Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa
File:                     03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa (raw, json)
Hash identifier:          4GprXoaW83IM8en2WBz1zsg/IMKAu4kQXSj6su7oPog=
Subject key identifier:   6B:2F:2E:E9:60:18:45:9F:1E:91:55:21:6B:DD:33:D0:80:12:8F:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B9728DD220FF924458920
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.50.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:97:28:dd:22:0f:f9:24:45:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=664b7c21-a944-405e-83b5-103f30f6d709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:bd:a5:88:17:e8:80:9b:10:ff:82:a0:8b:
                    24:02:df:8c:5a:51:ae:53:97:b7:9e:0d:a3:12:3f:
                    6d:55:54:22:40:60:ad:8a:1d:85:ed:89:eb:6a:a2:
                    0b:fa:9e:1c:7b:c8:6f:d8:b4:76:4e:f1:7c:f2:49:
                    e5:c9:a8:93:1a:10:dc:d2:38:ff:e3:a7:3b:75:53:
                    58:15:cb:42:29:a4:6e:3c:90:87:7a:49:cf:9b:5c:
                    5a:5e:c6:42:88:4b:e7:55:93:c7:17:5e:a7:2b:51:
                    b7:b2:bf:1c:d8:91:cb:b5:42:a2:8e:f0:4b:60:da:
                    df:47:a6:b4:c4:03:9f:d4:76:14:74:05:55:3e:55:
                    1e:5f:e1:5e:f8:83:28:9e:2b:c2:c8:7e:0b:61:6f:
                    d1:cc:e5:07:a9:cf:db:43:c9:c6:00:b3:f5:a2:96:
                    40:7e:77:85:c0:ad:39:8c:99:9e:da:f7:d0:71:38:
                    e3:7a:63:7f:52:04:99:8f:d6:17:1b:47:1f:25:28:
                    ad:db:ac:82:0e:da:72:6d:5d:84:ad:5e:a6:d1:81:
                    ad:0b:09:e5:9c:de:84:7c:37:15:f8:30:22:93:e0:
                    93:0c:1c:e9:ac:f8:65:8a:5d:1c:4a:3e:64:3a:6f:
                    08:ce:63:65:b2:23:bc:29:fa:a0:87:82:65:f0:46:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2F:2E:E9:60:18:45:9F:1E:91:55:21:6B:DD:33:D0:80:12:8F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.50.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:95:15:b5:c4:2a:18:42:cd:1d:33:ca:11:63:6d:e0:04:
         61:8c:1e:13:32:f6:c7:1a:2d:50:ab:0f:13:59:e9:e5:da:8c:
         f6:5d:90:f4:29:69:1d:e6:47:2c:ae:eb:42:b0:d0:8a:31:4c:
         f2:c2:60:f8:ee:be:b5:89:e0:70:ed:0d:df:5d:80:cb:51:d7:
         0d:ea:36:20:b2:d6:32:06:b5:e5:85:e3:30:ce:26:5a:46:77:
         9a:10:6e:a4:28:49:9e:c8:2d:01:2e:a7:43:15:85:a5:52:bf:
         45:2c:b5:e9:f1:81:b9:c7:c3:b7:44:96:c6:59:b2:f0:99:95:
         27:95:1a:67:0b:a1:d1:94:85:2f:fa:a9:47:65:d5:95:8f:dc:
         70:16:63:5a:26:3f:e2:e6:92:24:43:78:8d:de:48:7e:98:19:
         fa:36:41:b7:a0:2e:58:8e:d8:d9:8d:11:28:06:59:b2:b9:60:
         34:a8:a6:7b:39:2b:c4:36:35:b7:19:c5:e9:75:fb:ea:5b:44:
         bd:b2:3a:74:db:c9:53:d9:fa:6a:09:88:7d:fc:7f:fb:c8:00:
         70:5d:67:c3:6c:aa:81:07:7a:00:c6:ad:f8:a7:ba:57:03:10:
         ad:0d:2e:28:33:0a:af:04:99:b3:dc:c1:bd:da:2b:2d:37:4a:
         d5:2e:0d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:09 2024 by rpki-client on console-ams.rpki-client.org