Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa
File:                     3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa (raw, json)
Hash identifier:          CRk8F7B+tMJbJwK/OCT2vJlpUI4iG0/jOt+XMl5QnW0=
Subject key identifier:   F0:50:F0:42:8A:CE:EB:50:5A:D6:44:AF:4E:FD:2D:CA:4C:C8:47:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE211B56C693C9EF53480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        96.231.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e2:11:b5:6c:69:3c:9e:f5:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=2eecc69c-d464-4876-8bef-d35628930b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:ec:35:3f:59:b1:9f:f7:61:e4:c0:4b:55:
                    2c:eb:35:ee:8e:93:1d:6b:78:0f:f4:6a:2f:18:62:
                    9c:42:41:41:16:68:e6:2e:e3:7b:85:97:63:df:79:
                    1c:a2:ed:85:21:5d:17:27:28:c0:bf:51:3e:e3:2c:
                    f8:7c:9a:bf:85:ef:72:74:78:0d:90:eb:fd:15:77:
                    4f:b3:62:1f:9e:8f:14:46:08:38:23:78:59:65:d4:
                    51:39:21:61:3f:40:56:ba:c7:a5:55:5d:8b:41:36:
                    82:d5:e8:d2:63:42:37:1a:6b:3a:0b:a0:12:c1:2a:
                    7b:77:10:8c:ee:f3:64:d1:5a:cc:67:3c:32:5d:8e:
                    ca:a8:b8:10:4d:9b:db:c1:ad:ec:cf:d0:2e:4b:56:
                    c5:88:c7:30:ba:25:8e:89:ce:1c:16:ef:aa:75:de:
                    46:55:44:15:41:36:78:01:06:76:70:ba:da:38:0c:
                    5d:88:f4:3a:88:23:c3:0a:b3:dd:38:f0:d3:3a:54:
                    c7:46:3e:60:db:db:c6:94:db:b6:7e:80:ea:75:de:
                    6e:b3:e3:be:e9:78:3e:18:54:04:d2:3c:34:98:30:
                    19:2d:a9:72:64:b9:c0:80:37:3a:20:42:d5:89:16:
                    69:dc:dc:de:6a:b4:b7:52:ff:6c:7d:71:e8:b5:d1:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:F0:42:8A:CE:EB:50:5A:D6:44:AF:4E:FD:2D:CA:4C:C8:47:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:ce:c4:5d:ab:a9:54:fc:97:08:5a:12:8c:85:4a:e7:a5:
         fc:79:b4:42:68:90:70:64:08:8d:ee:23:41:53:aa:17:98:3a:
         18:f5:43:2d:14:88:a5:b9:e8:af:91:a4:41:20:15:6a:c7:6a:
         d1:c0:95:f9:ef:ae:ff:7c:81:48:1d:49:f0:da:d8:fa:3e:6c:
         92:2c:b5:fb:e2:ae:72:98:ed:2d:c5:17:ca:f2:e7:04:ae:5f:
         73:80:eb:fc:ca:70:ec:af:a0:64:08:b2:19:c4:9b:46:22:b8:
         90:3e:89:09:35:3b:2a:25:9c:b0:03:be:bd:ac:a0:35:d1:3a:
         46:ec:ba:d7:85:75:b4:89:6e:0b:12:f0:44:14:64:e1:7f:9c:
         91:6f:1d:1f:d5:60:23:4b:2b:f2:51:f5:66:b0:79:e2:4c:86:
         f7:2c:3d:b1:9c:e5:c9:33:0f:8e:41:c8:20:87:1d:67:ba:47:
         b9:b3:e5:a7:c8:ef:1c:0d:1b:b0:5a:33:ad:54:ff:a4:b1:ce:
         55:6f:cf:f7:33:0f:ca:2b:3a:6e:63:db:d0:5a:db:4d:93:98:
         e3:85:e6:fd:a9:d1:42:8f:37:14:06:78:8a:a9:51:fe:93:3f:
         ac:25:31:92:bd:5f:97:18:31:ac:56:01:14:00:97:4d:dd:26:
         85:41:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:21 2024 by rpki-client on console-fra.rpki-client.org