Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa
File:                     35133f23-2db2-3119-a6e0-f214c49d82ca.roa (raw, json)
Hash identifier:          P6RBJASBVkb0eGdkTqT2Q782QMWAAfDXbS+W25aV4xA=
Subject key identifier:   98:3B:2B:FC:3E:12:05:95:F4:AC:CD:43:E1:52:B9:1A:A0:30:0E:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC93A9F077FF1E94880B3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        65.205.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:3a:9f:07:7f:f1:e9:48:80:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=858c9249-6c92-4bac-a4c4-f0da04cf96dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:38:79:90:5f:b4:ec:d8:59:61:cb:a5:a3:1c:
                    a5:84:fe:34:a0:46:6e:4a:71:81:1c:76:2c:a6:2e:
                    29:28:2b:88:e5:bf:ac:c5:57:dd:dd:a1:f9:5e:c3:
                    82:21:69:c8:b2:37:41:98:be:67:91:ed:8b:82:83:
                    3f:75:4e:17:63:b6:ba:4b:0d:3a:33:92:e7:2c:06:
                    55:6c:34:a2:85:fe:a8:91:0e:d0:d4:b1:18:23:9d:
                    21:61:a4:01:47:0f:48:39:df:93:76:6f:ab:95:28:
                    55:4d:6d:d2:8d:69:4e:75:9c:1b:d1:04:50:f7:aa:
                    5e:b4:30:cd:b5:17:f7:83:8f:1e:1c:c7:8f:e7:03:
                    72:3b:ff:be:eb:5e:43:0b:7b:ee:d6:0f:57:a2:ef:
                    f2:33:d7:b3:51:64:81:1c:74:37:75:7e:b8:af:8e:
                    10:35:7a:f0:af:33:18:ce:e9:55:16:d7:fe:71:02:
                    09:fb:7b:e4:d8:74:b8:db:f3:7f:c6:d4:1b:79:c8:
                    a2:73:14:e1:97:ad:07:75:4f:9d:1e:28:2b:2c:d7:
                    d0:10:9c:1a:ae:3d:72:d4:a6:b3:37:33:c6:2d:02:
                    b8:0e:23:a3:30:25:d3:80:4b:af:41:4a:4b:3c:09:
                    0e:98:87:90:eb:78:21:e5:58:13:de:e2:a9:9b:0b:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3B:2B:FC:3E:12:05:95:F4:AC:CD:43:E1:52:B9:1A:A0:30:0E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.205.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:40:a3:9a:d6:28:63:09:69:7f:66:2d:2b:e8:b7:f8:a8:
         5d:3e:72:0e:23:3c:fe:a3:1c:d6:91:9b:78:a9:6a:00:86:21:
         63:8f:2b:1c:6c:24:7f:09:f2:f9:f4:ee:f3:d7:ea:09:30:e5:
         54:db:0e:d0:89:bb:30:5b:b9:da:fe:98:b7:4b:c1:1a:26:64:
         0c:43:c9:d1:f9:d9:ba:ac:37:c3:5e:53:f8:38:79:8a:03:97:
         d2:b3:8f:e7:46:8f:28:ef:d6:8b:67:98:8f:ff:b3:9b:de:ab:
         f1:ae:f8:cf:f0:f2:13:0e:36:89:fc:e8:87:53:31:2e:ee:d3:
         d8:e9:e6:70:dc:19:83:21:2a:ba:d9:d6:c7:e9:f8:b0:24:84:
         1d:5a:58:ea:01:23:97:45:7b:0f:5a:d7:1e:cd:f3:bb:7d:fd:
         87:79:00:6b:cb:13:20:9e:9c:bc:40:c6:92:5d:31:5d:b0:c5:
         d6:50:71:0e:88:2a:85:59:e6:5f:62:71:e6:76:c1:19:95:f4:
         d8:4d:1a:ba:ad:b5:61:a3:40:1c:65:af:ce:58:23:fd:f2:94:
         e7:50:cb:30:db:c1:40:06:5a:e1:1f:85:8c:5f:60:e4:e3:04:
         b5:fc:d4:02:6b:4c:3a:51:c6:c8:a5:1a:27:fa:07:ac:8b:3d:
         03:a0:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:19:37 2024 by rpki-client on console-ams.rpki-client.org