Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa
File:                     14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa (raw, json)
Hash identifier:          Amwq+b6WF8ujWNv+MF8iOMl+swzexqEYwFuSrTyYsyI=
Subject key identifier:   D4:F3:E6:23:B2:01:AC:7C:4E:77:E2:23:0A:4D:E1:E1:EE:B9:EC:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584570830BA1AB5E47F914ABBE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     20447
IP address blocks:        199.170.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:0b:a1:ab:5e:47:f9:14:ab:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=1fb9753c-8444-477f-9bb8-b723262d8f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:aa:7b:c7:02:e4:0a:69:40:f0:67:fc:24:
                    86:cb:89:aa:0c:c5:d2:6c:82:1b:31:26:a3:f9:78:
                    1e:3c:7f:10:22:cd:11:d9:e5:34:02:59:4d:9f:ee:
                    11:36:e1:84:8c:37:17:7d:81:cb:de:6b:e4:21:bd:
                    5b:4e:99:66:ac:4d:f4:85:30:d5:61:b8:fc:32:ee:
                    7f:87:d2:c8:60:c8:17:02:72:cf:4a:0f:cc:0a:cf:
                    7d:59:ac:96:0a:90:03:a1:26:54:f5:61:c7:b1:1d:
                    54:ad:f4:10:47:55:73:9f:a6:f7:41:6d:3d:6d:61:
                    b1:97:a9:c5:c2:93:0e:c0:ce:3c:c2:bc:bb:c4:a9:
                    ab:22:f2:35:f7:e6:16:2d:72:1b:03:f6:de:69:52:
                    44:64:08:1a:13:86:87:12:f6:2c:48:c1:17:62:c8:
                    cf:ae:d7:06:a9:69:76:1e:af:f4:be:1c:8e:6b:43:
                    3b:11:95:0d:55:b5:22:6e:2b:71:63:cd:c3:e8:93:
                    c9:94:cf:f9:95:ae:e2:24:81:22:c5:ed:c4:1d:72:
                    27:6f:1f:e9:65:9b:f6:7f:ac:a9:a8:30:ba:c4:5b:
                    38:84:a6:62:78:e7:96:22:da:02:d9:c6:19:1e:71:
                    10:ca:46:0c:61:eb:66:bc:de:f3:e7:75:e5:c7:71:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F3:E6:23:B2:01:AC:7C:4E:77:E2:23:0A:4D:E1:E1:EE:B9:EC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.170.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:f0:64:65:ae:2d:5d:1a:08:9b:f5:d7:1a:e7:48:41:ef:
         df:19:d6:bb:21:1d:79:d5:b3:56:93:37:cb:c2:dc:0b:b2:ea:
         c9:85:a5:c4:25:9d:e8:b0:73:ca:d1:ba:e3:5f:c0:b2:33:cb:
         0d:be:8b:46:1e:45:6d:a2:10:c3:0d:12:7d:22:75:8d:64:3d:
         f0:b4:d1:a3:05:a7:f1:1d:a2:fa:8a:65:56:24:1e:b1:5e:97:
         35:7d:cd:21:04:8a:60:25:99:17:c4:e9:4d:a1:e0:5b:36:4a:
         5f:39:fc:4c:f4:92:e8:d5:a5:ce:04:94:c7:38:94:2e:66:d5:
         72:e5:cf:d8:18:1b:9c:50:6b:67:9e:06:5b:9d:e4:1e:0a:76:
         3e:c3:d3:b8:0b:12:99:45:5f:c1:c0:94:b5:b8:04:49:6a:be:
         33:3c:a4:c2:3a:b0:68:13:8d:99:28:4a:89:16:92:80:87:38:
         6c:9f:34:ed:7f:40:3a:53:42:0e:39:f6:75:5b:a6:73:7e:2c:
         73:13:a5:56:d5:0b:ec:b2:35:f0:2d:21:8c:55:47:bf:03:6d:
         83:4c:ca:2e:49:6d:cd:9c:00:93:89:e8:4f:e3:c8:34:c9:1d:
         b6:34:d7:20:a2:2e:37:87:3e:eb:d7:0d:e4:77:d0:6e:8d:4e:
         ca:da:7e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:31 2024 by rpki-client on console-fra.rpki-client.org