Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda745-586f-3cd7-b25e-02e30596f92d.roa
File:                     01cda745-586f-3cd7-b25e-02e30596f92d.roa (raw, json)
Hash identifier:          sBaV9Uo9j3+UF5TSVh6TxsfivJuM3gSRIZrEtDbIQ8A=
Subject key identifier:   AE:15:D6:57:BE:BB:7F:84:AF:03:16:05:37:2F:E5:41:03:35:AA:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A47065D35B971B7FF240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda745-586f-3cd7-b25e-02e30596f92d.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        108.22.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a4:70:65:d3:5b:97:1b:7f:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=3e7f629f-6138-41a2-b7f9-3bfc618b3f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:39:2a:99:1a:05:32:71:a1:c0:06:6c:bf:
                    21:a0:01:e1:bd:d2:1f:ba:6c:d9:10:38:23:9b:3f:
                    0a:66:cc:92:0d:6e:68:aa:79:5e:e2:d8:84:61:84:
                    43:b5:10:29:9e:d5:13:1f:60:7c:7c:c7:14:89:ef:
                    ad:31:26:ab:f6:da:69:e1:09:83:fe:e6:3e:d4:92:
                    3b:ed:d5:d5:eb:7e:9f:85:a5:08:3c:fa:23:66:84:
                    6e:ba:94:11:d4:79:4e:de:4a:0b:f1:a3:91:96:ba:
                    7c:fd:b8:65:aa:5e:64:04:8e:94:b8:10:25:28:3b:
                    08:3b:a1:2f:58:6e:ab:77:71:7c:92:6b:51:99:66:
                    e8:22:17:e4:b6:a3:de:5f:0e:20:48:98:78:05:46:
                    fb:fa:58:63:d9:fd:71:8d:6e:7a:0a:a7:05:8f:68:
                    aa:cc:fa:5e:84:5f:a8:22:0c:67:e2:b1:45:c8:3b:
                    12:c4:b7:2e:41:15:96:22:8d:d9:36:88:a0:47:62:
                    a4:43:49:05:d3:97:f0:49:85:3b:49:20:b1:df:62:
                    ee:13:10:43:3c:f1:2f:08:81:a1:ea:80:3e:2d:a5:
                    4c:8d:8d:97:a8:8e:9b:f8:8c:3c:f1:c5:af:21:d3:
                    bd:21:19:d3:7b:45:8a:3c:ce:a8:97:06:c8:62:3a:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:15:D6:57:BE:BB:7F:84:AF:03:16:05:37:2F:E5:41:03:35:AA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda745-586f-3cd7-b25e-02e30596f92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.22.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:62:00:6e:66:9e:33:aa:67:44:2a:4b:fa:c9:ad:99:65:
         e3:be:6f:aa:03:85:a0:b2:67:48:2d:d7:ca:e7:b9:4b:f4:55:
         4b:cd:49:e6:a8:66:0a:ea:ea:2d:4a:8f:7e:c3:fb:f9:b2:e9:
         3f:14:fc:b4:ad:0f:58:c3:7a:1a:8a:81:a0:55:bb:6a:da:e6:
         be:88:01:d4:76:96:34:61:d9:ca:7a:93:e2:5c:2a:cf:03:ef:
         c3:5d:9f:33:03:80:1f:7b:6a:a8:1d:3d:10:c8:5f:2e:fb:fe:
         2a:7c:79:0a:ae:9f:d1:8f:3c:fc:8d:78:ef:c8:b7:1c:7a:f1:
         37:13:d1:1e:7f:7e:62:d3:72:42:4b:b8:8a:5f:a0:8d:87:fc:
         53:d7:70:e8:b5:d1:d9:05:62:f6:aa:39:e2:28:f1:6d:cf:05:
         69:0e:d6:13:fc:00:db:4a:4a:6c:a4:92:91:bb:2b:36:ce:08:
         a1:d5:ba:9c:50:d8:16:99:3f:45:57:ae:a1:f7:76:57:05:d6:
         6c:56:5d:4c:88:5a:f9:ac:38:00:df:56:64:f9:b6:ae:7a:56:
         8e:55:b4:eb:33:b7:4a:e6:4f:c0:d5:15:c2:d5:ce:a6:1f:ed:
         57:c7:72:b1:0a:d2:f5:19:ff:46:41:43:4a:55:bf:f9:ba:c1:
         c1:a8:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:17 2024 by rpki-client on console-fra.rpki-client.org