Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa
File:                     2a365bf7-1aad-3494-8eef-085a30eed65b.roa (raw, json)
Hash identifier:          w9X3pXMXua4zmJY48OpZSyRYl7kFPtN7XHK+wGtushQ=
Subject key identifier:   AF:70:0C:45:BF:11:03:60:03:78:FD:E2:64:31:97:52:4D:07:4B:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DDC96399C58408DAD2280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        96.240.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:dc:96:39:9c:58:40:8d:ad:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=e74913e6-eea0-444a-8fea-87c0ecf90c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:21:98:b6:fa:dd:9f:f5:b0:2f:a5:64:a9:
                    7b:ca:98:6a:de:99:8c:77:3f:95:d8:b6:ce:4b:59:
                    5d:34:db:1c:da:00:01:c2:9b:5f:8a:77:86:fb:c6:
                    b9:a8:69:15:a0:cd:47:6e:35:7f:f7:82:5c:74:ee:
                    5e:1d:94:dd:ad:a0:08:9b:e1:49:e6:e6:1e:f3:78:
                    fe:9f:6d:b3:80:ee:38:e8:b5:c2:3b:07:4b:27:87:
                    69:9a:2f:ed:a4:e6:fe:ce:82:f6:34:87:19:ee:a0:
                    13:d5:cd:f6:fb:e9:30:24:fb:78:85:11:25:9d:bf:
                    92:b8:34:ac:e6:10:cc:15:be:b0:70:7d:20:3c:79:
                    33:df:97:0b:73:96:32:6c:13:03:54:e9:af:4d:ca:
                    1e:fc:b4:57:fd:aa:e2:66:70:af:9f:8a:a3:a6:a0:
                    5e:7e:89:5e:d6:da:dc:8b:34:7a:08:e2:10:96:48:
                    b4:41:cb:c1:b6:0a:6c:f5:34:ab:f4:68:2c:18:ca:
                    40:e0:01:70:96:1f:79:b7:99:3f:a2:b6:00:63:af:
                    bf:75:43:23:eb:51:a0:d0:69:37:91:f0:45:bb:ae:
                    b8:ea:3b:e6:27:e1:fa:57:eb:34:fa:d1:a7:12:b8:
                    cd:6c:1c:bb:64:81:f8:75:13:d2:01:e8:1a:99:24:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:70:0C:45:BF:11:03:60:03:78:FD:E2:64:31:97:52:4D:07:4B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.240.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5e:f0:44:1b:0c:22:1b:13:e9:3a:0b:67:2c:df:04:19:a8:
         74:bf:e0:0a:31:b5:18:b9:d9:29:82:49:69:2f:21:14:f8:c5:
         65:3d:19:69:54:c8:17:5a:ab:cf:6d:76:40:fa:81:88:ea:47:
         59:c9:93:db:59:fd:97:ff:7d:33:b8:7c:21:cc:34:b6:b2:bb:
         4a:0b:8f:ee:b7:f4:01:ad:df:7b:98:77:e0:58:55:b0:e9:a7:
         be:68:15:9b:56:ae:ac:ab:2f:90:00:b7:0a:29:a0:cd:70:78:
         50:59:c1:be:07:af:86:b5:0a:3e:40:2e:02:33:e6:df:cf:9b:
         ac:e5:8b:0d:ee:11:36:ec:6e:5b:aa:63:fd:34:db:4c:b3:f7:
         55:87:5a:d8:51:90:0e:cc:03:8b:40:93:d6:af:83:70:ca:a2:
         a8:c4:60:df:59:00:57:3a:a7:0d:aa:7e:7c:9e:ee:44:ad:c2:
         13:87:50:9b:2f:dc:24:f7:8e:f9:ce:3b:5e:4e:a0:1d:45:a2:
         c8:b8:91:3a:c9:97:6a:a9:2e:60:bb:4c:26:f4:f3:ba:e2:8a:
         84:cc:a7:62:75:65:2a:3b:bf:19:72:91:13:d3:62:4f:bb:c6:
         ef:a5:1d:d9:61:f4:d8:85:78:40:08:9c:d7:4d:06:86:94:77:
         26:72:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:22 2024 by rpki-client on console-ams.rpki-client.org