Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ca091a-076d-337b-abae-a8ab31a8765c.roa
File:                     32ca091a-076d-337b-abae-a8ab31a8765c.roa (raw, json)
Hash identifier:          msUenRBwOye/3In6SfB3IHjscIpAd/919IGeRF1P/+Q=
Subject key identifier:   30:68:60:39:96:1F:CB:5A:6A:CE:D9:A0:7D:68:E2:07:D6:D3:4B:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80CA6587C9EF7188091400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ca091a-076d-337b-abae-a8ab31a8765c.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        96.243.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:ca:65:87:c9:ef:71:88:09:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=1376395f-5b59-4640-86d5-680d2e68bacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:13:f2:8f:67:dd:03:38:ec:73:e6:e2:61:
                    f4:e0:5a:64:57:8a:e3:cc:5b:3e:4d:94:57:53:f0:
                    a5:01:11:82:44:23:a9:79:69:ea:7f:45:d8:57:ae:
                    05:27:ab:1e:93:c6:0f:dd:2b:9b:18:36:47:65:61:
                    38:b3:85:9f:f0:c3:f4:46:21:7a:b1:91:f3:05:c9:
                    1f:53:01:c6:d8:70:d8:be:1a:db:cc:30:1c:7e:5b:
                    81:c7:06:bd:9a:fc:94:57:f9:c6:7d:63:10:7a:7d:
                    e0:d0:cd:d8:32:5e:3e:8a:74:99:c9:3d:71:8f:10:
                    cc:9a:d7:3a:46:79:9e:a1:3f:2d:98:1b:ca:24:ba:
                    a4:07:6c:00:10:d8:51:6a:8c:cf:77:4e:40:a5:41:
                    9b:fb:df:29:d5:16:b3:52:d0:ad:18:53:63:b1:a1:
                    ae:69:35:5d:2a:e4:f1:97:d6:7f:a0:6c:1b:16:55:
                    fa:c0:a1:3a:6d:9a:8b:85:b9:fe:9a:ed:a3:00:bc:
                    08:5e:67:4b:c5:b8:dc:4a:0f:de:a0:7d:e3:12:aa:
                    ea:0b:09:67:47:b2:f1:00:74:13:13:c2:c1:fa:b3:
                    c1:c6:c9:f7:79:01:d2:f5:6d:18:1a:eb:cc:df:02:
                    98:a1:83:2b:e2:37:36:2d:82:51:e2:7b:58:15:9a:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:68:60:39:96:1F:CB:5A:6A:CE:D9:A0:7D:68:E2:07:D6:D3:4B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ca091a-076d-337b-abae-a8ab31a8765c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.243.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:3b:88:40:3c:3f:3f:57:e2:a2:24:8b:5f:c2:ff:30:ef:
         aa:5a:7d:d0:e9:3c:fe:8b:a6:ae:9d:bb:52:4b:0f:74:7a:69:
         5c:3b:ab:95:f6:90:a7:82:06:52:9c:5c:a1:b4:1b:ed:ea:53:
         25:4c:8e:6a:df:aa:cb:25:e1:12:13:9e:48:85:45:76:5c:74:
         15:e9:08:74:9c:10:f8:0b:de:dc:c2:6b:da:41:0f:6c:7d:a4:
         2a:bd:85:da:8d:28:b3:a6:b0:b7:6c:67:af:7a:9d:38:60:44:
         d5:f5:19:e2:ea:5e:c6:70:1a:e4:89:33:4b:56:e4:83:23:89:
         6c:dd:09:96:49:b7:60:f7:5d:70:65:fe:06:8a:e9:27:21:3e:
         92:d1:ee:47:d7:55:d2:b4:0c:7e:b8:c9:56:22:58:4d:ea:51:
         78:e1:a7:81:ee:b7:ad:5c:ec:d2:7d:86:ab:62:c0:b5:b8:f5:
         6b:14:62:43:a7:26:02:d1:28:eb:c2:8d:cb:fc:b8:44:61:95:
         6d:40:4b:b2:aa:d7:e8:23:87:22:49:ff:eb:af:f4:17:61:b5:
         1a:3f:ee:a6:be:70:74:a1:4f:08:cf:4e:f1:4d:ba:28:b8:0f:
         dc:72:db:6d:79:5e:0d:8a:e8:c2:a2:b7:74:8f:71:40:da:ed:
         47:a7:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:19 2024 by rpki-client on console-ams.rpki-client.org