Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa
File:                     d10c169a-ae70-3a68-9f57-5160dba5487d.roa (raw, json)
Hash identifier:          13Eb3SHtKJD7J9ge34q1SwtKpXKW9XrGsGMjYQpHwjQ=
Subject key identifier:   81:4B:AE:C1:C7:E5:4C:E4:55:5A:F7:B2:11:81:03:C9:5C:3D:BA:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D387A07FD02555331B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        74.98.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d3:87:a0:7f:d0:25:55:33:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=3e26f83c-4b5a-4b7c-b0aa-18656f1c6451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b7:0a:1f:69:aa:14:14:1e:31:91:a1:ad:01:
                    ff:8e:b4:42:6f:5d:c9:fe:8e:be:94:52:02:1b:4a:
                    8b:41:95:bd:7e:f6:aa:8c:44:c4:da:85:9a:92:64:
                    41:01:b6:7f:4c:ac:2e:f7:02:fd:ac:a7:0c:7a:af:
                    7c:84:d6:4a:e9:1f:a3:4e:fd:b3:7c:6c:46:38:c4:
                    c8:e5:21:b4:dc:92:19:d7:2d:76:96:36:8b:5a:b3:
                    a8:20:3d:90:68:74:c4:f4:17:58:7a:9e:cc:9c:82:
                    80:c1:f4:57:c9:3e:7e:fb:0f:0b:e8:da:b7:d4:de:
                    da:98:83:0a:ab:b1:5d:62:b7:ac:b8:0f:2f:53:ec:
                    91:54:33:fa:eb:eb:b2:97:0d:87:d6:fa:09:d3:45:
                    f0:19:28:74:a9:60:5b:1e:45:c4:8f:51:2a:79:be:
                    03:49:19:5d:0b:6f:eb:82:3b:7b:5d:d2:e7:f5:6e:
                    4a:53:9c:25:d6:43:44:0a:08:88:77:82:ba:96:f1:
                    49:e1:6c:7d:f5:f7:99:e0:2c:92:a7:7e:61:8e:75:
                    26:65:45:25:56:79:91:cc:66:98:aa:f6:64:01:af:
                    be:9d:57:2b:15:06:6f:2d:20:b0:67:4f:aa:94:5c:
                    6e:d0:a3:93:be:09:cf:88:16:c4:3d:5d:90:18:03:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4B:AE:C1:C7:E5:4C:E4:55:5A:F7:B2:11:81:03:C9:5C:3D:BA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.98.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:91:16:80:46:ea:fe:e2:7d:d6:55:55:cb:f4:90:be:66:
         18:f3:89:73:67:8c:b0:ad:0b:88:06:27:67:ae:cc:fd:30:fd:
         dc:5e:7f:5d:b3:b4:a4:26:4b:d3:27:3c:e1:05:cc:45:24:bf:
         f2:98:6b:20:21:f4:82:b1:90:52:0b:cd:6a:d0:65:35:c8:80:
         ca:d6:c8:21:5c:93:39:1b:b8:3c:47:33:7c:ef:29:d9:5f:f0:
         03:3d:8c:89:d7:7d:55:5c:21:18:bf:89:2a:3c:0a:a5:c7:2a:
         3e:4d:7d:51:5b:36:54:01:ad:04:86:38:6a:fb:bc:24:1a:ba:
         a3:ab:ea:9b:97:95:2f:ce:52:63:5e:3a:ec:a1:44:4c:61:2d:
         36:d9:e2:77:b8:f9:41:2b:bf:c6:5a:04:a7:56:2e:ce:47:ac:
         ba:df:ed:b9:7b:43:68:07:71:a4:67:ad:3f:d9:6c:75:bc:93:
         86:50:5b:3c:85:09:35:0c:e3:f4:c8:7c:39:d7:55:a3:ca:54:
         ba:15:2b:b5:ee:c4:64:fb:86:b7:ba:7f:70:33:1a:e2:84:51:
         bb:0f:07:5f:1a:2e:40:39:cd:4d:13:11:bf:cb:6b:18:30:c4:
         4f:1c:5b:c9:5d:7d:11:15:bd:fa:8c:c6:f2:3e:ac:06:6c:96:
         0e:82:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:55 2024 by rpki-client on console-fra.rpki-client.org