Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97072b6-881f-3441-9a12-6e28401c50f5.roa
File:                     b97072b6-881f-3441-9a12-6e28401c50f5.roa (raw, json)
Hash identifier:          PAtdMNgqZZc9/o3uItvd8UWZw/LVmHf1fXFrpYOhSAk=
Subject key identifier:   6F:7C:C0:A6:1E:B2:EE:53:27:4B:A7:F9:EF:3C:A4:DF:E7:BF:66:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D6436EE561218FFE7BFB20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97072b6-881f-3441-9a12-6e28401c50f5.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        199.224.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:43:6e:e5:61:21:8f:fe:7b:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=0812ecc9-56a2-4050-91ad-079c2e531b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:58:3c:38:47:5e:78:91:ef:14:50:ef:dc:ce:
                    0f:8e:ff:05:af:2a:2c:f2:4a:6b:44:5d:09:c4:9a:
                    b7:27:bd:d0:4f:e6:ca:e6:51:96:15:3e:bb:3c:2b:
                    72:6b:50:bc:14:d7:bb:64:4c:c3:6a:4d:a4:45:8c:
                    d9:22:5c:72:d5:95:9d:d6:36:d0:9a:75:44:6b:00:
                    67:44:59:64:98:d7:88:a6:ce:ca:e1:e4:81:da:6c:
                    e7:8c:ef:64:21:7b:d1:c7:ff:59:05:ff:d2:a3:22:
                    ea:dc:76:74:8b:e4:cf:f5:5b:d1:a4:76:ad:f2:6d:
                    3b:fa:64:1b:73:2f:40:29:0b:ed:1b:5c:cc:59:92:
                    c9:fe:b1:80:7d:79:19:46:38:be:dc:01:c6:a2:2e:
                    45:6a:78:06:08:0e:82:67:96:0d:73:22:d0:ac:3e:
                    27:27:cd:06:e1:fe:31:8a:17:30:b5:d3:2f:f5:43:
                    b6:9e:c5:ae:b7:49:69:f2:a9:72:9e:a2:2e:2a:19:
                    62:4a:0d:56:23:bd:dc:b9:b7:6e:1f:48:94:d1:4e:
                    63:e1:01:df:0e:cd:af:e7:36:b7:07:c5:3a:9e:fa:
                    19:ce:a9:7c:0e:69:a2:0c:f5:79:54:9f:af:f9:3b:
                    50:db:12:4b:66:fe:c7:85:9f:da:ff:48:26:be:54:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:C0:A6:1E:B2:EE:53:27:4B:A7:F9:EF:3C:A4:DF:E7:BF:66:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97072b6-881f-3441-9a12-6e28401c50f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.224.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:e9:46:12:b5:65:f4:be:ac:c0:d5:d4:9a:bd:7c:94:2f:
         d3:11:e3:76:98:ca:ba:5e:a0:d6:07:e9:b1:b1:39:d7:54:9a:
         82:be:10:7b:4a:4a:11:7b:5d:9b:82:1e:38:78:e1:f5:02:75:
         41:2a:96:ef:6e:8b:fe:04:55:ff:60:1c:1e:dc:83:b6:30:33:
         7d:3b:63:8a:b5:7c:53:ba:51:cc:e6:a6:12:f0:ef:29:ea:67:
         fe:67:05:23:d7:ba:aa:71:18:1d:1c:92:df:30:7d:71:90:b9:
         9f:3a:77:db:0a:68:b1:f8:81:2d:32:c8:1e:f3:48:f7:37:c1:
         58:33:6b:93:c5:63:a6:22:36:50:25:34:74:52:5d:a1:51:fd:
         91:84:68:89:f3:94:58:01:28:ec:bc:b3:d7:aa:a2:c6:32:8b:
         81:4e:8d:25:2c:86:06:85:19:1e:4c:f9:53:8a:3e:8b:6e:1c:
         00:e6:1d:17:60:58:ff:62:d9:a3:43:cc:14:e8:63:6b:b0:9c:
         8a:d4:27:ec:5f:f7:70:5a:1a:b9:11:00:4f:c4:5c:b4:7f:ab:
         0c:b5:e7:05:59:96:64:ca:06:96:a8:a7:d2:d1:ce:17:de:2c:
         03:64:a1:18:83:82:9b:cd:1a:81:5a:a2:7a:e9:1e:40:41:ec:
         71:1d:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:46 2024 by rpki-client on console-ams.rpki-client.org