Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/413c3518-5016-39f2-9f6b-696cbdc7355d.roa
File:                     413c3518-5016-39f2-9f6b-696cbdc7355d.roa (raw, json)
Hash identifier:          047fd8AViflLFZMgG/31uVRLg+1fpTKRi5UK1ajbnBE=
Subject key identifier:   1B:BA:7C:0B:65:D8:29:97:3A:21:BD:94:6E:36:4D:0E:94:7A:79:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD664D066682E88623D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/413c3518-5016-39f2-9f6b-696cbdc7355d.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        71.166.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d6:64:d0:66:68:2e:88:62:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=01cadeb6-0cdc-4a11-a5c2-bc72acc7714b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:71:76:5f:01:43:df:7d:67:45:e4:ba:9b:
                    b4:c6:d4:77:e5:34:e3:d0:c6:aa:d5:72:37:41:03:
                    19:e6:d1:af:6c:02:97:6d:22:ef:8e:91:43:ac:0c:
                    10:aa:55:71:7f:e4:b6:e7:ee:5c:b8:74:6a:51:54:
                    50:27:4b:7d:54:a3:04:0f:04:c2:1d:c8:3b:13:32:
                    9f:83:93:1c:74:04:07:4c:8d:be:37:f9:a3:39:70:
                    8e:91:b9:df:e1:c4:23:7c:b6:a6:16:64:81:68:01:
                    d9:7b:13:b7:13:a0:e2:b5:cd:1a:62:59:12:d3:83:
                    64:6e:49:7d:ac:3f:03:93:4c:b3:2b:ab:ba:34:59:
                    ba:48:c3:a0:3a:28:5e:d1:cf:b1:70:c1:d9:08:a4:
                    2a:dc:4b:f3:12:d7:de:c9:d8:66:24:5a:6b:e7:90:
                    e3:49:6c:e9:3d:f1:c3:26:24:27:bd:39:f9:40:2c:
                    6d:c9:37:6a:d4:73:70:68:a9:8c:0e:21:3d:28:9d:
                    68:9a:68:0f:d4:98:1a:74:05:56:89:87:86:c7:3c:
                    6f:cb:e1:67:d9:84:f5:ca:8f:a4:4c:25:1f:6c:e9:
                    de:fd:61:8f:67:83:d9:fa:64:78:86:74:59:4f:c4:
                    59:55:66:d4:07:ac:cf:a4:29:9e:81:b2:f0:1f:4c:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:7C:0B:65:D8:29:97:3A:21:BD:94:6E:36:4D:0E:94:7A:79:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/413c3518-5016-39f2-9f6b-696cbdc7355d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.166.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:df:a9:e7:5e:08:2d:28:21:21:90:ac:44:6f:83:3f:6c:
         e4:46:25:12:af:fa:a6:2b:a5:66:03:9a:5f:5a:01:cd:dc:f3:
         37:8e:b4:d4:34:b5:a9:c6:9b:58:83:41:a7:2e:0d:21:10:d4:
         e8:99:69:89:64:d8:da:69:49:d5:26:95:ed:68:ee:64:c7:61:
         e7:92:23:33:b3:1c:40:3a:d6:1f:67:48:25:38:2f:38:42:93:
         09:42:1c:c7:e6:79:30:d0:a3:67:a4:37:de:4e:ca:67:47:36:
         d7:8f:96:7c:c3:90:c3:c2:26:5a:bd:f5:fc:87:b6:29:19:d5:
         64:ba:c1:27:64:9a:5f:3f:cc:b0:04:00:9a:ef:ce:c2:5c:48:
         bd:89:50:b5:e8:34:3d:1e:1c:a3:ff:a2:f0:31:ae:73:b5:af:
         46:be:9c:36:34:76:8e:a4:d2:82:eb:d0:54:5f:59:75:79:e2:
         9e:37:69:0c:5d:2f:db:c6:c7:f9:ed:9c:b9:eb:0a:03:be:ea:
         c7:93:47:f0:3d:d5:33:9f:c6:23:d0:7a:63:cd:93:23:5e:84:
         a4:b0:d3:66:02:3e:9a:e4:ec:e0:2d:ec:45:58:16:2c:eb:e0:
         6a:93:ef:d1:41:f0:6e:d4:09:e3:07:90:08:d8:aa:9d:53:50:
         37:bf:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:11:32 2024 by rpki-client on console-fra.rpki-client.org