Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e19dd5d-6b52-3b78-9cf5-1f7184742f86.roa
File:                     8e19dd5d-6b52-3b78-9cf5-1f7184742f86.roa (raw, json)
Hash identifier:          5XKmP5p1VJxCv1keA01zEXTFmjpQCcdHgsskkq+7ryI=
Subject key identifier:   EC:32:A5:47:88:9B:89:37:64:8E:13:EE:FD:C4:DC:EB:84:14:70:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F4FBC22136F4BEE8ED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e19dd5d-6b52-3b78-9cf5-1f7184742f86.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.250.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f4:fb:c2:21:36:f4:be:e8:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=59139814-f195-4cef-b0a1-7b833f989ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:90:ce:8f:46:12:24:68:dd:de:c0:2b:8c:
                    d4:a1:6f:0a:c4:de:20:d1:c4:9b:ed:b1:3c:d3:59:
                    01:d0:49:98:1c:80:52:f0:ec:29:91:0f:95:d9:c6:
                    c0:fc:58:48:51:68:a1:2e:b8:ef:64:1a:96:9e:06:
                    76:00:48:45:01:40:3c:9e:1d:1b:94:83:5f:bb:8a:
                    e7:5a:e0:8b:a0:7b:91:9a:cd:77:73:9d:a5:07:a4:
                    34:73:8d:1a:96:61:74:54:08:7b:bf:35:1f:67:03:
                    18:f2:1a:2f:cb:d2:32:8d:9d:10:55:99:fb:82:e1:
                    37:9b:32:6a:3c:5d:38:77:25:73:4b:24:70:ea:8a:
                    c8:1e:a3:2a:4e:f8:bf:bd:16:c8:12:16:4d:47:14:
                    9e:35:97:41:bc:27:69:ca:af:74:95:8c:75:05:4a:
                    c1:75:b4:d0:0a:a2:14:9d:60:d0:49:61:59:4a:e7:
                    df:a6:42:26:41:05:54:97:19:60:b1:49:6e:a0:69:
                    d9:41:c0:37:49:51:7a:1a:e0:1e:dc:47:89:e7:a2:
                    ce:fc:c1:ef:00:24:0e:1f:c5:d5:ef:12:4e:4a:6b:
                    97:d0:20:a7:3a:4a:e1:61:c3:23:bd:d5:dd:a8:9f:
                    12:59:bb:49:3b:99:8e:47:1a:3d:49:30:27:53:19:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:32:A5:47:88:9B:89:37:64:8E:13:EE:FD:C4:DC:EB:84:14:70:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e19dd5d-6b52-3b78-9cf5-1f7184742f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:86:dd:19:e8:7a:5a:52:2e:c0:6e:37:5e:f1:5b:df:26:
         5c:bf:94:93:15:78:80:a1:63:dc:dc:d6:ca:32:ae:d6:e0:09:
         ef:a4:73:3c:77:71:cc:0f:72:3e:8b:1e:01:ad:fd:ca:3a:32:
         57:19:6d:cf:ed:d2:7a:cb:16:7b:b8:56:ab:34:54:58:b6:b9:
         f8:b9:65:5d:ce:25:d4:f3:c8:cc:30:67:f6:95:04:d9:a2:2b:
         c8:3b:a7:95:aa:8a:af:bf:b7:7b:4a:fd:ef:05:3a:29:09:a0:
         c5:f7:39:11:80:06:6d:40:36:13:de:99:a1:f9:42:cd:2e:33:
         17:bd:b6:e7:3d:93:3b:37:f2:63:d4:19:01:25:69:f3:7d:4f:
         c2:cb:a0:f3:d6:87:2c:47:37:70:8b:8c:5a:fb:2b:25:3a:0a:
         85:ae:93:85:30:78:b3:59:00:49:b8:c4:4e:c8:aa:45:fa:eb:
         87:ae:ee:82:d2:34:b1:59:ad:dc:20:78:66:30:fb:2c:7d:dc:
         ba:f2:39:03:be:fd:7a:09:ea:7d:e8:11:97:6c:b5:c6:75:e3:
         e0:a4:25:35:75:be:e7:1e:f7:cb:a1:07:d8:ab:d4:dd:a9:da:
         fe:d2:dd:ce:0f:24:1d:dd:16:89:34:12:4b:60:85:c2:ef:ab:
         3c:27:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:38 2024 by rpki-client on console-ams.rpki-client.org