Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/604df5f7-5724-315e-b330-2e9868265adb.roa
File:                     604df5f7-5724-315e-b330-2e9868265adb.roa (raw, json)
Hash identifier:          Nn/wwxBEwhu5roxhcPJ3RYufllnvAcISLGq7mkCzx1k=
Subject key identifier:   E3:0E:E0:C1:14:90:16:10:7A:C2:A0:CD:C8:7B:F9:1D:76:16:66:FB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584701204983EFE73680A5CA4E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/604df5f7-5724-315e-b330-2e9868265adb.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.211.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:49:83:ef:e7:36:80:a5:ca:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=bd088fd5-5a4e-463d-813a-4d5ed53e145b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:83:5f:b7:df:79:90:7b:04:ce:f9:d7:f4:
                    c1:ee:73:a5:92:be:09:02:2b:22:2a:34:9c:18:4c:
                    8e:d0:1d:5c:68:d8:92:b0:31:d9:ac:45:3f:c4:fe:
                    6b:b5:28:82:4b:d7:7b:a1:ab:77:cb:8d:22:2b:aa:
                    9c:b6:6e:ff:c4:b2:75:4c:89:e5:6b:38:77:8f:fa:
                    2c:58:a5:56:47:24:ea:0a:94:7d:de:e9:be:19:39:
                    d6:71:61:18:60:d0:e4:d6:89:c8:0b:24:e1:b7:31:
                    1e:97:1c:00:50:bc:ee:34:19:09:7a:73:cd:f3:6a:
                    a5:31:6e:a5:16:11:f5:d1:86:9d:0a:c6:3a:84:18:
                    a0:0e:5f:e2:b2:66:c9:43:70:a6:63:49:48:46:0d:
                    dc:d6:52:6b:6e:c5:02:b2:62:23:e1:29:fd:05:9c:
                    ab:34:9a:f8:3a:00:be:60:ac:82:02:f4:12:72:9c:
                    f6:7d:a2:90:d9:8d:e6:ae:da:f2:c6:24:e6:0c:84:
                    15:7c:69:5f:5f:34:e0:d4:9c:af:06:28:97:47:b8:
                    34:4b:e2:ad:1f:81:3c:71:9f:2c:e3:f6:52:f8:27:
                    41:8d:e7:6d:74:dc:c5:8b:93:98:d0:80:0a:b2:48:
                    26:88:cb:32:11:b9:bc:9e:cd:88:dc:39:4d:f5:64:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0E:E0:C1:14:90:16:10:7A:C2:A0:CD:C8:7B:F9:1D:76:16:66:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/604df5f7-5724-315e-b330-2e9868265adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.211.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:26:06:40:20:93:63:be:dd:61:04:b2:17:fa:24:73:88:04:
         4b:45:99:f6:61:a5:35:36:8d:23:79:cc:cf:1e:d6:c0:a6:28:
         d6:47:56:5a:3c:08:80:96:e5:d6:43:d0:be:00:5a:83:4d:41:
         be:61:86:42:48:df:b1:59:40:2f:9b:28:55:df:b1:67:9a:da:
         57:3e:81:e3:11:a2:1e:e3:b7:54:37:bc:58:eb:a4:9d:71:bf:
         d9:19:b1:8c:e8:14:39:c0:0d:d5:17:89:52:89:b8:35:5c:24:
         fb:fb:32:14:27:4a:5b:d5:16:57:e5:62:cb:f3:db:45:93:39:
         1b:50:15:0f:a2:25:c5:02:6e:3c:71:59:e2:76:7a:97:19:85:
         98:ed:ab:3a:19:00:ee:f4:fc:e7:4e:8a:a9:46:90:f8:e2:a5:
         41:2d:6c:b0:ee:53:21:57:13:9a:bd:46:da:22:d4:13:65:f6:
         c8:f2:d0:d0:c1:f7:ee:08:5c:7b:57:61:9d:fe:57:20:62:52:
         4b:15:ca:40:ca:13:f3:ec:33:92:8e:9f:fc:90:e3:26:0e:7c:
         b6:cd:eb:6c:5c:80:a3:9e:43:15:28:7b:22:8a:6e:19:2f:2f:
         42:f8:a9:05:67:ad:e6:20:60:cd:63:55:fc:85:a7:08:cd:7b:
         b0:f5:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:30 2024 by rpki-client on console-ams.rpki-client.org