Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4130276b-a12f-3613-bc9c-8da5b9f30025.roa
File:                     4130276b-a12f-3613-bc9c-8da5b9f30025.roa (raw, json)
Hash identifier:          n9eY30yc/VGpwqtkTyey/hxsTPHtf/MGWTCp/ICMcTc=
Subject key identifier:   34:EE:DF:B1:27:03:47:57:5B:3E:7F:67:25:4D:74:CE:C8:82:AA:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B85430A8B78A99916E680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4130276b-a12f-3613-bc9c-8da5b9f30025.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        151.204.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:85:43:0a:8b:78:a9:99:16:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=0e69f34a-6cae-4e44-83b6-e074a32b9c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:52:f9:12:2a:96:e3:58:c0:de:76:77:75:
                    b0:7e:51:28:5e:58:04:dc:91:2b:2b:f3:ba:13:3c:
                    63:c0:0c:b5:cf:52:85:8e:01:dc:a5:df:ef:26:7c:
                    8d:be:15:13:54:0c:b3:15:7d:31:2e:d6:aa:5e:af:
                    90:bb:6e:b0:7f:e4:44:47:a8:5a:82:51:a2:13:70:
                    9e:1d:fb:7f:c7:bf:5b:6d:2d:38:e6:db:cc:82:e2:
                    f3:ee:b5:6f:85:54:19:55:67:ba:91:3a:77:a7:c9:
                    a9:c2:a1:6e:3a:e2:7a:0a:f1:5f:b0:6e:34:c8:36:
                    6b:c4:f5:6a:4b:aa:a0:a2:0a:b0:36:cd:65:82:39:
                    42:b4:e1:f8:c2:c6:e7:1f:b4:07:b8:7b:30:d7:30:
                    d5:38:06:bc:e1:98:3b:19:bb:41:70:f5:0a:ae:08:
                    f2:4e:42:aa:12:7e:a0:c1:c4:a4:91:41:9f:0f:23:
                    11:83:6c:28:48:93:24:6c:77:fb:87:27:52:97:55:
                    47:05:ad:64:e3:f5:0b:56:14:9d:7b:51:8d:d9:70:
                    02:a6:f1:a7:ad:e8:37:0b:85:54:69:08:c9:6f:46:
                    49:50:3c:e6:e7:d9:37:c1:26:8d:86:ad:da:aa:12:
                    5c:c3:f9:3a:00:42:6b:b5:8f:e8:d6:3f:c4:76:af:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:DF:B1:27:03:47:57:5B:3E:7F:67:25:4D:74:CE:C8:82:AA:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4130276b-a12f-3613-bc9c-8da5b9f30025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.204.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:23:6f:32:45:1d:92:9a:99:7c:c1:cb:eb:b4:75:01:fb:33:
         c7:c7:b0:70:75:a7:02:ea:7b:d1:51:98:aa:3e:4e:b4:ac:64:
         73:36:cf:72:95:7b:5b:90:50:b5:4b:8f:eb:9a:76:c0:0b:01:
         ab:14:b7:54:65:df:13:30:81:4d:15:7a:aa:4f:4e:dd:90:19:
         3d:d4:64:70:f4:2d:a7:fb:11:58:32:ca:55:c9:ea:49:00:52:
         fa:25:34:d9:c4:d4:d7:59:25:4a:0b:f6:7a:64:2e:e5:84:8e:
         91:02:b9:19:d9:0c:24:e4:91:7e:06:1c:fa:2d:f9:5b:63:26:
         ca:37:1b:a3:ab:b3:4c:d2:00:43:2f:81:94:54:cb:3e:46:9f:
         70:2f:a4:32:62:ca:f8:c6:f2:ce:f6:8d:55:1a:38:2c:32:0b:
         f2:8b:23:24:7e:14:b8:77:4f:f7:8c:50:80:69:8d:13:f3:32:
         86:b6:83:6d:70:d4:6a:26:0e:0c:9c:13:35:cd:c4:bb:15:fe:
         29:46:5a:56:da:17:04:fa:45:23:9e:35:6a:5e:e9:eb:5b:65:
         ce:d1:22:cc:2f:b5:86:a0:ff:b1:1c:ed:3e:52:3d:15:ea:ed:
         56:08:fd:61:22:8e:08:9a:81:7e:a2:8c:9a:83:b2:c9:c8:d6:
         1a:5f:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:27 2024 by rpki-client on console-fra.rpki-client.org