1e2-f5a4-46fd-9668-cb6edef6e506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:3b:6f:b7:e4:11:af:fb:c6:0e:74:ce:8f:
                    26:dc:e4:96:51:a7:9a:38:5e:92:28:2b:d4:44:36:
                    63:19:02:24:1e:1e:f2:8c:0f:00:28:bc:ef:14:1b:
                    5c:99:21:d2:64:56:5c:cf:04:22:fa:87:e5:f3:b0:
                    1e:27:58:d6:2d:28:bc:f8:ce:fd:6a:73:d1:6a:0b:
                    78:aa:34:1c:df:b9:65:ea:ff:53:37:f4:4b:f2:69:
                    ee:45:a7:08:7b:97:9b:a5:bd:3c:10:63:ad:88:0b:
                    1a:d6:4b:7c:5d:3a:59:89:72:a9:48:e9:9c:16:29:
                    64:cd:89:b7:19:3c:05:4b:dc:ba:c8:2b:22:eb:41:
                    59:38:51:35:93:54:9c:60:d8:fc:58:4d:fb:49:fc:
                    a3:9f:61:1f:3c:d0:01:af:f2:59:13:f7:3d:e5:50:
                    2a:dd:c3:55:01:fb:d9:3b:28:29:cb:65:21:1e:99:
                    db:2b:f3:77:57:82:f1:24:80:e9:b5:92:b9:6c:de:
                    54:5a:56:13:fd:eb:22:7e:c3:16:8e:a2:91:16:16:
                    90:14:ee:d2:b7:4c:25:c9:98:cd:21:10:46:45:4b:
                    71:be:f8:f3:70:20:10:6b:dc:bd:cc:ea:e0:bd:7f:
                    3f:57:1c:84:a8:93:eb:cf:4f:24:5f:ab:99:32:94:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6E:D2:8E:0E:65:67:D3:C0:A9:4E:F0:B0:8A:5B:49:C4:F9:22:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57ac783d-1359-3085-9377-2647f1a70c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:51:b6:3d:8b:9f:a5:bd:20:7c:49:f9:ee:5b:d9:45:e3:f9:
         4b:ef:f2:af:57:12:33:fc:bd:88:97:b4:16:d3:21:20:be:e1:
         dc:05:0f:0d:3f:c3:d5:d7:44:71:0f:2e:8f:58:6c:15:7f:8f:
         92:6c:05:76:0c:54:de:55:66:37:7b:93:37:22:f4:27:33:21:
         b8:56:fc:f2:ec:02:89:46:fb:15:d2:bb:e0:88:62:a1:fb:fe:
         e7:12:eb:8e:b6:e7:24:14:f2:fa:6a:d7:43:df:6f:3f:e7:7b:
         c2:37:5a:0b:af:46:65:be:ea:ee:2c:f6:c9:84:85:d3:d7:3c:
         0a:93:98:ad:21:43:9f:01:a6:9a:89:c0:d1:ad:ef:f6:5e:6b:
         d7:cb:64:72:a0:52:7b:c8:58:5b:4b:a6:98:e7:43:32:ef:37:
         2f:10:71:57:29:a6:07:0b:d2:0a:43:33:30:b8:e5:46:f7:74:
         f9:8b:bc:ee:4e:ab:79:6a:84:4c:d0:86:36:93:4d:32:16:28:
         83:00:c3:d0:2d:11:ab:af:82:af:52:91:8a:2d:df:0d:1a:28:
         f0:76:80:e0:33:3e:23:0f:a6:82:9e:35:4e:d1:8c:78:ed:d4:
         a6:56:eb:02:73:3e:c0:0e:fb:34:dc:1d:65:4c:15:5c:d9:59:
         99:fc:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:31 2024 by rpki-client on console-fra.rpki-client.org