Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa
File:                     5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa (raw, json)
Hash identifier:          sDUbZjwPEA/CZOvL2IhPbVhBJXwH/ykAA8mkJ3L62r0=
Subject key identifier:   83:55:89:54:4E:59:F8:31:31:FF:5D:B7:B7:C3:88:2D:60:34:7D:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B83A33A4F09CABA1AEFE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        71.178.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:83:a3:3a:4f:09:ca:ba:1a:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=0398957c-c9bd-4fbe-8c20-83dde7f175c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:9b:3a:31:0a:b0:34:49:17:8e:c6:da:17:
                    a0:51:fa:40:99:7e:17:69:05:6a:a4:33:10:47:68:
                    f0:a7:73:ac:8a:31:91:55:ba:44:76:3f:ff:54:6a:
                    cd:1a:8a:55:92:bc:4a:61:95:e1:8d:9a:fc:a9:78:
                    9f:50:b7:3c:8f:74:9d:e6:75:9b:a5:6a:cd:e9:65:
                    43:d9:0a:a5:34:ae:2d:a9:e0:10:c3:8b:ad:ce:34:
                    f2:32:68:4f:8a:ac:a4:a3:00:a9:e1:67:8d:b9:70:
                    07:bf:5e:22:b0:25:69:ad:a5:06:a6:2b:54:d1:1a:
                    e8:05:e5:bd:28:87:1d:23:92:cd:7a:3f:fc:85:e6:
                    e8:b8:73:1b:c4:26:28:61:c3:36:fb:c8:be:d4:ca:
                    d9:40:84:a7:35:ed:39:8d:4b:a9:82:ff:3d:57:e2:
                    90:e8:3c:15:30:48:97:1f:94:97:14:9b:91:36:54:
                    92:8b:3d:ca:f9:e3:2a:4f:4a:18:04:99:18:33:b3:
                    8d:b5:5e:93:44:95:4c:91:f9:8b:69:fa:a8:bb:35:
                    0a:e3:33:29:a9:b2:2d:46:d5:af:00:ee:06:bb:e1:
                    4b:a4:f6:3f:43:d8:dc:c1:ec:c7:e7:41:dd:43:56:
                    84:bc:6b:b6:8c:ea:a2:b0:85:2e:dd:51:d7:28:33:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:89:54:4E:59:F8:31:31:FF:5D:B7:B7:C3:88:2D:60:34:7D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5006343d-d53a-3a14-b9b4-f335a5b74d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:e0:d6:b9:38:25:72:ef:41:73:e7:9e:30:a3:89:d0:a0:
         90:a9:ed:34:20:fd:c0:0d:82:2e:47:9f:9c:4a:1f:0c:f5:20:
         ad:21:eb:28:2e:24:28:22:21:41:b0:03:35:68:9c:f6:22:cf:
         01:40:ac:e1:4d:d7:bd:1d:0d:a6:b7:84:01:ee:36:b3:71:ef:
         65:6d:b6:07:84:1a:ef:36:c7:ad:70:63:5f:80:5b:a3:c3:f9:
         2f:3d:3d:1c:3b:3e:f0:8d:24:6b:7d:bb:0c:c0:0e:81:de:8f:
         9e:ff:cf:2d:1e:56:c1:f3:51:6b:64:31:ef:e9:f3:fa:89:53:
         6d:3a:09:01:96:72:29:63:80:57:b5:d9:f9:e1:c4:10:c5:e7:
         b7:49:2f:3d:b9:87:e9:69:5a:35:2e:35:06:55:eb:9c:e2:0e:
         14:94:32:ca:00:6a:61:4d:61:43:6c:84:a6:87:d6:8a:2e:49:
         ae:98:55:70:9f:1f:20:d1:fa:b0:0d:44:fb:8f:90:87:fe:41:
         95:16:5b:f2:6a:dc:72:03:6b:b4:82:cf:33:69:c6:05:35:67:
         8f:1c:a1:13:fd:d3:be:b8:9c:d0:aa:4a:78:22:07:62:3f:4c:
         b9:d5:8a:74:89:06:24:d8:63:32:4b:27:6c:dd:c0:22:b5:83:
         25:79:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:30 2024 by rpki-client on console-fra.rpki-client.org