Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
File:                     d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa (raw, json)
Hash identifier:          b+ZNogIdGQhtu/dnvCSoJTiv+HKpeSu0X0j42tef2wg=
Subject key identifier:   CC:89:D9:45:1F:09:37:42:25:28:D9:9C:D7:02:A8:B7:C6:74:8B:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC93DFB59B8079AB2EA5A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        141.150.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:3d:fb:59:b8:07:9a:b2:ea:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=5bc11692-0491-42d1-8a63-a638dfb359fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:65:44:5f:d1:4a:26:47:4f:b6:0c:3f:7f:
                    e7:a4:d7:6a:63:f1:2c:84:b3:67:d3:7e:61:69:68:
                    2a:31:32:e9:d2:19:eb:ce:0d:53:b3:82:3f:40:79:
                    6d:44:59:87:d7:df:cd:e4:71:bb:1f:79:d6:c9:3b:
                    ad:88:f8:2b:00:ea:b3:e2:3a:26:ba:ec:00:f0:4a:
                    dd:23:3d:01:c6:6c:7d:cc:85:9d:d1:bf:76:fa:49:
                    5e:6a:0f:5a:8c:d7:9c:04:4f:bf:09:ef:b6:1c:63:
                    2a:0d:99:3f:df:d3:fc:42:17:ce:ed:e2:f7:06:6f:
                    c8:44:0e:10:9e:8c:b5:50:32:1c:94:98:69:cb:85:
                    96:1a:8d:19:b1:1f:a7:f1:67:d1:29:b5:14:ea:10:
                    96:28:77:06:07:f3:98:c0:a3:d7:7c:b7:d5:de:4e:
                    13:76:49:57:e3:06:9e:88:de:30:69:a2:82:68:bc:
                    bd:c1:08:9a:11:d9:db:3a:d1:97:33:78:b9:e6:10:
                    cc:b1:c7:a8:9b:94:cc:63:ed:95:b6:01:d6:56:18:
                    e9:c1:20:9f:cf:a1:79:e9:8b:66:1a:91:f3:5b:37:
                    73:d7:ca:66:32:8a:77:f3:4c:85:87:f1:2e:bd:b1:
                    94:f6:4a:35:42:4e:f5:f1:b4:cd:0e:7a:e3:97:a5:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:D9:45:1F:09:37:42:25:28:D9:9C:D7:02:A8:B7:C6:74:8B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:91:58:d3:4c:6f:97:fa:b1:83:ea:f6:86:57:e9:61:14:92:
         37:a5:2e:51:e7:de:a6:db:21:c6:2d:01:46:e4:12:01:79:c5:
         39:b0:42:7a:37:e7:b0:0b:04:39:a3:b0:e7:9e:bc:5f:4c:2f:
         bb:cf:bf:74:9d:23:75:d0:94:e0:db:66:cd:52:db:7d:f7:ef:
         db:a1:96:56:38:88:21:f8:4d:f5:e9:52:48:80:45:a3:4a:e5:
         dc:d9:b8:d9:46:dc:d6:6d:81:df:c7:78:46:43:fe:d0:42:5c:
         7b:75:05:25:ce:70:36:2a:47:c7:9d:2d:2d:ca:ca:e4:66:20:
         00:1a:a0:4c:4d:43:75:9c:fb:4f:ce:a3:82:75:f9:6e:9a:9e:
         e6:39:71:60:f8:c7:c5:e3:cc:31:75:10:1a:fc:90:22:72:1a:
         82:90:91:7c:1f:28:38:77:9e:ef:c6:1a:8d:69:1b:88:a3:03:
         b1:03:3f:b6:72:61:1f:a7:1d:0f:1d:45:fa:e8:b8:70:c3:a4:
         74:23:aa:f7:7e:25:ba:03:bc:b1:7c:77:dc:9a:71:46:d4:5b:
         0d:d8:22:dc:eb:92:48:1f:cc:ed:f1:db:b0:b0:4f:f6:e6:81:
         e4:5c:2e:66:37:83:3f:df:51:f4:00:ca:7c:28:68:9a:43:d3:
         3b:1f:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:29:43 2024 by rpki-client on console-ams.rpki-client.org