Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3382f3e6-1ecd-36f6-95c6-b093cff43146.roa
File:                     3382f3e6-1ecd-36f6-95c6-b093cff43146.roa (raw, json)
Hash identifier:          Xrp+pP3q2LCe7SjeZNI+z1sDGpuj4FWgU8E6d3DebWI=
Subject key identifier:   32:00:DF:12:6B:CB:FE:C4:A8:17:9B:25:82:0A:02:02:93:E5:D6:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A6CAAF37B0EEC9E24480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3382f3e6-1ecd-36f6-95c6-b093cff43146.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        108.17.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a6:ca:af:37:b0:ee:c9:e2:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=04984b25-e192-432b-b1c1-9dd48becd7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:25:c4:74:e8:fd:f8:c1:12:ba:44:d3:9b:
                    23:a1:f7:1c:af:e7:b6:46:8b:88:58:33:58:de:57:
                    df:11:2e:33:1c:44:c6:10:f5:bd:f5:5d:8d:29:af:
                    c3:24:f0:31:cf:b2:16:96:72:36:60:f2:5d:21:84:
                    61:5f:85:23:7e:d9:c7:33:dc:7f:05:94:55:ce:82:
                    56:fb:24:96:d7:42:9b:6f:25:fb:c6:ac:d8:75:95:
                    3e:11:a8:d0:64:2e:77:6a:02:3a:c4:80:c8:11:89:
                    13:82:d1:6c:52:79:14:02:72:60:f3:7a:48:59:fc:
                    c7:6f:9c:b0:45:fb:bd:e7:7a:e8:3c:dc:85:1d:f9:
                    19:6c:67:a9:47:61:41:2f:23:1e:3b:cf:fd:35:60:
                    1e:0e:68:d7:cc:88:ae:45:5d:b9:5e:5d:c6:0d:c4:
                    bf:4b:81:21:3c:5c:8d:fd:4d:fc:ba:cf:7f:40:d9:
                    2f:c1:f0:63:60:ae:fb:f1:73:ad:db:d0:c9:c0:60:
                    ef:4f:49:7e:81:47:55:ba:3d:65:40:96:41:6d:ce:
                    0a:ee:42:fb:0e:87:1b:ac:15:e1:b8:32:0e:01:5a:
                    88:f5:c3:05:70:82:fc:fa:bc:42:16:64:a3:82:2d:
                    f1:be:bb:53:9b:af:4a:c6:d9:64:fc:80:f1:41:d8:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:00:DF:12:6B:CB:FE:C4:A8:17:9B:25:82:0A:02:02:93:E5:D6:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3382f3e6-1ecd-36f6-95c6-b093cff43146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.17.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:b3:77:0d:f0:82:60:46:74:63:26:4f:50:a5:3d:bd:42:
         49:1b:aa:36:dd:a5:93:2f:2d:ef:88:5e:0e:6e:04:f7:7c:c4:
         6c:aa:e0:b9:bc:52:ee:37:15:4e:c2:8d:18:65:1f:7f:d6:bb:
         25:db:da:16:7b:c5:67:54:00:fb:82:8c:b9:ca:b2:03:b1:ca:
         a4:8b:67:a0:6d:26:54:de:74:01:93:3f:43:49:83:a0:f3:5a:
         4a:fa:f3:9e:2b:dd:d1:ca:a1:1a:88:88:57:bd:ed:ba:7f:76:
         7b:a2:be:9d:c7:d4:35:93:1f:f2:93:69:fc:47:f1:93:4d:04:
         95:77:87:52:ab:40:d7:f5:40:1d:40:86:ce:6e:12:01:6c:ca:
         b6:87:66:66:8c:e3:ed:d4:77:1d:93:dd:19:e7:52:f5:50:9d:
         fe:8c:4d:01:c0:ce:01:12:d5:20:59:6e:36:c0:8b:ba:41:a6:
         4e:7a:0d:a0:e7:36:6e:fb:f2:06:2b:48:0c:ca:e1:6d:33:4c:
         d9:08:de:93:3a:2e:b4:6c:99:11:a3:b9:bb:61:fc:ce:d0:44:
         74:4e:cd:97:5c:68:0d:99:3c:a6:77:cf:16:0e:98:fb:28:cf:
         50:cf:3e:be:96:d7:4f:62:00:67:aa:65:b9:fc:d6:7a:d2:49:
         fd:95:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:11:31 2024 by rpki-client on console-fra.rpki-client.org