Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa
File:                     436b970c-6176-36fc-9f8c-5b27bf3732f5.roa (raw, json)
Hash identifier:          zfEapeZkRUHNcdMYJ+4GqKe8caFvxvaqXBDeDZ5q5qk=
Subject key identifier:   25:80:50:57:15:44:B0:85:35:D0:2C:5C:FA:EB:EE:3B:28:F1:F0:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584593689FB899D4A5A5FFB5AC40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        71.245.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:9f:b8:99:d4:a5:a5:ff:b5:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=f045b3b2-3b0d-400b-9dcd-e1528941f9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:19:a7:0b:3d:d4:8f:c7:ca:02:ad:c8:53:
                    46:24:5e:6c:ea:91:80:b6:6c:6e:00:9d:a3:f8:68:
                    42:ad:9b:ab:98:35:8c:93:53:e0:a9:60:f7:b7:82:
                    f2:98:2d:5f:80:a0:6b:89:13:17:d2:d0:22:f4:8e:
                    40:85:c0:12:27:d7:83:fe:8f:84:8b:19:ae:1c:f3:
                    0f:5d:ff:de:18:f8:f9:63:11:27:7b:63:d3:20:2f:
                    af:6b:06:34:a4:90:d7:39:bc:3a:6f:9b:c1:a3:43:
                    d9:5a:13:18:48:67:5d:fd:08:3a:18:d0:ea:b8:48:
                    da:0f:da:c2:4a:b5:81:e7:cb:30:1c:86:61:06:b7:
                    1b:f6:c4:af:63:4e:9c:84:5a:32:28:1a:51:de:53:
                    0f:32:56:3d:47:36:b7:26:a0:20:87:35:e1:4a:14:
                    e3:72:b9:6e:3f:ff:7f:6f:d6:60:25:ca:fd:92:18:
                    0d:27:0a:0c:54:4d:0e:90:0d:55:91:5c:a9:0d:e3:
                    bb:51:13:63:f9:11:2b:16:82:f6:83:39:68:86:aa:
                    9d:23:ff:c4:71:0f:97:52:7e:9b:a6:25:43:4f:82:
                    8a:26:b9:d9:b7:79:4c:6a:0b:2d:65:b0:ec:eb:6d:
                    d9:cc:53:8a:24:03:75:ef:11:5b:79:ee:df:75:0b:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:80:50:57:15:44:B0:85:35:D0:2C:5C:FA:EB:EE:3B:28:F1:F0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:16:73:b9:5f:4f:69:ba:72:36:b5:75:99:24:b8:fc:27:53:
         3a:8d:39:c7:a8:3a:38:b2:38:4b:f3:3b:14:5f:11:a8:0a:b1:
         13:c6:53:44:e0:eb:92:d5:e8:c7:5b:d8:50:7a:3d:2d:f7:2e:
         02:bf:cd:44:ce:93:86:61:10:be:62:66:89:31:ad:1d:1e:d4:
         90:e0:27:d2:df:d3:fe:5c:a9:e1:c3:fa:8a:ed:70:31:54:62:
         6b:fd:f4:98:fe:67:ea:70:31:5d:8d:c9:53:db:db:d1:e3:1d:
         91:3e:ba:e8:91:96:fe:b2:d4:37:82:1b:5d:77:03:bc:3a:92:
         b2:d5:f6:00:1b:fa:bc:13:f0:d6:a7:c1:a9:3a:ac:8d:d5:29:
         3c:4a:25:8f:22:09:f1:d9:2b:0d:7c:9f:96:3d:89:94:f5:74:
         2d:06:d1:a9:f8:30:65:e3:43:84:b4:f5:8d:31:96:07:88:f9:
         16:ee:c2:63:93:6a:b0:71:3a:5a:a5:6f:1d:ac:0f:26:bd:fb:
         0e:07:6a:1a:15:91:02:f4:98:0a:25:66:79:77:39:0f:72:28:
         5c:20:a3:38:07:cf:e8:2e:05:b0:c7:3d:56:51:a6:da:b1:89:
         67:26:06:a1:ec:d1:f2:2b:5d:24:8a:d6:7d:49:c0:00:44:d1:
         2a:3b:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:21 2024 by rpki-client on console-fra.rpki-client.org