Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b97b357-13cb-399c-93f5-a0a8716a1830.roa
File:                     2b97b357-13cb-399c-93f5-a0a8716a1830.roa (raw, json)
Hash identifier:          8P0ZS7lMXWt1u14iNi9QYYEIcXd+i0d8ZUjNaJyL+No=
Subject key identifier:   4A:E8:3B:23:6F:77:7F:BF:22:14:68:3F:8E:CE:AF:06:A2:EE:58:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845840DD8BD0E1FA777C4A830C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b97b357-13cb-399c-93f5-a0a8716a1830.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        141.155.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d8:bd:0e:1f:a7:77:c4:a8:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=c94dc5b4-71ef-4a72-ab08-c4fb84cf6406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:2f:90:ea:39:13:be:ab:76:33:f9:98:f8:
                    9e:57:f3:df:dd:65:fa:8b:54:79:6c:90:95:ff:2f:
                    be:e7:b3:ef:9d:38:a5:4e:52:80:47:ab:63:32:d6:
                    84:71:3a:8d:9c:6b:4f:c0:b8:46:bc:0f:71:4c:40:
                    e2:f7:10:b6:e2:a1:5f:e7:17:e0:07:59:35:e3:5e:
                    61:9e:9a:10:97:45:e4:0f:4a:8c:82:6c:d1:e8:15:
                    a1:f9:62:20:d1:95:d2:58:9a:84:27:12:a4:14:89:
                    da:84:7f:61:4e:a8:7f:84:94:85:33:7a:a3:c8:02:
                    25:9a:a1:c1:a8:68:04:56:e7:8b:86:4d:ce:e4:bf:
                    00:89:9a:27:3f:9a:aa:1b:0e:17:85:31:4c:fc:5b:
                    bd:20:f2:a3:2a:e1:f9:af:47:c9:35:db:6a:05:6a:
                    31:e1:b1:2b:44:54:e6:fe:fb:04:9f:eb:63:43:78:
                    39:80:93:df:25:89:7b:a0:bb:21:f2:9b:13:91:e0:
                    35:99:dc:fe:c1:82:d9:a7:9c:b0:d5:38:55:c2:0f:
                    04:31:34:89:d1:18:57:c1:d6:26:65:b8:e7:dc:d0:
                    34:9d:27:e3:4d:b5:ca:6b:ba:ea:d8:a2:8f:41:38:
                    a0:63:20:7d:60:c1:2c:de:77:01:84:9b:19:23:68:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E8:3B:23:6F:77:7F:BF:22:14:68:3F:8E:CE:AF:06:A2:EE:58:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b97b357-13cb-399c-93f5-a0a8716a1830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:70:17:e1:df:ce:00:e1:09:b0:db:a3:61:f0:db:20:47:c3:
         ff:54:dd:d0:22:28:27:47:6f:f0:ee:c8:79:b2:07:25:2d:a3:
         87:84:37:a3:d7:4c:16:0a:59:4c:4b:44:18:08:ad:0b:6c:23:
         1a:26:ca:ce:2e:f2:09:84:58:5d:e7:db:00:39:5c:c2:0e:33:
         8f:f3:69:ae:1a:0e:7a:a6:64:f7:d2:71:67:0c:27:f0:94:8a:
         3c:9a:f8:82:70:4e:db:8c:2c:61:6c:01:0e:73:94:22:e8:be:
         b2:89:f1:0e:40:14:65:04:3f:f3:cf:b9:84:90:65:f5:9f:d3:
         2b:7f:40:71:35:2a:a6:a4:62:8b:98:62:25:3c:44:c0:f4:78:
         b7:49:80:b2:2b:58:e0:68:69:80:13:1a:77:a9:67:c8:f3:46:
         43:10:b1:77:cd:1d:e5:27:44:b6:24:9e:94:b7:47:3c:64:61:
         46:77:65:cb:c4:d9:d5:f2:ae:f2:68:a1:95:33:e5:4a:59:6f:
         c6:ca:70:4d:f0:ab:35:76:c2:04:63:65:b1:5f:a7:8b:7e:e4:
         6c:c5:07:5e:36:9c:4a:d7:7b:72:aa:06:2f:03:80:48:cb:90:
         60:7c:9a:20:a6:cd:3f:f9:7d:2c:78:ca:08:d0:cd:41:f3:79:
         6c:6e:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:22 2024 by rpki-client on console-ams.rpki-client.org