Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e27231ee-3601-343d-a7ed-8f7cf278493d.roa
File:                     e27231ee-3601-343d-a7ed-8f7cf278493d.roa (raw, json)
Hash identifier:          cD/enPGKnUpsgOnVhtT1Y3e0OKUCNLmvC5Dk9ibZI/M=
Subject key identifier:   7B:7D:34:AF:DC:7D:52:BD:25:7B:50:65:BA:02:E8:D1:0D:73:2F:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA055BF4D610B00170EC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e27231ee-3601-343d-a7ed-8f7cf278493d.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.214.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:05:5b:f4:d6:10:b0:01:70:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=86f474b8-f328-47b7-89a0-609f46692d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:84:8f:12:50:be:5a:6b:10:a5:7f:c7:9b:
                    b7:04:d5:3c:c3:f8:b4:55:79:80:9e:79:6c:fc:97:
                    93:5b:94:e6:e5:d9:0b:17:b4:99:b0:9f:55:a8:7e:
                    02:1e:5f:1a:34:8b:ed:dc:2e:34:11:8c:2e:17:af:
                    ae:6c:70:71:07:f2:4f:3d:86:50:eb:aa:4c:b3:f0:
                    78:7b:b7:e3:86:32:50:cc:6f:52:c7:eb:e7:84:c2:
                    a8:7e:7d:6a:30:c8:aa:04:0a:ac:1d:e0:8c:a8:fc:
                    3c:68:1c:85:3d:75:0e:a1:6d:31:36:2f:db:06:58:
                    89:23:ac:10:f4:31:64:ae:3a:75:25:63:2a:a3:7c:
                    d6:1e:47:1c:fc:8d:d5:04:8a:ad:b1:25:61:f0:a4:
                    d0:99:51:77:3a:3c:71:15:6a:c1:ca:67:45:79:b5:
                    ea:d4:33:09:b2:61:2d:1c:3f:07:47:59:04:0d:a8:
                    1c:2f:3e:89:bd:ba:7b:97:26:02:2f:70:09:43:45:
                    82:fd:9b:11:8f:e6:48:f0:23:f2:97:d0:42:cc:e0:
                    9f:3b:47:3a:a7:c8:18:0e:5e:6e:7b:f4:dd:26:0a:
                    37:6c:5d:d7:18:64:b4:f5:69:67:4f:49:a4:c7:ba:
                    0d:12:16:18:b8:6f:39:ba:dd:fd:ee:5f:71:9b:c4:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:34:AF:DC:7D:52:BD:25:7B:50:65:BA:02:E8:D1:0D:73:2F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e27231ee-3601-343d-a7ed-8f7cf278493d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:52:81:34:3d:d3:80:f0:0d:fb:3d:25:35:54:35:be:33:c4:
         4c:3f:92:08:ce:8a:20:62:de:bf:50:b1:38:ac:3d:39:cb:32:
         b6:f8:87:de:63:6f:ff:c8:cc:c3:f2:aa:f7:35:24:84:04:e9:
         1b:79:7f:c5:af:84:ea:71:4d:c3:00:27:0d:9c:59:db:77:f2:
         70:f5:be:76:ba:74:9e:37:bb:cc:4c:aa:12:ff:1f:91:5d:7b:
         8b:66:4d:1f:dc:e4:37:be:5d:d5:ce:28:5a:99:8a:39:24:78:
         ca:22:30:09:1e:fd:a5:e0:ba:03:78:9e:f1:30:40:62:f4:86:
         25:c9:a8:3f:f8:9e:5d:53:3c:07:54:2a:d5:25:bc:43:3f:c1:
         c3:83:23:c5:a4:3c:27:61:59:01:5c:bd:7c:be:e3:a5:42:e8:
         3b:54:d8:4d:ef:f4:d7:c7:15:94:b6:3e:23:35:d9:5b:7f:fa:
         5d:00:80:dc:32:2c:05:06:d8:84:12:d7:62:6c:0e:d0:b2:1a:
         fd:d4:65:1d:ad:62:43:74:3e:f6:fc:1c:68:9e:2f:c2:30:1a:
         bf:36:5a:f5:09:07:7c:90:2d:30:9c:2a:e9:26:b0:3f:e2:da:
         7a:06:fb:8a:97:2b:56:04:af:af:85:ae:5b:c0:b5:c7:ff:da:
         56:f5:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:58 2024 by rpki-client on console-fra.rpki-client.org