Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa
File:                     276ddee7-4a91-3a78-94e7-0c9531dafff2.roa (raw, json)
Hash identifier:          QFuVIwfeclZ1kp6UUkIFPVP3qICF+3ooYFcnHUXC10w=
Subject key identifier:   34:29:BC:35:9E:70:25:95:B5:FD:C1:C1:7F:06:D9:37:A6:42:43:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A3E03EE845D7EA6E5E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        108.12.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a3:e0:3e:e8:45:d7:ea:6e:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=188c31da-02e9-4783-87bd-ab1064f2d162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:fe:b9:67:f1:6d:b5:e7:ad:1b:0c:83:eb:
                    f3:07:7a:a1:11:ca:21:5e:1d:45:0b:48:d1:44:6a:
                    19:a1:52:d3:1f:72:ac:a8:09:30:03:78:ee:db:16:
                    d9:ba:fd:bb:24:91:e0:82:82:9a:9f:41:a6:69:6b:
                    8b:ba:2a:30:4b:41:c8:30:c8:62:e1:2b:11:92:67:
                    66:b2:77:6a:f3:52:b1:cc:89:f0:2e:15:85:77:c8:
                    c7:ad:b7:ba:51:f5:2d:08:da:8d:0d:ba:3d:d5:67:
                    a4:0e:ea:f3:66:05:ca:72:e8:36:d8:27:0e:1e:bb:
                    87:a2:ca:02:44:ae:c3:1c:88:e8:13:73:bf:ae:c8:
                    f6:b3:c9:99:e3:2a:72:90:d4:05:0f:28:0c:7f:cf:
                    7e:d8:da:8d:ca:e9:eb:38:8e:56:25:d9:56:5d:01:
                    fa:6a:c0:f9:4c:5e:6e:b1:be:17:eb:0a:b9:27:0f:
                    73:0a:51:6b:b5:20:02:25:b3:65:27:5e:a9:71:91:
                    1b:c7:90:55:59:a9:80:c5:9f:ee:c8:d4:ba:c6:0b:
                    ed:44:54:81:9c:28:f2:0d:7f:ea:65:45:e5:bb:93:
                    9b:9b:34:06:42:96:01:5c:5a:d5:3d:c2:65:93:89:
                    33:89:76:2b:1f:ad:6c:5f:f8:a1:db:20:49:71:3f:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:29:BC:35:9E:70:25:95:B5:FD:C1:C1:7F:06:D9:37:A6:42:43:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.12.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f7:8f:7a:7c:92:de:14:2b:1d:22:03:70:34:3b:eb:23:5e:
         97:1c:72:81:6f:57:67:6c:93:90:0b:ee:a9:25:f1:19:3a:56:
         49:00:33:f4:b2:d4:18:44:10:c9:9c:89:c4:36:59:dd:d0:f7:
         68:58:d2:40:f4:4c:43:4c:f1:be:d3:90:a4:dc:8c:04:49:a2:
         1c:e1:40:0b:1d:ee:1d:98:d9:f5:c2:02:bc:3d:8e:56:23:eb:
         d2:82:02:84:12:f1:97:ab:b7:24:88:5c:6b:eb:e7:d2:cf:b0:
         38:ea:57:ae:ea:22:75:3c:5b:16:85:f4:f5:11:97:13:cb:22:
         16:24:77:97:a7:6a:ba:16:b7:43:de:d9:82:f0:a0:5b:9d:59:
         f3:5e:0d:b4:62:8a:70:ff:3f:73:11:09:36:c3:fb:85:45:51:
         67:34:f5:a6:fd:41:8c:49:f7:03:ea:5a:30:bb:71:32:f8:c0:
         98:7f:d3:50:f6:e5:01:56:ec:c5:06:c3:a7:10:23:9e:36:0f:
         0c:57:45:f5:2e:2f:ce:ee:70:20:55:5a:a9:f2:0a:9e:a2:af:
         81:d0:c0:60:c7:46:9e:d6:96:c7:1e:b5:f6:64:5d:60:59:f1:
         c4:a2:6a:6d:fd:06:88:e5:6a:ae:7f:d4:38:8c:18:e7:f7:53:
         17:03:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:22 2024 by rpki-client on console-ams.rpki-client.org