Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b28e95-bb24-32c3-b7ac-91139bc5f707.roa
File:                     f9b28e95-bb24-32c3-b7ac-91139bc5f707.roa (raw, json)
Hash identifier:          gK3QWajFJw+5MmlggBLVe2VnvaJC6xpOVrx2xzaQsBc=
Subject key identifier:   AA:6A:52:50:C0:F4:2A:E8:37:14:E6:D1:A5:84:18:F4:8D:20:AF:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA026474042C10EE76BB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b28e95-bb24-32c3-b7ac-91139bc5f707.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.209.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:02:64:74:04:2c:10:ee:76:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=a710f3c0-b508-4b58-ba00-ac6e790ba5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:c7:02:dc:8a:d8:cd:c2:dc:21:80:50:25:
                    bd:6b:d3:73:09:18:c7:e1:52:7b:33:9b:65:2f:c0:
                    12:46:6a:ca:bf:ee:60:22:86:95:9a:b2:61:67:e5:
                    74:55:e5:7a:0d:93:db:7a:e8:b7:e1:6e:52:07:43:
                    a2:c4:6b:b7:4d:c5:6c:c3:c2:fb:be:12:5e:8c:14:
                    b1:38:94:d8:af:13:65:bf:2a:79:1c:01:af:42:94:
                    30:dc:5b:f9:df:fc:95:b7:fb:f1:1a:75:a3:d1:9f:
                    44:2c:22:33:b7:77:61:a6:58:dd:ed:be:44:e0:14:
                    60:b9:21:4f:e7:5e:94:38:8d:43:6e:51:f9:77:b3:
                    8f:98:80:45:dc:d0:90:b8:78:94:bf:14:2a:ac:5d:
                    7f:f5:1b:cf:82:c5:b3:7b:4d:66:20:58:98:ea:3b:
                    19:8a:be:00:3c:09:9b:b2:96:4b:1a:08:a3:d0:a8:
                    e9:bb:85:ab:b6:dd:1e:3b:ea:8c:67:60:9d:c1:2e:
                    5b:3c:25:98:bd:a0:14:9d:69:b9:68:d6:e8:c9:a9:
                    eb:92:16:bc:6f:f6:72:7c:ad:77:bf:c6:b2:d6:82:
                    48:57:9e:a1:fb:bf:0c:d8:54:c8:27:53:5a:df:e0:
                    20:da:d8:00:9f:97:67:ba:c1:db:66:fa:69:4d:68:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:52:50:C0:F4:2A:E8:37:14:E6:D1:A5:84:18:F4:8D:20:AF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b28e95-bb24-32c3-b7ac-91139bc5f707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.209.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:f7:40:47:63:3a:b1:0b:c9:db:77:12:d6:39:13:7c:7c:
         66:9b:ca:e4:3c:e3:c6:09:0b:2a:88:a7:b5:d4:b4:aa:d2:84:
         66:99:e4:6d:77:aa:ac:91:88:3b:48:3a:c2:1b:77:7e:7b:b8:
         a5:39:6c:0f:b4:0e:c1:49:6c:95:47:24:7d:f4:d9:46:7b:74:
         75:41:39:25:7d:cb:66:87:c8:13:c0:af:82:28:9c:f3:90:f8:
         e3:00:d0:52:cc:5b:1d:f1:9a:e5:b5:dc:e8:65:87:93:cc:c6:
         5c:34:dc:c6:eb:eb:ee:a0:08:dd:3e:2a:11:41:1b:9e:ef:6f:
         6f:2f:38:c6:1c:12:88:cb:bd:ba:00:94:62:dc:ec:f1:9a:0d:
         da:a2:ad:77:86:bf:f0:a2:b7:eb:4f:8d:fb:98:90:f6:78:ef:
         58:d6:0b:f5:f3:b4:9c:46:64:66:79:9b:c5:5b:44:b8:78:1c:
         01:d0:6a:16:c9:2c:5a:fe:49:01:0e:2f:ff:1c:86:cf:fd:5b:
         fe:c6:54:24:21:1c:f9:6a:65:96:5e:6a:10:dd:2b:31:c5:fd:
         25:da:16:d1:49:14:a5:a4:00:93:c4:01:02:de:19:84:19:24:
         61:97:27:e7:07:fb:cb:cc:29:7a:53:32:86:9d:f2:62:38:e6:
         53:41:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:03 2024 by rpki-client on console-fra.rpki-client.org