Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa
File:                     66ce0b4e-7237-3244-be3e-2799aece7280.roa (raw, json)
Hash identifier:          Be9kwxMY41RE29t4feEuo7uilA3/696PdE3Jmu8Poxc=
Subject key identifier:   D8:EE:4F:0A:90:D5:76:2D:E9:98:C2:1E:AF:60:B0:69:D0:A3:00:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1F9FEE19FAC1D54B1BC4FE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.202.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fe:e1:9f:ac:1d:54:b1:bc:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=350c35d6-4f58-4f8f-a8af-0611e1efa8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:2d:b8:7e:cf:a7:8f:6f:9e:39:52:ff:35:
                    39:74:c1:d0:5a:6f:d7:e8:1e:75:15:7d:0e:56:ab:
                    81:c4:69:68:ff:52:20:bf:00:64:77:7e:44:40:ab:
                    d3:39:27:ba:f7:a3:33:37:b2:fa:d0:ae:7e:0e:44:
                    5a:21:d5:3a:c8:e2:6e:a1:c1:c9:6b:e1:35:aa:2f:
                    09:e2:c0:27:b5:5e:34:78:cf:7c:80:f1:8d:f2:a9:
                    57:d3:f8:b0:6d:93:33:c6:5d:bc:d0:50:13:bd:cd:
                    2d:9c:48:e3:ae:61:b6:19:0f:2e:c6:68:bb:ac:5f:
                    5c:4d:a7:aa:d2:01:98:8a:61:41:50:c3:92:79:c2:
                    8f:10:d1:fa:a4:7c:fe:08:9f:25:9a:6d:28:8b:fd:
                    a6:99:5e:f5:8f:44:ce:93:15:95:15:e6:27:c7:56:
                    31:07:11:0a:d0:4e:1f:a8:22:d8:f6:ce:56:8e:d9:
                    91:ac:b5:bd:5c:aa:d8:4d:bd:61:9e:9c:e4:2d:e9:
                    30:f5:a5:f5:10:91:61:28:f7:95:68:4e:00:aa:aa:
                    c5:12:09:37:96:75:78:af:da:a0:0b:36:a5:05:85:
                    15:e9:69:0e:4d:68:a5:f3:50:ec:b6:3e:d6:90:fe:
                    bf:c3:12:17:a2:f6:86:d3:2e:20:f4:75:07:07:40:
                    92:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EE:4F:0A:90:D5:76:2D:E9:98:C2:1E:AF:60:B0:69:D0:A3:00:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.202.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:43:46:af:98:f3:46:d0:66:e2:46:b5:9f:05:ca:f1:d2:90:
         c8:24:2b:53:7a:0a:2a:fb:b0:34:75:99:a9:6b:84:d7:4e:c6:
         fd:c8:7b:d0:28:c8:c2:ee:ee:c4:f7:40:a8:a6:e4:1d:9f:62:
         60:b2:2e:1a:a3:0d:0f:3d:84:47:30:85:f0:00:bf:5a:df:26:
         f7:79:01:07:ed:35:b2:10:d3:30:4d:ea:95:1b:40:9a:6b:1a:
         05:c7:95:24:2c:11:83:b3:6d:3f:3b:21:67:0f:38:c4:eb:5c:
         00:6a:e5:18:41:f7:e8:a5:67:45:d8:ce:6d:0f:fb:a8:f3:74:
         6e:54:b3:8c:7d:5c:19:5f:cb:2e:c7:27:1c:8a:a6:3e:2d:ed:
         4c:a3:b3:d9:d6:c4:14:c1:10:b2:8c:19:6f:78:6d:02:f6:8f:
         22:44:fa:84:8e:62:7f:5a:59:55:36:4b:76:39:20:08:9f:6e:
         23:a8:fa:8b:0d:be:f8:03:5c:32:4f:74:0b:67:1a:70:12:5b:
         e5:f2:2b:68:19:ff:9a:f7:5e:3c:9f:0b:28:b2:23:77:af:39:
         ce:a8:f2:9b:5c:fc:cd:db:71:4a:7e:d0:b9:24:71:9c:93:2d:
         7b:1c:00:2d:1e:e6:2c:af:55:f3:69:c3:2b:18:bf:d7:69:21:
         9d:6f:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:34 2024 by rpki-client on console-fra.rpki-client.org