Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af473e5b-110d-3f76-bfc3-36dc2d8d3769.roa
File:                     af473e5b-110d-3f76-bfc3-36dc2d8d3769.roa (raw, json)
Hash identifier:          hD57uNMon4TYqO9yTTsjk51zUoJI8cF8ZgzKNrWK9EI=
Subject key identifier:   7F:99:7C:2F:0D:E2:E4:A6:6E:A6:96:3B:CC:45:10:93:42:CA:B4:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC9214E30C1FB947F554340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af473e5b-110d-3f76-bfc3-36dc2d8d3769.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        141.158.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:21:4e:30:c1:fb:94:7f:55:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=ea2551c7-9adb-4f1b-803e-96ec817ab34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:21:ae:c1:86:18:99:ea:fa:7d:6c:d5:2b:
                    03:9f:27:7b:0c:21:ee:19:9f:f6:bd:c3:bb:1d:03:
                    62:af:3a:9e:31:df:ad:ce:48:64:00:3e:d3:4b:8b:
                    0c:c3:49:8e:4f:6b:87:ed:98:75:c4:5b:90:3b:a6:
                    29:58:ef:bb:56:0d:29:60:c8:73:a1:49:40:e3:08:
                    bf:54:c8:6c:5c:17:e7:e1:87:99:a1:fb:b3:25:82:
                    5f:69:d5:87:35:a0:10:83:10:4d:27:a6:2b:b3:b7:
                    74:86:21:b1:39:9f:8b:a0:94:d5:d3:c7:fd:8d:05:
                    3b:08:2d:e6:cb:e1:e0:b8:37:e0:b0:78:59:70:d0:
                    bd:55:57:45:d5:6c:64:f6:3d:00:7e:29:5b:98:26:
                    7d:83:04:6f:5f:e7:fc:0c:e3:80:87:f0:53:23:33:
                    eb:a6:ce:ad:d6:a4:ea:4e:7b:a9:b0:a8:b1:98:c0:
                    c3:ae:b7:fa:84:ce:6a:85:ea:62:6d:af:86:82:44:
                    65:65:99:27:41:1f:37:12:ae:fd:d8:2f:d1:fb:77:
                    db:e5:79:5d:9a:26:bc:20:dc:c3:43:3d:3c:de:0d:
                    e7:7d:28:eb:58:79:78:aa:51:dc:52:b0:d5:14:7c:
                    47:1f:f8:9c:ad:bc:d4:9a:ea:76:14:41:d2:96:71:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:99:7C:2F:0D:E2:E4:A6:6E:A6:96:3B:CC:45:10:93:42:CA:B4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af473e5b-110d-3f76-bfc3-36dc2d8d3769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.158.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:f7:29:21:c9:52:5a:9d:97:13:30:a6:91:6f:9b:8a:9b:
         e3:f9:95:90:c7:07:7e:a8:80:0c:d8:5f:65:fc:d0:be:6b:ad:
         9e:cb:dd:e1:2b:ac:ed:0c:3d:50:be:c9:d9:85:8f:b2:ed:9a:
         cc:a5:ee:6f:55:35:0a:c0:c1:49:71:3c:a2:d2:06:81:51:0e:
         2d:19:c7:8c:14:36:08:aa:66:22:df:eb:3b:2a:2e:f4:78:a9:
         11:db:31:16:e1:9d:2e:75:58:d1:8b:5c:d0:d3:02:e5:85:3c:
         c0:7a:59:26:ce:0a:b3:52:c0:4a:10:41:0e:43:33:a4:43:d0:
         0e:9e:db:38:bf:1a:85:45:a6:91:ec:f4:04:61:ab:53:81:12:
         ec:8b:f0:67:c0:d9:70:dd:a2:75:34:a0:6e:27:da:e4:f3:05:
         29:0e:3a:30:a5:1a:ca:40:15:6f:c1:fa:aa:d5:9d:e6:93:58:
         b1:5c:ad:c8:0b:6d:b1:11:eb:6e:9c:6a:86:2c:98:8e:22:61:
         bd:d7:7b:a6:d6:13:f0:0b:f5:d9:cd:fb:59:1c:d7:24:8b:53:
         cf:3c:cf:1e:11:19:6e:e0:38:54:c7:ab:65:8b:97:d7:b8:51:
         03:f2:51:81:53:7d:c9:99:3b:b3:b2:0e:36:e7:34:41:4f:4f:
         a7:5f:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:34:01 2024 by rpki-client on console-fra.rpki-client.org