Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e93aa65c-8326-33ee-9e1d-51ced6233850.roa
File:                     e93aa65c-8326-33ee-9e1d-51ced6233850.roa (raw, json)
Hash identifier:          dl7ZrKv2gggFhXwC/07N7lhOzxh3afGBQtIp/+At5/0=
Subject key identifier:   06:2D:1E:DE:CF:A9:0E:96:BB:E9:23:B7:22:87:03:18:D6:A1:ED:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0A3B4AB192C5574953A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e93aa65c-8326-33ee-9e1d-51ced6233850.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.219.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:0a:3b:4a:b1:92:c5:57:49:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=00c7d296-9b06-4555-94d3-d1f50a422707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:2d:a7:64:23:95:0b:81:af:b5:01:1d:a1:
                    9d:0c:55:e5:12:c9:29:ce:38:5b:95:cf:83:38:ed:
                    e6:fd:9e:d1:a0:0f:f1:b3:c0:6e:20:79:b2:7d:70:
                    18:96:0b:e4:d9:58:96:39:e5:d1:8b:b3:0e:ad:ac:
                    50:32:90:e2:a0:12:1d:df:3a:c4:64:ad:ab:2e:50:
                    92:25:7f:8f:20:99:dd:09:6b:ad:1b:7d:71:b2:59:
                    41:9d:e2:99:19:e3:f2:80:56:0c:9f:f5:b4:78:4c:
                    75:cb:55:b1:f4:88:12:6e:74:2c:b2:9b:bc:1d:b9:
                    2f:fc:c5:ae:34:ee:12:22:6e:bb:67:92:3b:1b:ff:
                    dd:59:b5:e8:d1:0f:75:32:cf:42:4c:9d:33:8f:c7:
                    cc:21:16:12:79:8b:d5:38:f5:59:ca:f4:af:8c:97:
                    d0:11:49:04:2d:05:92:b3:d6:a2:e9:53:fb:75:cd:
                    a3:32:a7:f1:0f:77:47:6a:6c:a3:cc:d4:fd:28:aa:
                    d4:f0:cb:41:88:74:ea:0f:1e:cd:99:10:1d:7d:75:
                    d4:7b:ed:58:3a:18:6f:f7:5a:0c:8c:f9:38:ad:8b:
                    c6:d8:75:40:5a:8b:2b:a1:13:d7:37:32:d1:93:ef:
                    2d:d6:24:d1:71:45:fa:d9:94:7e:93:b0:e2:7e:31:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2D:1E:DE:CF:A9:0E:96:BB:E9:23:B7:22:87:03:18:D6:A1:ED:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e93aa65c-8326-33ee-9e1d-51ced6233850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:26:e4:e6:93:55:0c:f6:f0:94:66:26:a7:90:a2:f2:35:51:
         32:7c:6d:a7:dd:d5:d7:4b:38:9e:29:9c:a3:a7:16:9e:f7:b9:
         26:81:fb:de:4a:0e:ad:bd:11:77:5b:1f:ee:db:ab:89:59:fc:
         33:97:9e:69:5b:27:d9:de:1d:f0:3a:30:c3:c7:7f:d6:9c:d3:
         cd:25:b4:f3:7a:57:1c:3b:0d:2f:0d:47:e9:7b:5f:dd:81:27:
         bb:32:1b:76:72:fe:90:b2:54:e6:44:aa:9f:71:e9:59:e9:05:
         8e:ba:ee:d5:07:59:c3:a6:c8:0b:ea:ae:79:dc:3c:6b:8f:a5:
         49:6d:1c:ad:6c:4f:07:a4:10:ac:69:9f:58:eb:ab:72:20:2a:
         40:34:f5:55:ca:a5:d9:8d:4d:b3:eb:ab:c5:0a:10:c0:62:68:
         8e:82:c5:df:3b:37:b0:89:73:78:7f:fc:98:92:8d:a6:43:c5:
         e3:8f:5b:bf:99:0f:f4:37:e8:16:c4:ee:30:e4:5e:5d:97:e1:
         83:8a:5f:24:ec:cc:bd:f0:11:e0:28:df:90:d4:c0:67:14:33:
         1a:1c:55:8b:bc:11:66:5e:72:a3:1f:24:2d:d1:2d:04:2a:bc:
         cc:69:42:3b:82:7d:ea:95:a7:eb:f1:f3:db:47:73:0d:b3:3c:
         8b:42:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:56 2024 by rpki-client on console-ams.rpki-client.org