Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa
File:                     9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa (raw, json)
Hash identifier:          sipxkIL6kjAjS/H1SRDd1ilBRvKiUDZQo+9QSntM9EU=
Subject key identifier:   1B:EC:A1:33:EA:AA:B1:94:26:60:97:39:52:7A:21:4C:0A:B9:19:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA137173016E470CC39300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.213.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:13:71:73:01:6e:47:0c:c3:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=d825a1ce-1ccb-42c4-87c7-89ab0adccbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7a:e3:46:45:8e:43:bd:53:92:27:1e:0e:a2:
                    70:0a:59:52:7b:3a:13:a7:cc:d2:df:78:b1:62:e7:
                    63:83:f4:97:cf:bf:81:79:25:8e:ff:58:e2:16:fd:
                    a4:70:96:02:7c:4f:9e:9c:d3:05:b9:bb:fe:f3:ac:
                    0c:da:e9:07:64:0d:b8:14:7e:21:e9:b5:a0:63:8e:
                    88:36:2f:68:b2:88:ba:07:0c:b2:6c:eb:b3:da:3d:
                    80:33:e1:36:c5:73:f2:1b:6d:0d:c6:dd:10:19:57:
                    7c:a6:e8:26:e4:09:bd:70:80:49:1c:0c:f9:33:f7:
                    2c:06:02:ce:4f:9b:77:a2:a1:3f:f8:4b:23:3a:73:
                    d5:da:8f:83:d0:6a:d6:d0:b3:b1:23:57:71:94:a0:
                    3e:bc:31:a6:56:4e:ed:89:1f:58:d5:1f:b8:12:d3:
                    f8:48:25:8b:af:78:a8:15:5f:bb:b0:93:95:7b:24:
                    f7:a1:5f:9b:b7:f4:78:57:1f:7c:9a:46:74:ce:a6:
                    af:c9:97:46:98:2b:7f:57:d2:df:68:97:ff:92:09:
                    16:91:16:25:47:9f:a8:97:0c:26:a2:59:32:30:7f:
                    17:c2:a0:18:f9:a6:46:6c:a1:08:25:a0:17:e6:42:
                    97:2b:db:3e:29:60:65:22:39:d5:de:06:68:70:cb:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EC:A1:33:EA:AA:B1:94:26:60:97:39:52:7A:21:4C:0A:B9:19:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c4:c0:b4:34:4f:54:e8:98:9c:21:87:4b:4c:ec:33:03:d7:
         35:68:0f:30:45:55:bb:b9:2c:a9:83:3f:6f:73:56:33:05:24:
         4d:fe:93:c9:17:6d:03:8d:01:75:92:4d:ed:a3:40:e0:99:36:
         96:4d:b4:4c:91:2b:3a:52:aa:d3:06:c0:1d:8f:59:cd:c4:bc:
         b4:f3:02:e0:4d:02:13:7e:e6:3c:3c:62:3f:9f:8d:68:e8:f0:
         dc:a9:32:36:f6:3c:f3:2c:14:95:af:e0:2c:5a:99:64:af:84:
         3a:17:97:09:24:bd:dd:c2:68:bf:68:f3:ba:3f:ac:57:f0:ac:
         65:8d:8d:7f:b7:63:84:35:67:68:c5:35:4f:4f:62:57:a7:18:
         f4:ab:28:4c:da:70:ca:1b:bd:90:28:7e:39:b6:af:fc:e7:aa:
         cf:8b:db:ba:ca:04:4a:a9:11:0f:6f:c2:2c:57:fe:84:13:4a:
         27:05:7d:24:0b:86:11:0f:59:40:af:1a:e8:5f:50:e5:c2:6c:
         30:80:2e:8f:07:47:dd:2a:c5:95:56:e0:5b:cd:a7:40:36:5e:
         9a:13:cc:fe:e4:7b:74:17:86:be:74:ac:43:26:12:3b:40:1f:
         56:b3:b1:59:37:94:10:fa:4d:ae:30:57:c5:72:01:ce:c5:a9:
         49:16:44:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:41 2024 by rpki-client on console-ams.rpki-client.org