Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa
File:                     0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa (raw, json)
Hash identifier:          fSE8aveAgZYwjOI6kpr1pcsaXbnYgfmifomywGk64SE=
Subject key identifier:   65:F3:F4:BB:C2:E7:D6:25:F7:3C:7C:F6:A3:29:81:A7:9A:7D:3A:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD29EC38D84628E635A78
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        70.23.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d2:9e:c3:8d:84:62:8e:63:5a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=4f9f3be4-1033-40c0-ba90-736fde8ce0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:2b:2e:1c:9c:41:4a:0d:88:bf:4b:3e:99:
                    5d:19:d7:1d:b3:2e:c7:37:c1:b6:4d:44:4f:f1:a0:
                    09:d0:2a:5d:e3:ce:19:14:af:9f:65:c3:99:59:36:
                    5a:fb:af:43:45:a6:bd:ac:5d:99:b0:e2:43:e4:2c:
                    04:66:05:3a:92:59:ee:06:e4:4d:76:d4:1a:da:35:
                    e2:ba:ce:ce:44:a9:08:10:72:83:7d:2b:30:16:06:
                    18:a6:2f:31:2a:dc:c7:60:a3:4e:f1:90:11:8b:12:
                    14:1b:5a:01:ac:82:35:97:a0:a6:13:d0:a0:12:9f:
                    a1:55:c3:04:6a:13:e1:01:4f:b9:18:97:93:81:b0:
                    a7:ac:ff:0c:28:0c:f4:64:07:9a:df:61:33:8a:54:
                    6c:6d:33:68:51:ff:9a:0c:ec:5d:91:7d:81:39:da:
                    39:d1:3a:74:76:b3:ec:ce:01:a0:12:2c:35:af:46:
                    be:e0:fa:88:95:cd:58:5d:7b:be:3b:56:b9:21:4b:
                    92:30:ee:4e:80:8d:9c:b1:83:ed:be:40:7f:bf:a9:
                    2d:e2:ed:00:8b:78:8d:8e:42:cc:ef:23:02:07:af:
                    08:ed:85:30:6d:0d:94:69:02:cb:27:97:df:99:99:
                    c3:ab:d5:39:62:01:bf:5f:a8:4d:e3:b5:b7:64:77:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:F4:BB:C2:E7:D6:25:F7:3C:7C:F6:A3:29:81:A7:9A:7D:3A:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:7f:2a:d1:21:32:39:d1:fc:ea:a8:96:6f:b4:8b:03:26:
         b0:e9:9a:19:bb:68:cc:ee:9e:7b:0c:e4:40:3d:67:1c:c5:37:
         fa:74:7e:fc:05:7d:ed:3a:79:5f:58:45:3b:04:61:dd:f1:5e:
         b9:cc:b8:b2:a3:97:7e:56:61:5b:2a:7c:d6:23:23:44:5c:d5:
         37:3c:00:a9:39:4a:39:df:5a:9d:08:f9:db:cb:46:bb:68:40:
         ed:5c:1e:4f:1a:e6:5c:e8:59:57:00:8c:d0:fc:c4:71:a1:fb:
         48:b0:5e:9e:1d:71:18:2f:3d:95:39:9f:5e:53:b4:4e:a3:ac:
         34:65:af:00:b7:ad:68:87:e2:45:80:40:6f:5b:8c:ac:29:76:
         3d:ad:b5:54:5a:96:70:0e:63:11:7c:62:88:08:57:ae:28:62:
         55:7f:35:b6:78:69:4f:79:9b:90:a9:0a:6b:a6:d2:a5:84:ca:
         e9:9f:ba:a3:09:7d:ed:9a:52:b7:31:48:b8:3b:57:45:ba:ef:
         12:9f:ba:3d:1a:b9:ba:7e:62:92:f5:93:50:4c:1b:9c:d0:59:
         25:13:ab:85:18:ed:c0:2d:7b:2b:83:43:b7:46:1e:aa:c5:0c:
         8f:1a:db:7b:e0:23:8a:5e:8a:a5:7f:77:00:af:30:65:dc:d1:
         40:5f:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:11:29 2024 by rpki-client on console-fra.rpki-client.org