Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1528e5b2-3347-3780-9ee5-b0c0983a2553.roa
File:                     1528e5b2-3347-3780-9ee5-b0c0983a2553.roa (raw, json)
Hash identifier:          MtPpToYzc+UDWNaJ5ASllFqfgJECEXltroy7OIDI76A=
Subject key identifier:   4A:B8:7B:32:97:3B:AF:81:D9:05:BA:D2:40:D8:78:B0:34:0C:08:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80C8ACCBDDB4A1EEEF4500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1528e5b2-3347-3780-9ee5-b0c0983a2553.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        71.127.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c8:ac:cb:dd:b4:a1:ee:ef:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=1ff3fcde-45c2-4c01-9af4-b5914ad7242c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:ab:cf:05:54:c0:80:3e:76:c9:bf:a0:25:
                    54:5b:d9:bf:86:f1:2d:b9:69:ee:6d:b0:be:51:a9:
                    d7:eb:47:d9:57:a7:94:1c:30:48:8d:a3:5a:66:9a:
                    25:d0:bc:63:84:e9:ad:7c:04:30:4c:36:fb:26:9c:
                    5f:c1:c7:1d:67:77:e0:22:eb:d5:ca:e9:81:4c:d0:
                    5d:26:78:5a:e2:94:a1:3e:e7:c1:c8:35:20:4f:35:
                    41:8b:37:3c:62:e1:7d:5b:82:e8:cc:4c:95:12:99:
                    69:97:15:3c:34:e4:12:13:1f:58:c9:4b:76:8c:69:
                    f4:fb:96:3a:7b:e0:df:17:48:43:8a:f8:9b:46:d4:
                    3b:b2:cb:73:6a:d5:04:fe:12:7b:21:bd:bb:cf:56:
                    35:91:3b:94:f4:5d:aa:59:d6:a6:24:1d:4c:09:d0:
                    46:54:f5:f2:f8:4b:df:3b:e0:94:bf:e4:69:a3:6a:
                    2c:03:50:4d:04:f6:27:67:1a:2c:bb:3f:55:a0:69:
                    50:54:c6:4b:86:b2:7b:37:fe:3b:5c:b3:97:99:22:
                    5e:6c:3d:a0:16:b1:d6:fb:a6:a1:81:6b:4d:8d:81:
                    52:fd:2b:b4:30:f2:b8:c7:0a:dd:b8:ca:25:d7:c9:
                    36:20:2f:bc:1b:01:62:cf:1e:43:1e:49:f7:27:e5:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B8:7B:32:97:3B:AF:81:D9:05:BA:D2:40:D8:78:B0:34:0C:08:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1528e5b2-3347-3780-9ee5-b0c0983a2553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.127.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:54:ea:33:d6:62:57:00:10:a4:a3:d6:b9:95:f6:5c:4f:
         b4:fa:a6:8a:22:d3:a4:f1:3a:c1:64:14:9f:27:b0:1f:d4:94:
         93:64:19:7b:81:1e:8c:08:d6:ff:cf:0d:9a:07:89:d2:d3:9d:
         83:cc:48:4e:0b:71:44:bc:68:33:c0:1b:de:88:52:48:71:d5:
         fe:8a:82:b6:59:bf:2b:c5:6f:98:d7:34:a9:79:6a:92:7e:ab:
         c2:83:3e:e3:42:05:d4:9a:b2:f2:12:0e:6f:fa:e9:9b:65:1d:
         95:ef:5a:3c:c6:62:fe:db:a1:dc:ef:f5:25:f0:00:7e:0f:0c:
         80:96:44:b6:8f:53:f6:e0:93:19:83:be:75:d9:ac:94:b8:7e:
         65:f2:03:29:94:6a:22:9b:27:b8:28:f5:13:1c:f0:13:53:16:
         65:18:59:6d:85:ea:11:ba:5f:c6:58:5b:e5:fc:f2:83:3a:dd:
         38:cb:47:e5:d7:fc:e1:37:8b:cc:65:e4:63:26:5c:12:37:ae:
         25:a9:17:6f:21:2e:19:de:cc:1f:f8:8a:41:4b:56:20:4f:3c:
         f7:b3:11:bc:21:e3:08:00:b8:6b:f4:93:25:32:af:4a:29:5e:
         2b:d6:b7:9c:c2:d9:1f:30:df:ae:ac:01:02:9d:b6:15:9a:44:
         2e:5d:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:18 2024 by rpki-client on console-fra.rpki-client.org