Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa
File:                     41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa (raw, json)
Hash identifier:          j9p08j4ApmbTF6mjksi9OEy+2oola/qfbg0F5Q/ox5w=
Subject key identifier:   9F:C6:51:70:C9:EC:0B:DD:D9:B2:CD:46:96:CE:99:9C:97:07:7A:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76EAF5054938E54A3D0500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        151.197.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ea:f5:05:49:38:e5:4a:3d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=fc39fae4-18b4-43a8-a19c-41173ee8c4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8d:41:2d:c8:e3:c7:73:4c:aa:68:d9:13:d6:
                    55:a3:54:05:94:ae:e0:ed:27:a8:a3:7f:6a:d2:74:
                    10:55:24:23:8e:cb:e4:4c:62:93:61:88:ee:cb:7c:
                    54:65:cd:73:71:c4:5e:d2:3f:a2:1b:e3:d0:f8:87:
                    52:d3:5d:a0:92:55:a2:cc:b7:e5:55:34:28:bb:48:
                    45:07:68:6f:a9:44:24:4f:ec:56:72:d3:03:c4:97:
                    ff:e4:ff:58:37:14:68:dc:3d:09:91:66:f6:91:ab:
                    71:1d:95:43:92:1e:bb:7c:a4:5c:d9:9c:75:1f:45:
                    7a:b4:2f:0c:e7:1f:06:cb:a4:1d:4a:b7:29:c6:73:
                    84:10:87:07:dc:68:fd:63:9d:98:b2:c9:21:9a:ff:
                    d0:79:4a:6c:62:6b:65:bd:05:1f:80:0c:60:f7:d3:
                    c0:4a:f7:b3:5f:f7:72:5e:c3:c7:d3:c8:04:87:c9:
                    78:df:54:eb:11:9e:02:3b:53:36:be:1d:ec:6d:7b:
                    d7:fb:f5:b5:d4:78:0a:ad:42:25:15:1e:80:d6:29:
                    71:8a:5c:af:c9:b0:16:40:81:ad:07:5f:0d:13:7d:
                    c7:7a:d9:7d:6e:aa:73:39:b2:38:e7:2c:b9:48:6e:
                    11:43:e6:e4:0e:e5:50:21:81:52:34:09:ea:5a:a2:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:51:70:C9:EC:0B:DD:D9:B2:CD:46:96:CE:99:9C:97:07:7A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:84:f9:ca:92:4d:f6:5a:3a:7a:85:41:62:9a:b2:15:82:
         19:10:f2:5f:e3:37:b4:c9:85:43:6a:3f:d3:89:a0:00:bd:0a:
         b3:f6:19:91:14:6e:f1:a6:78:da:d0:68:4d:b0:c6:ed:cc:f5:
         4a:f4:fb:f8:f9:04:1d:84:21:eb:ae:24:56:9e:18:e4:70:a8:
         fb:28:69:a8:53:66:88:b5:4a:11:c9:3b:db:2c:3e:47:d0:2c:
         d7:5d:33:f8:72:ec:d2:43:4a:93:ae:ff:bd:b1:6b:a2:2d:6d:
         1e:2d:63:7e:6b:37:ab:ae:29:8d:3e:f7:ab:cc:48:49:37:26:
         33:1c:3f:72:e9:a1:6a:a4:c0:01:54:5f:d0:38:f8:5b:06:cd:
         73:32:8b:72:bc:89:c2:a4:66:dd:bf:8d:ea:51:79:4f:f3:fd:
         50:d8:df:cb:af:98:ec:2a:42:50:0a:c4:93:b2:b3:24:73:4b:
         ef:02:3e:3f:bf:4e:25:70:67:41:da:fc:ff:2a:30:79:16:bd:
         4d:cf:12:95:50:8e:2f:95:56:9f:b8:89:49:2a:e6:f9:ed:db:
         74:a5:68:c7:d1:39:96:31:1b:c7:c0:a5:80:69:bc:a8:e2:04:
         db:21:b3:a9:e2:b8:b4:7b:89:fb:42:04:68:2b:94:b8:b4:eb:
         6b:d2:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:27 2024 by rpki-client on console-fra.rpki-client.org