Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/195155d1-965f-3cf0-aa8e-a32adab0f05a.roa
File:                     195155d1-965f-3cf0-aa8e-a32adab0f05a.roa (raw, json)
Hash identifier:          xkFZuXdBs3bs10RscRGg8ZXVxv7XbO5TxLeqQfG6cRc=
Subject key identifier:   B9:89:80:70:96:2F:D9:3C:D7:5D:4F:90:2A:2B:7D:28:DC:93:E4:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8BAF3482E19121C8A800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/195155d1-965f-3cf0-aa8e-a32adab0f05a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        173.76.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8b:af:34:82:e1:91:21:c8:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=df30e570-ab13-4b07-9483-858de0fa6b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:df:50:60:d5:40:65:18:f2:9b:82:0d:3c:
                    0f:c2:77:ad:ba:ed:f1:8a:c4:0f:b3:8d:0e:37:ce:
                    e9:0b:6e:85:b2:4e:3d:26:ba:88:ee:cc:1e:6c:e1:
                    a1:e9:81:f6:d2:20:19:4f:5d:d2:81:2f:6a:db:93:
                    53:75:f8:81:96:35:a7:28:59:ab:92:b3:e3:ce:9a:
                    3c:0e:00:59:2b:b8:67:b0:ae:2c:0c:6a:33:95:46:
                    5d:bf:08:9e:cd:67:9f:f0:07:e4:63:65:8e:6e:62:
                    19:4b:e5:1f:e7:bd:b4:32:a1:11:ef:35:ed:3c:fa:
                    26:6a:61:9f:0a:58:bf:78:b6:c5:60:40:e6:a1:74:
                    9e:f9:8a:8a:7c:37:67:1e:83:e0:b5:20:44:de:01:
                    d6:d4:ca:4f:7c:6a:e3:1e:c9:85:8a:64:5e:60:bf:
                    89:9f:e2:e8:9a:4f:b5:18:7b:21:b8:6d:6b:fb:88:
                    07:e2:53:23:3d:1b:f5:d3:b9:84:93:57:7c:63:75:
                    2a:38:0a:7b:f3:3e:5c:bf:62:85:1c:ac:3d:b9:56:
                    e9:1a:d7:a5:4d:1e:6c:6e:6b:5c:ce:65:6c:87:cb:
                    5f:4c:1f:c8:4a:83:1f:bb:24:51:42:8f:29:91:8b:
                    43:71:cf:f9:6c:1d:ad:0f:eb:d3:2e:25:99:f2:b9:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:89:80:70:96:2F:D9:3C:D7:5D:4F:90:2A:2B:7D:28:DC:93:E4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/195155d1-965f-3cf0-aa8e-a32adab0f05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.76.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e3:64:a7:9b:30:c9:04:51:3b:36:1f:fd:46:c9:b3:5d:83:
         88:b1:ab:ca:ab:b1:48:3c:92:4b:c6:9f:f4:92:c6:ec:65:24:
         0c:b2:25:5f:2e:71:03:6b:50:65:0b:79:6f:9c:3a:4a:29:6b:
         94:4b:70:91:97:12:73:40:85:ad:f0:a3:c8:93:00:62:9b:e9:
         eb:41:3e:2b:a8:5f:03:be:73:ed:1d:70:9a:57:f5:a6:e8:39:
         c0:00:02:10:1d:77:d3:0b:8c:b9:15:64:66:2b:96:e5:4f:a6:
         4a:28:f3:29:2c:5c:3f:5e:f2:91:f9:db:81:82:87:00:f5:14:
         4d:63:47:ab:e4:77:d6:58:4a:49:01:e3:40:60:45:ef:1a:15:
         7c:39:67:1c:8c:14:7c:0d:89:43:ca:94:60:5b:45:53:9b:f9:
         09:92:a2:6b:ad:d1:62:b0:48:ea:51:4d:e6:5e:da:85:a7:93:
         16:9e:bd:e4:eb:45:8c:87:83:f1:9e:bc:57:84:38:62:4c:aa:
         4d:9f:73:aa:c3:d3:28:ab:e2:1e:9e:10:45:3f:a0:8c:54:73:
         a3:46:7c:e7:ba:71:17:47:74:12:e5:8d:e1:11:1e:8e:9b:09:
         5f:ed:51:ce:ff:4e:2f:2c:11:8f:d4:bb:79:2e:e3:a4:d1:24:
         75:e5:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:19 2024 by rpki-client on console-fra.rpki-client.org