Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24966a6e-d612-36fb-982f-82cd1104249c.roa
File:                     24966a6e-d612-36fb-982f-82cd1104249c.roa (raw, json)
Hash identifier:          E7DPi7JRi1ds45WNfCyzKtUpS7YD92TGEGzjFVoa9mI=
Subject key identifier:   61:45:85:DB:89:B0:A2:D8:75:C4:34:76:AC:86:55:8C:44:6B:3F:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A1222DB62A3B2C635F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24966a6e-d612-36fb-982f-82cd1104249c.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        98.117.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a1:22:2d:b6:2a:3b:2c:63:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=3f51de6f-b65a-49ec-8516-7c30081c65bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:05:10:e9:18:0c:e2:79:16:f7:e2:57:2f:
                    df:71:63:44:c7:30:7a:cc:3e:d2:6d:99:36:2f:90:
                    a1:73:6f:6d:09:c4:4d:2c:3b:d6:a2:69:a1:25:0d:
                    31:f9:62:b1:9d:67:e6:a3:2a:e1:4b:4e:58:9b:81:
                    20:7f:66:33:a0:c1:b4:bf:a0:66:ed:d5:76:5d:f5:
                    be:fc:38:ec:41:f5:01:35:d2:e2:ee:26:58:ba:6c:
                    35:23:1f:7d:3b:fe:f0:60:3f:6e:ae:22:5c:9e:65:
                    a5:32:5d:6b:f3:02:23:5f:a8:d1:95:7b:34:80:3b:
                    e7:cd:27:3d:cc:20:79:39:dd:c8:9c:87:97:3a:1e:
                    75:8f:30:e8:ba:1f:e0:4d:d1:61:dd:29:87:d6:be:
                    39:64:ce:97:16:6f:9e:d0:48:a3:e5:4a:d5:3c:d1:
                    1e:02:79:7f:b1:cc:f3:af:5d:9c:7c:31:31:08:fc:
                    c4:64:0f:5d:9e:a4:10:0b:1a:a1:7c:fd:13:44:d7:
                    d0:2c:c2:d1:3d:c3:3b:9f:94:61:c5:b6:b8:83:f0:
                    37:93:56:3b:a4:cd:4a:fe:98:06:3b:27:74:53:7a:
                    7f:9b:fc:9f:90:0b:ce:90:be:67:e8:15:cd:57:83:
                    2e:fd:86:51:b4:5b:a0:fd:15:59:8a:0d:68:70:56:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:45:85:DB:89:B0:A2:D8:75:C4:34:76:AC:86:55:8C:44:6B:3F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24966a6e-d612-36fb-982f-82cd1104249c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.117.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:9f:9a:3e:8d:43:28:ee:b4:b8:36:ee:35:73:d9:75:bb:
         df:a2:b7:53:e4:02:a4:8e:b8:eb:64:13:1f:3a:75:22:8e:b7:
         76:ea:f5:84:24:3f:14:ed:26:4b:ed:02:a9:e6:2e:b8:2a:15:
         36:1e:50:e8:30:94:77:c6:b6:a7:3c:d7:41:22:90:27:a5:65:
         34:77:57:fb:94:43:69:cd:75:70:69:02:40:44:84:1f:8b:12:
         fb:13:14:7b:f8:f6:58:d6:97:aa:42:c8:8b:ba:1a:29:86:66:
         60:bc:87:79:e9:28:e6:d6:bc:75:a5:8a:3b:87:c3:b9:db:ae:
         c8:2a:52:07:1c:3d:95:aa:cd:98:4a:2f:e7:14:f0:72:92:73:
         37:34:ee:33:f9:2b:7e:d7:e2:b3:04:9f:9b:bb:ea:e4:fb:84:
         30:5a:81:13:d4:7f:d9:7b:39:45:1a:d0:c1:10:30:ce:5f:f9:
         64:61:68:81:e3:8b:e0:93:6b:da:10:01:08:35:b8:e8:b3:d7:
         a0:b6:6b:43:12:3a:76:c2:fb:be:5e:34:c9:ff:3c:57:17:48:
         17:92:90:65:c2:3c:b0:0e:0a:e4:9d:e4:f2:b6:55:9d:41:15:
         f6:70:f8:11:29:28:62:6f:46:06:24:48:a1:82:5e:1e:ac:f1:
         01:9b:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:24:58 2024 by rpki-client on console-ams.rpki-client.org