Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa
File:                     60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa (raw, json)
Hash identifier:          YIo74tAulAim0e4++r+G1C3wkTuEju3c5sKdwsAqw40=
Subject key identifier:   D3:63:20:9E:15:92:41:77:8C:60:01:ED:03:F3:DD:22:3A:B9:63:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858470120412839022A9FB503B289
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.199.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:41:28:39:02:2a:9f:b5:03:b2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=5c2c1f7e-ff0e-4abc-8cbf-97207b87f2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:96:6a:dd:70:d5:58:f5:21:11:6f:75:0e:
                    00:02:b3:0f:6f:45:5e:2d:4c:94:cb:bd:2b:cf:52:
                    a8:00:c8:cb:44:40:e6:ed:73:2a:c6:2a:69:71:0d:
                    87:96:39:06:ee:35:55:57:29:bc:ba:45:04:9d:bd:
                    df:d2:f6:8d:34:96:65:55:0e:c3:2d:e8:5f:ce:40:
                    82:72:eb:77:c8:96:2b:41:3a:c3:fc:2d:93:d5:b5:
                    f7:cd:fb:5a:0b:64:6f:5b:b4:10:71:e9:d1:44:58:
                    f8:f9:d9:ac:08:9f:49:dd:db:be:0f:c5:2c:9f:25:
                    40:d4:5b:bc:37:d9:6c:27:fb:20:1c:73:13:ca:a5:
                    4c:7d:90:85:80:2b:74:76:79:ab:a9:7d:81:0e:cd:
                    b5:d4:bb:06:e7:f4:f6:c7:d3:c0:9e:3f:32:e0:df:
                    cf:21:56:23:65:62:e6:be:a0:8e:07:46:7b:2c:0e:
                    8d:94:07:25:d9:b6:00:55:83:c1:dc:73:c2:f3:9a:
                    ae:e7:59:cd:17:3c:49:b0:c3:ec:1e:1a:59:12:7f:
                    e7:31:6e:08:0b:04:65:48:db:61:e4:69:66:cf:10:
                    27:29:9b:c0:9e:98:4c:43:81:31:a9:e9:08:2f:e4:
                    69:33:49:91:90:8f:44:ac:b5:64:89:ae:3c:10:ab:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:20:9E:15:92:41:77:8C:60:01:ED:03:F3:DD:22:3A:B9:63:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.199.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:73:12:7b:cd:32:e3:5d:c0:92:da:e3:f2:1b:85:9e:d9:d5:
         ea:91:a9:f9:59:2f:bb:d2:0b:d2:0d:7f:87:b1:2b:f3:6a:1d:
         4c:15:80:3e:6a:92:1f:5e:66:e0:c3:02:f2:04:5f:05:0b:a4:
         79:d0:99:4d:59:a4:b7:db:f8:53:ff:8e:04:ec:15:0b:fe:eb:
         de:46:0d:eb:33:05:33:78:d9:6b:cb:28:0c:69:53:aa:4d:86:
         3d:89:54:be:b0:27:46:f7:4b:16:1b:a7:18:d5:ff:50:b1:aa:
         d0:d8:40:f3:fd:0f:f7:59:76:fe:93:66:4b:8b:25:18:5c:5c:
         46:6d:30:6a:66:ef:c8:ad:83:3d:e7:8d:ad:54:c7:68:e0:b9:
         e7:74:2b:e4:c6:36:95:08:1a:9a:24:ae:95:15:a2:5f:67:0c:
         54:58:ad:71:37:79:23:b7:e1:fa:83:3e:e2:a8:93:be:e1:e0:
         26:85:93:a4:76:70:ca:56:55:68:81:30:58:7a:48:6d:46:f2:
         ba:22:59:9b:e8:a8:fb:ca:02:ba:55:3e:b2:95:60:b2:9a:69:
         ae:9b:90:99:4e:fa:f1:65:19:62:d0:de:d3:c8:71:2e:cc:32:
         fa:ed:8d:58:4e:da:7d:a4:4b:bb:20:95:27:94:c8:7a:bd:9b:
         9e:6f:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:31 2024 by rpki-client on console-ams.rpki-client.org