Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/070c2409-8174-3d29-b122-59ec699c8216.roa
File:                     070c2409-8174-3d29-b122-59ec699c8216.roa (raw, json)
Hash identifier:          1i75WMsd4u0SnwzKm6F33HgoaVU96+mw6dyDKsdDGw0=
Subject key identifier:   C5:55:D9:06:E2:31:13:49:FD:2F:AE:F6:36:EA:C6:2A:9F:9D:5F:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8AE2D653F282A372B7F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/070c2409-8174-3d29-b122-59ec699c8216.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        141.156.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8a:e2:d6:53:f2:82:a3:72:b7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=6b352ded-c186-44fa-b183-5b541e4ecba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:2b:a3:a4:c9:dd:1b:90:80:fc:27:90:7d:
                    ce:fb:10:ef:97:21:9f:4c:ac:e8:be:60:ba:56:e4:
                    bb:0b:6e:a8:8f:d0:50:2b:1b:c3:c1:f6:b9:68:8e:
                    11:83:01:ab:bf:dd:24:be:72:fd:5c:cf:47:aa:57:
                    5b:a5:92:01:cf:ee:39:e7:90:55:7f:e9:9d:e6:d2:
                    b7:64:48:b4:1f:fb:c0:02:58:bd:39:40:37:48:50:
                    ce:9e:82:dc:9d:3b:d2:07:de:c0:56:98:ee:64:56:
                    e2:15:2d:89:2e:41:a5:40:94:dc:dc:23:e9:35:16:
                    3b:59:25:81:df:4c:ea:12:0d:96:7a:17:b5:17:37:
                    5c:ad:70:54:30:b2:0a:13:92:79:c4:d3:a2:1d:68:
                    1e:2d:dd:64:c8:6e:62:28:9c:3c:fb:c8:62:a6:19:
                    b8:62:5e:69:bd:ad:83:89:42:0a:a4:b9:78:32:c7:
                    28:63:16:77:08:7f:69:c7:df:29:b2:16:10:01:30:
                    f6:65:dd:1e:12:b1:94:b8:80:9c:35:a7:b1:97:b6:
                    eb:be:80:ce:36:af:0d:76:26:4b:f7:02:31:c8:56:
                    20:16:d5:cf:60:74:21:b8:e4:94:4a:e4:cf:8e:4e:
                    f5:be:a6:0c:96:f6:43:f1:d2:8b:19:71:0c:ad:e0:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:55:D9:06:E2:31:13:49:FD:2F:AE:F6:36:EA:C6:2A:9F:9D:5F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/070c2409-8174-3d29-b122-59ec699c8216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:db:7b:64:d1:38:66:38:13:9d:17:61:09:4e:ff:7a:4c:6d:
         cd:c9:b1:c8:b5:05:4e:0d:f9:cc:82:fb:9c:30:44:9a:c4:c6:
         a0:bc:55:59:32:f0:97:60:ea:36:03:52:00:17:4f:0f:72:15:
         0c:b0:c8:b7:69:f2:f0:91:f6:38:ed:e9:5b:9e:06:15:a5:93:
         99:4d:76:97:24:39:57:2e:bd:42:22:de:f0:21:f5:f3:33:4d:
         55:6e:6f:1b:33:03:2c:53:c8:2b:f2:7f:18:de:ba:bf:d5:f8:
         11:4c:18:02:87:d0:56:c2:37:0f:43:ec:dd:c4:ff:cc:43:f6:
         ea:47:68:30:a3:a2:2f:2c:f6:35:0d:ef:b1:e9:50:eb:3f:25:
         90:fe:53:95:5c:1d:eb:b6:92:63:e8:b4:be:86:29:8a:f1:b4:
         da:86:63:da:18:73:1c:82:24:6e:6d:b6:ca:1f:ec:86:08:ee:
         69:32:71:da:af:4b:cf:4c:e5:79:bc:be:dc:0a:1c:18:c0:df:
         f8:47:15:44:33:7c:1d:82:e8:57:a3:f4:a3:d3:16:33:80:32:
         65:c9:cb:d1:a8:af:af:8e:e0:fb:ef:a7:15:95:ec:43:ad:fe:
         f2:c6:ec:af:11:80:e8:c4:68:06:1d:af:75:f8:13:e6:b5:26:
         ca:cc:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:15 2024 by rpki-client on console-fra.rpki-client.org