Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02f5f776-970e-35fe-95b0-5023025edc9f.roa
File:                     02f5f776-970e-35fe-95b0-5023025edc9f.roa (raw, json)
Hash identifier:          yR7FDqvOlj2KEp7ptZ2h8nWuiuqd8nURbk+wKvtSP58=
Subject key identifier:   43:9B:8E:F4:01:0E:E8:00:88:74:95:9B:23:B0:0C:69:E8:D5:26:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B933ABC711CE3745C5480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02f5f776-970e-35fe-95b0-5023025edc9f.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        71.184.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:93:3a:bc:71:1c:e3:74:5c:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=c3a8b606-334d-4eba-8890-a3bd005645cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:c5:78:43:52:12:7e:a7:3b:ec:9d:fb:43:
                    f7:74:ff:70:87:55:77:9a:ef:87:f1:1a:8a:74:f0:
                    f9:56:eb:fd:a6:25:77:f0:bd:db:97:13:78:db:25:
                    29:2c:cd:52:1d:17:be:85:37:39:5a:01:cc:1e:c2:
                    58:9f:fc:53:01:38:41:ab:8c:b3:d1:57:2f:7e:8e:
                    3b:67:d9:c4:76:31:34:c7:95:21:60:dc:44:7b:7b:
                    16:e6:eb:85:e1:18:99:08:19:38:74:db:6f:3a:f5:
                    fb:52:7b:4a:49:b7:dc:ad:5d:39:68:67:47:6e:9b:
                    af:14:f2:49:88:8e:ee:f2:74:f4:61:ae:47:7d:3a:
                    e0:04:82:3d:88:f3:47:6b:27:fb:35:86:cb:2c:b0:
                    1d:5c:ae:9e:80:7a:db:84:b0:15:94:80:54:1f:0f:
                    c7:e2:6e:3b:da:ae:d3:4e:6b:96:c5:98:f2:fe:1d:
                    53:9a:45:e6:6b:4f:5e:f2:57:38:f4:6b:75:cf:91:
                    6f:ef:d7:3a:39:39:6a:f6:96:3b:d4:a9:3c:79:3b:
                    50:bf:25:10:74:70:62:58:01:34:88:93:04:19:c3:
                    d2:05:15:98:d3:ae:e5:70:43:d8:b7:07:d9:56:4d:
                    a2:2d:55:7f:22:db:26:b1:dc:bd:27:15:65:b3:d4:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9B:8E:F4:01:0E:E8:00:88:74:95:9B:23:B0:0C:69:E8:D5:26:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02f5f776-970e-35fe-95b0-5023025edc9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:31:36:82:99:e3:73:0a:09:38:59:d1:3a:75:0a:46:d0:
         60:6b:4e:87:ed:32:d9:70:43:3b:87:c6:f5:3a:62:fc:5d:27:
         40:92:7c:43:f6:22:6e:20:61:ee:09:dd:c1:04:ca:ba:34:18:
         7d:5b:dd:4f:c7:f9:25:9e:03:fa:1c:65:3c:e2:c0:76:c5:f6:
         65:2e:88:fa:49:3a:97:fd:de:a3:85:bf:5e:4f:2d:bf:59:4e:
         6d:50:1a:62:f0:1e:b6:4b:73:d2:65:de:5f:42:e7:78:cc:ed:
         45:ba:9b:d3:b7:f0:9b:66:98:ea:69:3b:cc:47:ef:60:4f:7c:
         eb:f0:7a:0e:17:02:cf:e6:02:33:62:25:90:93:e3:c8:fd:fb:
         74:01:f0:56:66:00:11:79:d6:25:0e:2c:f5:64:e6:76:4a:0c:
         c8:94:6c:5e:2b:69:b6:b7:c0:7c:1a:20:3f:ea:10:f6:42:e8:
         ee:2e:2f:2d:63:40:f8:09:8d:d0:c0:31:a5:22:3d:64:47:d6:
         60:e5:af:b3:f4:e8:12:bd:87:06:0a:c4:0b:96:7f:1e:96:1e:
         c8:9c:4e:3d:4b:ed:81:d0:fd:ad:87:32:fa:14:0f:00:60:d8:
         e6:4d:f7:0c:bb:2e:e8:15:6f:e8:c5:e3:fa:b1:d0:c8:10:40:
         89:55:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:14 2024 by rpki-client on console-fra.rpki-client.org