Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e8cdb26-0825-39f9-b012-dc110adf9785.roa
File:                     7e8cdb26-0825-39f9-b012-dc110adf9785.roa (raw, json)
Hash identifier:          v6+fRJUlIDv49Zo6SLhtYWOs5X+dHCO+JtFPRE2yTGE=
Subject key identifier:   10:E2:81:14:B3:27:0F:82:78:4B:57:CB:81:71:CB:42:CE:F1:E2:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA08699F25CE26DF1F46A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e8cdb26-0825-39f9-b012-dc110adf9785.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.218.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:08:69:9f:25:ce:26:df:1f:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=48fe0ffd-4e54-4edc-8c43-d09d2246ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:23:a9:25:72:17:48:25:b5:05:e8:00:61:
                    6c:b7:b5:df:9f:e5:61:62:96:e6:11:f1:96:c9:6f:
                    97:c3:b4:1e:4b:d2:32:c5:0d:e8:4f:60:36:ac:04:
                    ef:88:81:bb:69:1d:a9:89:82:7e:02:11:12:c1:61:
                    cd:21:4f:e1:a1:ee:fd:ad:f2:87:c1:87:59:cd:bb:
                    5a:ed:a9:7b:d8:53:11:cb:ed:03:d4:75:a6:5f:a0:
                    a9:0d:db:36:f6:31:3b:88:91:f9:0a:22:8c:d2:00:
                    24:ca:51:19:a5:eb:d8:09:8f:03:88:3f:55:09:f5:
                    fe:18:2f:38:fd:cc:ad:76:df:0e:55:02:85:99:8a:
                    78:80:39:79:90:cc:7f:cd:cc:fa:06:91:c1:8e:22:
                    29:09:9e:27:83:6e:60:69:65:ca:3b:bc:6d:83:00:
                    8d:be:88:e8:3a:c4:0a:b6:f4:94:2e:28:9e:08:cb:
                    08:7b:44:48:2f:8f:3c:a2:39:8a:c2:58:a2:5a:f1:
                    76:88:38:b7:fa:47:88:67:df:6a:bb:ed:12:d3:f8:
                    51:07:e6:40:fe:07:f0:40:43:32:ac:da:7e:e7:28:
                    12:59:21:7d:69:18:f1:8e:5a:67:ff:01:d2:19:2a:
                    db:6b:4d:b1:78:fb:43:10:2a:53:db:61:4b:46:b8:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E2:81:14:B3:27:0F:82:78:4B:57:CB:81:71:CB:42:CE:F1:E2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e8cdb26-0825-39f9-b012-dc110adf9785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:54:94:f5:e7:93:29:bd:3b:06:78:fd:ee:c8:2b:ec:05:4e:
         3f:33:70:f0:9b:db:7d:01:79:d0:0b:d0:35:3e:15:53:4e:bf:
         eb:b3:68:ed:a8:df:23:43:c5:39:8c:e7:91:70:75:1c:19:be:
         4d:81:95:f6:1a:f7:12:87:b2:cd:26:87:f8:35:bc:c2:0b:f0:
         f0:46:bd:9f:81:71:7f:f3:12:f4:73:71:c4:4e:8e:ff:99:14:
         21:0b:fe:70:b6:43:f4:7f:4e:fd:f4:87:48:de:4b:5e:ee:e4:
         75:f0:7e:28:5c:f0:9a:c1:73:23:10:d1:a4:28:b0:70:14:5f:
         e2:3c:8c:39:36:6c:4b:bc:42:e5:35:64:99:7c:e7:69:80:01:
         b4:2d:7d:1e:90:39:4b:e9:67:31:0d:31:ec:3f:cc:4a:af:13:
         ea:5a:80:0a:0f:f6:e0:b3:d7:7d:b8:2b:6d:77:bd:81:1b:f9:
         34:24:83:33:aa:4d:e8:c7:5f:d0:b4:c1:56:72:b5:09:70:37:
         25:8f:20:94:56:0d:f3:e9:5b:da:e1:8d:35:93:84:ee:4c:4e:
         08:8b:93:1b:c2:32:2d:3b:12:29:2e:8e:82:81:33:7d:c0:69:
         8a:02:14:65:20:c8:3e:a1:47:22:02:44:75:79:91:71:ef:5f:
         be:ee:be:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:36 2024 by rpki-client on console-ams.rpki-client.org