Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75bc001a-6eb7-319e-aebf-5180f57e9f87.roa
File:                     75bc001a-6eb7-319e-aebf-5180f57e9f87.roa (raw, json)
Hash identifier:          z2YLLfXx1oyhMv9SIer7RaxJgVR10b6dlhzIX/mL/tc=
Subject key identifier:   C7:2B:77:71:AE:E5:CF:40:1B:AD:9B:4A:70:EE:86:32:C0:92:C3:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0510900DE35A5F736580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75bc001a-6eb7-319e-aebf-5180f57e9f87.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.214.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:05:10:90:0d:e3:5a:5f:73:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=b348bbac-6db7-42ef-a47f-9e400dd31a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:9b:df:16:25:3e:75:20:4f:92:53:b5:c9:
                    bb:bc:ee:f5:87:c4:ad:0d:f8:69:e9:92:b0:fc:69:
                    aa:b4:40:7d:cd:63:22:c3:6c:6f:ff:6e:f1:e9:b9:
                    9b:bc:c5:6e:ec:93:06:be:be:88:13:3a:e6:6b:61:
                    82:9f:9e:f8:66:7f:dc:43:de:08:77:cf:ff:e1:eb:
                    93:8a:77:2c:ac:22:0e:d7:ad:33:5b:96:c2:d0:21:
                    ae:1e:e4:9d:b5:2b:6f:36:fe:c7:91:39:02:5f:97:
                    85:cc:19:ca:ac:d4:4e:e9:c2:45:61:a2:fe:58:da:
                    75:1f:8a:f7:00:64:9b:e4:7e:01:3d:44:09:f0:65:
                    9f:dc:43:15:56:60:ec:e7:b0:ac:23:ed:f7:2f:66:
                    e9:ca:49:7c:75:ce:0f:d9:1e:61:20:a8:22:70:0d:
                    e0:2a:6f:b8:62:8c:aa:d1:98:ce:4d:f7:00:ed:a6:
                    81:d9:54:ec:b6:13:70:08:9f:a0:c8:00:16:9f:4d:
                    60:14:be:ab:33:7b:ff:5a:1e:f5:05:a5:17:c0:02:
                    ef:3e:1d:e5:86:73:fb:a3:79:4f:fd:29:06:a3:c6:
                    7c:d3:22:6b:46:96:9b:d0:7b:bd:57:9d:01:fb:c3:
                    cb:fa:03:93:43:d8:5c:0e:4b:a7:c3:a7:f7:81:9d:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2B:77:71:AE:E5:CF:40:1B:AD:9B:4A:70:EE:86:32:C0:92:C3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75bc001a-6eb7-319e-aebf-5180f57e9f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8d:d5:08:89:62:9f:bf:63:cc:f6:18:ab:93:01:3e:37:16:
         a3:31:a3:14:b0:5b:31:66:98:07:23:8c:8c:b7:22:22:5f:29:
         2a:94:e4:33:c3:99:2e:60:77:2b:92:a4:21:f9:6f:3c:83:57:
         0e:54:67:36:33:69:10:0e:05:ac:35:30:06:58:34:b8:5b:15:
         57:39:45:e2:cc:e1:9b:08:5f:78:6a:7b:fb:b3:bc:15:22:ad:
         2c:61:d5:ef:ef:f2:b4:06:2e:74:54:91:66:3c:22:c2:aa:c5:
         b9:7e:da:14:b1:c3:48:41:be:c7:37:cc:3d:33:f4:59:70:83:
         c8:95:77:4e:54:3c:b5:f7:40:32:89:88:eb:cc:e9:18:ff:ec:
         94:93:16:77:cc:2b:93:16:a0:19:9f:8d:4d:e2:d6:eb:ec:5f:
         2c:7a:40:e7:ea:d1:8a:56:ce:3a:0e:cc:c5:4f:fe:9f:30:c8:
         73:14:c4:c1:cc:8d:1d:c8:b0:3c:45:d2:4f:54:3f:b8:8e:6e:
         d0:e0:84:2f:9b:8b:a0:ee:c7:94:ab:2c:5d:e7:b8:11:7f:5e:
         ae:e2:54:b7:fa:9b:13:0e:cb:c8:9b:16:58:92:73:4b:1c:8e:
         6c:97:74:36:d2:2c:04:09:5e:4d:0f:04:4d:22:f8:da:a7:aa:
         70:1d:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:35 2024 by rpki-client on console-ams.rpki-client.org