Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa
File:                     5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa (raw, json)
Hash identifier:          hBAOhfpGDYZKu6RH724q/HHrghqm6RyKFiHOUZF3zH8=
Subject key identifier:   DF:92:1D:E5:2C:A6:23:F2:BC:98:DF:18:C1:45:8A:11:49:E8:EC:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A286566719370319CC78
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        71.178.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a2:86:56:67:19:37:03:19:cc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=aeca44bc-9b7b-4d66-9b8e-56a348284923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:5a:9a:d6:65:9d:c6:93:d9:f0:c4:e4:be:
                    2c:89:98:43:24:b9:30:d9:37:cd:37:79:3d:7d:26:
                    3b:f3:6d:4b:e2:01:7f:53:81:3a:45:93:49:d3:76:
                    71:39:24:e0:85:3a:4d:f8:dd:86:81:e2:f5:3a:19:
                    58:91:82:b0:55:70:5c:3d:2f:79:29:fe:2a:3c:ec:
                    10:d2:e1:a8:72:70:16:e3:04:b1:f8:bb:f8:a9:0e:
                    dd:b4:35:5a:44:ae:12:95:b4:0c:57:2c:56:19:ec:
                    64:eb:2f:d8:c0:02:a5:61:ce:49:c1:75:ac:ae:43:
                    66:16:42:93:77:9d:dd:f5:15:7c:f4:90:64:3a:3b:
                    1e:31:05:da:1f:d7:2d:37:7f:7e:90:8e:75:6b:5b:
                    9f:d4:a1:79:5f:72:39:7a:7c:db:bd:cf:79:7e:ae:
                    8b:c9:ec:47:f5:52:96:be:85:7a:50:ab:48:59:27:
                    33:c8:7c:b0:8d:8e:2b:c3:69:e9:a2:f1:b6:a8:2d:
                    d2:35:89:8a:ed:bd:86:4d:46:6a:23:55:75:39:f1:
                    45:a7:81:ba:00:9c:c8:d5:ce:03:95:fd:7a:20:14:
                    da:74:22:c3:b7:39:df:a8:4e:ba:3e:ec:4e:40:2b:
                    96:80:30:0b:36:a6:23:35:07:cb:14:9c:2f:90:2d:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:92:1D:E5:2C:A6:23:F2:BC:98:DF:18:C1:45:8A:11:49:E8:EC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:74:47:87:ab:97:68:b2:f4:6b:d3:a7:d3:97:11:fb:da:3a:
         92:25:58:72:72:27:1e:28:7b:38:26:74:e7:43:3c:02:0c:36:
         d5:68:b7:35:e7:e6:ed:16:07:c2:98:d2:00:b0:ef:91:47:55:
         f6:e1:92:02:38:bc:55:0e:9b:5f:76:88:7f:89:32:e0:fb:27:
         12:0d:8f:17:2f:cc:c1:45:40:c9:a8:2b:50:75:e5:b4:03:9d:
         81:42:a8:dd:0e:2b:5d:47:d6:e6:6a:de:20:85:16:5e:e6:df:
         0e:c5:ac:53:87:fc:15:07:39:06:c8:f2:6e:91:36:e9:0b:0d:
         a9:72:8c:3a:07:4f:4a:80:1f:51:b2:eb:f3:09:a3:0e:d4:c7:
         dc:22:04:d5:81:50:c1:5a:77:61:02:f3:96:9a:73:b6:3d:cd:
         90:b6:1e:fb:10:25:a2:15:fc:a3:90:4c:3c:e5:e9:02:3e:6f:
         ea:b2:d3:ba:97:2c:eb:2b:2c:d5:f4:40:3e:e7:18:9f:34:52:
         0f:01:42:4c:06:62:4d:d9:2e:1e:f4:2a:91:a8:5a:bb:4b:46:
         7a:4b:c4:d8:1b:ce:5c:3d:13:ef:32:4a:30:80:07:0b:19:12:
         3a:19:e1:7d:ae:b5:b9:34:96:e8:7f:d1:86:27:3d:a2:5b:ac:
         c6:b2:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 12:40:19 2024 by rpki-client on console-ams.rpki-client.org