Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4dccb218-e228-3f88-8ea8-a1495ba7a9b0.roa
File:                     4dccb218-e228-3f88-8ea8-a1495ba7a9b0.roa (raw, json)
Hash identifier:          f8sDFo5053zH3eS0EtJkIQzMdJ+ewZH3RIRJbj9irlM=
Subject key identifier:   A2:52:8F:1A:54:9E:80:42:33:7A:17:DF:4A:08:71:56:C9:E7:F0:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D43B080F0632FB79B150
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4dccb218-e228-3f88-8ea8-a1495ba7a9b0.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        96.238.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d4:3b:08:0f:06:32:fb:79:b1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=fe1faec0-06fa-4c36-9a74-ef50f2bcceca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:75:ef:6d:38:63:e7:03:86:91:1a:ca:a8:
                    ec:2f:e4:08:98:76:b7:74:61:79:db:ba:4b:cc:c9:
                    31:58:ac:c5:d8:e9:d0:a1:ea:57:ee:ec:38:a6:22:
                    b9:f6:ab:75:5d:aa:82:23:2a:1b:87:c2:77:12:63:
                    c4:0c:3a:00:e9:a0:ab:3d:cc:af:8b:4a:2a:89:ec:
                    c5:0a:91:39:68:e9:51:04:24:35:42:eb:c7:96:20:
                    b3:d4:92:71:c4:c0:26:a3:89:05:3e:c8:c9:29:48:
                    01:e2:34:53:cd:a6:46:51:67:4b:06:f3:04:0b:76:
                    82:85:ef:97:9a:a8:88:54:85:83:5d:ce:96:de:af:
                    3e:cd:25:0c:58:6d:a6:27:73:76:24:0e:3a:2d:cd:
                    14:43:21:de:89:af:83:b5:f1:bd:77:30:1b:86:6f:
                    80:87:73:42:95:f6:40:45:8f:e8:b5:72:63:38:32:
                    08:3e:64:dc:f4:75:80:6f:31:23:30:1e:04:82:e6:
                    d6:59:eb:e3:a4:b2:e0:7c:22:41:ef:6f:20:79:18:
                    4a:50:ba:f8:97:87:19:74:8f:49:23:05:ea:af:08:
                    d1:0f:24:c7:8b:86:5e:9d:5a:6e:e3:48:8b:2c:ff:
                    68:b2:13:32:78:a6:d1:71:cd:1e:75:a8:2a:4f:fb:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:8F:1A:54:9E:80:42:33:7A:17:DF:4A:08:71:56:C9:E7:F0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4dccb218-e228-3f88-8ea8-a1495ba7a9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.238.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:09:ac:68:43:01:c7:b7:91:bc:f6:34:ca:f6:3f:41:b4:
         32:d4:91:b7:54:f8:6e:06:0f:92:f7:07:8c:10:98:9d:db:26:
         2c:08:fc:2a:7c:d6:25:9a:72:c4:3c:47:a1:5a:a4:b6:58:92:
         6a:41:dd:fb:36:94:a0:82:07:31:3d:74:d5:10:22:1c:85:93:
         29:88:15:69:86:cf:83:3b:52:a9:c0:e8:be:ad:e3:e3:a9:5b:
         01:f0:ed:f9:c7:58:7e:57:3d:59:ab:3a:b8:8f:19:e3:24:cd:
         3d:f9:3d:50:cf:ca:7e:59:c0:4e:dd:44:84:2c:aa:97:6b:14:
         2c:a9:fb:6a:a8:90:5b:18:d1:90:06:8b:03:86:3d:1b:74:0e:
         bc:60:16:4b:41:d8:77:07:74:de:a9:55:1f:8d:e1:c6:92:1f:
         63:b7:c3:0b:77:6e:84:93:aa:22:c3:9c:e5:29:f0:5c:5a:7c:
         56:21:b8:35:76:3e:8c:64:18:cd:6f:86:5e:2d:f5:41:a4:1d:
         de:69:cf:e6:10:5b:2f:c0:31:df:a1:ba:b9:a0:ab:b1:d0:48:
         f6:cb:8c:39:80:d3:d6:c1:73:b0:f9:56:a5:dc:64:fe:b2:ac:
         ca:25:8c:9d:eb:11:cf:0c:f9:a2:e2:3f:a6:7f:6a:e0:4d:11:
         18:82:1f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:29 2024 by rpki-client on console-fra.rpki-client.org