Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f00c346c-75e0-3e49-91a2-0c66fb1e8317.roa
File:                     f00c346c-75e0-3e49-91a2-0c66fb1e8317.roa (raw, json)
Hash identifier:          MyBPrvMIBSN++M1InSNsZukhK4NI0N1v6d31AqPwORA=
Subject key identifier:   EC:C6:CE:53:FA:19:D9:69:53:50:8A:75:75:1F:BA:5D:83:07:D6:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC93EBAB0F39961754FE840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f00c346c-75e0-3e49-91a2-0c66fb1e8317.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        151.204.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:3e:ba:b0:f3:99:61:75:4f:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=5010c1de-dcf7-49dc-bcb6-74ccf0e03e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:31:e4:18:29:b5:1f:c0:1d:bb:58:ff:1f:
                    1d:f2:4c:c1:89:9e:39:02:90:25:36:ed:b1:8a:da:
                    4d:fa:ca:08:42:5f:5c:5f:0f:63:a2:a4:bc:34:f0:
                    08:72:71:73:96:dc:50:46:68:8a:c9:48:74:b9:66:
                    5d:42:4d:b2:6e:26:57:29:73:f5:bf:b1:6a:39:e0:
                    21:b4:a6:42:89:80:9f:85:b2:aa:87:aa:ed:2a:75:
                    ee:fa:99:62:7a:c2:7f:ff:9d:b6:a5:17:29:a0:db:
                    0d:44:f8:46:64:bc:06:6b:b3:e4:2c:dc:95:d3:bb:
                    e1:18:22:70:36:b9:f1:b3:e4:7f:24:ea:8c:5d:6d:
                    9f:94:44:01:94:ce:ea:a9:44:ce:9e:37:50:41:59:
                    aa:0c:6d:d0:ce:44:4d:cc:cd:0e:3a:7a:5a:01:d2:
                    6c:d9:55:b4:84:b3:e3:aa:d5:7e:a4:79:18:51:ce:
                    dc:39:a0:17:61:4f:d1:5d:7e:9f:dc:b6:59:4d:22:
                    0a:0e:1a:c0:45:04:65:58:51:5f:ca:fd:48:73:24:
                    40:d0:ec:b5:72:a6:90:d4:b7:4b:51:6d:fd:8c:4b:
                    2a:11:dd:80:43:3e:d3:9a:12:48:86:a7:82:eb:8d:
                    67:86:9e:09:4c:89:ac:b3:3f:b9:51:6b:a7:1d:eb:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C6:CE:53:FA:19:D9:69:53:50:8A:75:75:1F:BA:5D:83:07:D6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f00c346c-75e0-3e49-91a2-0c66fb1e8317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.204.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:77:cd:5d:35:67:77:d0:9d:e9:01:ef:03:98:94:c9:6c:f3:
         9b:fb:86:0d:10:e6:7a:d5:1c:5d:ee:5c:26:e9:e9:83:d7:76:
         ca:91:54:c2:67:7d:cf:8b:8e:ea:8e:62:39:7e:4e:d3:1b:69:
         1f:ea:92:48:3f:2b:03:90:51:e2:ba:ea:27:6b:07:4b:3c:b9:
         64:b7:19:13:ea:22:43:9a:5c:85:42:12:7b:ac:1d:51:e6:1a:
         6a:94:c3:6b:10:51:db:59:b7:8d:e2:ae:b4:c6:97:bd:10:1e:
         0f:23:13:14:22:ff:2d:f8:4c:47:f7:98:80:ab:cc:92:74:fd:
         e8:b6:09:20:4c:18:cc:34:f9:1d:40:bb:b1:9a:14:0e:ba:e8:
         ef:9b:43:97:a3:b9:6e:d2:ae:18:dc:ae:1b:da:e3:3b:a5:ea:
         40:54:de:c0:57:42:b4:6b:33:92:5c:49:08:62:c1:92:13:f4:
         79:7b:00:03:f6:89:60:2f:98:6c:a5:8d:43:e8:55:be:0b:e0:
         e1:f2:bf:d6:09:11:16:b1:f5:5d:e6:35:49:fb:8d:cf:e8:1b:
         38:aa:e5:57:ff:df:61:47:c7:84:b4:f9:bf:f6:ea:69:97:ae:
         41:15:fb:24:9e:57:5f:a3:69:aa:b2:9a:c2:67:ef:6a:a3:b0:
         89:ee:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:34:04 2024 by rpki-client on console-fra.rpki-client.org