Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07023894-53f0-3df2-a88c-620199a5b8d0.roa
File:                     07023894-53f0-3df2-a88c-620199a5b8d0.roa (raw, json)
Hash identifier:          mcC1UNFsmabnbH7jqGH+Z13wso3E5e7MCXEHoaydBYQ=
Subject key identifier:   23:CE:6E:08:4E:87:54:F8:86:27:51:EA:48:EE:B5:A4:CD:61:0B:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80C65AADAEB5036D5E3280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07023894-53f0-3df2-a88c-620199a5b8d0.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        71.255.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c6:5a:ad:ae:b5:03:6d:5e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=0831e074-3c1c-4a2b-b1a7-7875ad57bdfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:45:3f:ed:28:ad:4f:b4:dc:d7:41:b8:68:
                    bd:4f:85:e4:41:85:00:30:8a:72:73:86:eb:db:95:
                    c7:62:40:ea:bc:24:e2:0a:26:b1:d5:8a:bf:1a:8a:
                    b5:41:74:8d:94:dc:f7:2d:67:4e:f3:dd:fd:2d:7d:
                    22:ea:1c:ed:52:4f:b1:ef:09:2a:e4:3c:d5:14:71:
                    33:e0:f8:e2:c4:4f:6d:22:7e:7d:77:93:d3:2d:c6:
                    c0:24:de:e2:e0:8c:c3:4a:f0:c8:53:b6:93:90:80:
                    60:96:01:47:2c:fb:be:ee:cc:b2:35:ae:71:95:83:
                    f0:8b:69:0c:37:fc:14:2a:a6:0b:6d:b5:7f:cf:0d:
                    16:4a:57:35:02:af:de:f4:f5:af:42:94:7b:04:08:
                    77:3d:0f:a7:ec:5e:16:26:d5:18:a9:e2:46:c5:05:
                    05:77:a3:d2:47:d8:fe:38:b4:c0:7d:a0:39:f1:8d:
                    ef:65:ce:e6:5b:ae:33:87:94:bf:65:dc:31:1c:e5:
                    35:c5:f4:12:f0:41:62:4f:8a:1c:15:26:b0:4a:14:
                    fb:24:18:75:8a:0c:88:ec:93:90:7a:71:d3:56:4f:
                    7a:5a:6d:4c:1c:38:08:c3:bf:8a:cd:ad:42:6b:43:
                    d6:60:5d:78:21:16:a7:de:5e:28:7d:40:2d:7c:55:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CE:6E:08:4E:87:54:F8:86:27:51:EA:48:EE:B5:A4:CD:61:0B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07023894-53f0-3df2-a88c-620199a5b8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.255.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:66:dd:ff:43:2e:a1:a1:1d:8e:ab:6b:d2:72:84:e5:40:c6:
         76:6f:f3:9c:a5:8b:b4:80:ce:02:dc:42:8d:de:4f:ab:8f:b4:
         c8:68:af:34:81:46:44:4a:6b:b9:17:a0:02:b6:4a:34:6b:33:
         00:c5:a8:f8:f8:37:35:b2:7a:ac:75:3f:9b:52:e5:bf:71:2c:
         af:5f:e8:d6:60:25:dc:c8:cb:80:64:da:97:16:05:00:3d:06:
         e9:c5:9d:fd:e2:91:09:29:0e:d7:56:e9:9f:4a:de:54:08:d6:
         e1:7c:a2:25:fb:1f:1a:6d:23:8a:3c:09:6a:0e:27:af:7a:10:
         8c:06:9e:c3:94:f2:f2:25:ac:65:b8:1f:21:4b:d7:74:c3:e2:
         6f:e0:67:95:6f:16:98:d3:d7:2a:5e:b1:9e:41:e5:e8:74:11:
         02:80:11:c3:7f:29:c8:ea:cf:c2:6c:ae:5c:2a:2f:f8:ef:4c:
         99:91:1d:b0:a0:1b:3c:b8:62:b3:52:fa:05:f3:a8:bb:24:b7:
         c4:f8:b8:83:b1:5f:4e:13:92:47:e6:a4:77:7b:5b:eb:37:94:
         55:e3:0c:4c:71:39:fe:b2:f7:0b:f8:bb:ad:06:98:75:c3:d0:
         da:c1:66:16:79:e4:3b:0d:60:11:b3:a0:f6:f8:f2:92:70:7b:
         0a:2c:c8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:09 2024 by rpki-client on console-ams.rpki-client.org