Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa
File:                     0600e2b0-1534-35e7-a21f-922488a91329.roa (raw, json)
Hash identifier:          yBX5F3c39gFTeCEBpxzRy/caQLeLMHqaq5OXQcrA2sY=
Subject key identifier:   F9:17:2C:9C:C1:47:76:2A:39:76:7F:F6:A9:F7:7A:11:7D:8F:11:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845840DD2516BDF7B88EFC9D080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        204.51.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d2:51:6b:df:7b:88:ef:c9:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=88b0d404-2618-4e8e-9940-b3c55d0aa3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:cf:86:3b:52:2d:e2:00:c8:a8:1c:e4:dc:
                    c9:7b:06:d1:ab:3d:99:d6:24:e6:95:0b:a7:ea:55:
                    eb:13:19:63:7f:56:81:0a:c3:68:14:b3:ce:b0:c2:
                    5f:a4:a3:d1:69:9d:76:03:b4:ec:73:ba:29:9a:bb:
                    06:8c:f2:4f:2e:48:47:03:d6:a4:b0:9c:b9:6e:9e:
                    6a:93:d9:e2:b1:ed:ee:fa:68:51:8f:8f:4b:4a:9b:
                    36:26:35:e2:b4:47:bb:af:d6:1e:e0:18:f1:94:9a:
                    30:ea:56:cd:70:f1:a0:a4:6f:83:33:23:01:cf:1b:
                    ee:14:f9:c2:f4:e6:a8:6a:d5:8f:c6:1b:c6:1d:df:
                    d5:c3:ec:2a:a2:7c:80:b3:48:1d:51:87:36:19:8e:
                    7c:c0:3e:69:49:a3:26:24:2d:0f:dd:ac:d6:47:47:
                    bc:da:4d:d0:b5:90:0f:f8:55:7e:79:7f:d6:87:3d:
                    25:e5:45:70:f6:70:8f:a4:d9:a3:b7:e9:e4:da:92:
                    c3:37:37:bd:bc:1c:60:e1:b8:94:84:4b:d1:ab:d2:
                    33:83:14:96:9d:16:40:2b:2d:cf:0f:4f:8d:7e:78:
                    c0:43:50:10:70:d3:b8:94:f9:f0:b3:db:04:da:da:
                    90:c9:41:39:2a:9f:3a:f7:ca:03:7f:14:40:ab:c5:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:2C:9C:C1:47:76:2A:39:76:7F:F6:A9:F7:7A:11:7D:8F:11:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.51.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:b1:73:2f:92:20:8a:4b:ac:15:64:87:94:94:64:17:0f:
         38:e2:83:ca:8d:7e:9a:2b:b3:5c:38:46:b5:f6:00:3d:c6:10:
         fc:10:88:0f:93:4b:0c:59:42:36:db:40:d7:ae:c3:8c:05:a3:
         66:83:4d:c1:ff:d3:60:b8:7b:5f:12:f2:bd:9c:c0:0e:c5:53:
         7c:7c:dc:c0:6a:7b:a0:5f:e9:d9:3a:d2:4e:63:5d:95:5a:69:
         e7:41:0e:53:c4:2a:ba:fd:2e:d8:07:74:41:8d:26:a6:c6:59:
         f5:90:c9:96:b2:96:72:ab:f8:13:8a:16:d5:54:ca:71:2f:fb:
         8b:7d:58:cb:5b:2f:e5:56:02:7b:c9:3a:99:a1:c3:46:8f:f5:
         10:86:7b:d7:ec:e9:81:ae:38:39:f6:e2:f6:94:7d:2f:db:e1:
         51:88:85:17:63:1f:f7:3c:60:6d:80:d0:bf:77:95:81:b3:f7:
         00:f3:ba:80:ba:e8:78:ad:22:b9:af:a0:61:53:ce:f0:2c:0b:
         49:f8:63:69:c8:c7:d0:a3:c8:2f:09:c3:d3:2f:4f:0b:9a:74:
         03:5e:43:ef:5b:f3:a8:7d:bb:b1:1c:0c:ad:19:2c:42:35:f9:
         69:bd:de:f1:57:7d:93:7e:2e:de:2c:6b:94:7f:9b:9b:eb:0c:
         a1:2c:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:17 2024 by rpki-client on console-fra.rpki-client.org