Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa
File:                     502f3f18-d19c-335b-9014-e1b9b3488140.roa (raw, json)
Hash identifier:          99Z4pbB2OhK+bNIsdky6Vg0JFPZUGLFAhuDRZdbsy90=
Subject key identifier:   79:34:9A:B8:50:F4:EC:52:72:5D:7C:C8:A2:54:AE:DB:29:C4:57:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80CC569E434C923229E4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        96.239.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:cc:56:9e:43:4c:92:32:29:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=9e8ec171-a6ed-4993-bae4-575080e28deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:14:37:02:04:ec:6f:fc:93:30:b1:40:e9:
                    ba:36:80:f0:19:df:25:f3:27:02:84:22:2f:48:f8:
                    15:a6:01:8a:c0:6f:9e:54:3a:30:73:4a:aa:13:45:
                    cf:85:8f:a7:86:ef:af:82:a2:c3:b4:90:46:5d:98:
                    81:82:a9:e8:50:b7:df:bd:9d:f0:c2:3b:49:e6:11:
                    f9:67:08:d7:d9:8f:52:9b:8c:de:ca:7a:df:84:63:
                    46:95:eb:51:13:77:f5:b7:ba:15:62:22:8d:64:4c:
                    6e:8d:19:7d:b7:1f:17:76:2c:f3:f3:19:aa:48:53:
                    32:1d:ad:c9:56:da:7d:df:d1:a6:51:c5:ed:02:30:
                    db:43:bf:0a:67:83:f7:2e:bb:e3:c7:11:a7:e0:01:
                    f9:92:7d:ad:59:18:5d:0d:72:15:90:7d:e4:39:dd:
                    1a:2c:52:f3:f0:6b:f9:5d:7f:cb:77:c7:8b:b0:b5:
                    83:20:63:1d:1c:43:80:ce:ef:af:c2:84:d4:d3:0d:
                    e5:f6:13:1b:e8:d5:7e:12:58:9a:8b:f4:9d:f3:30:
                    fa:07:e8:61:64:92:ea:19:b8:67:61:9c:16:b1:e9:
                    1e:fd:f3:93:c6:c0:f6:80:fe:08:80:24:69:21:a3:
                    7e:b6:6a:89:32:3e:1f:e6:9a:85:c4:d6:e3:51:30:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:34:9A:B8:50:F4:EC:52:72:5D:7C:C8:A2:54:AE:DB:29:C4:57:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.239.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6a:ff:f6:11:f5:c0:2c:96:c9:45:c1:7c:88:a2:77:3b:e1:
         74:92:c4:7f:d2:e4:f2:20:cd:b4:0b:41:66:3a:5b:e8:ee:89:
         fe:3a:cd:b2:67:11:13:98:be:b1:87:fe:25:8b:36:45:08:7c:
         ed:6a:3f:d0:77:be:e2:71:b5:10:4f:f0:8a:fc:13:e1:87:e2:
         81:b4:20:9a:0a:bd:57:a5:ac:0b:d8:b8:8f:84:e9:e9:2f:c1:
         77:f5:88:be:64:0e:cc:86:e8:e4:62:c1:e8:2d:80:4a:a8:57:
         43:1a:d7:b7:57:7e:0f:ca:4f:5d:b7:8c:bf:b9:41:4d:8d:1b:
         0c:fd:dc:35:a0:df:ac:23:7d:c2:17:16:a8:95:6d:67:e8:4b:
         68:fa:7d:99:27:37:e5:62:2e:37:b5:d4:fb:af:aa:42:06:b8:
         0b:7f:d9:ab:e3:58:bd:51:05:bf:9a:d3:f4:e9:d9:68:52:af:
         90:ba:e2:22:b9:3f:e4:c0:13:31:df:f8:9b:53:41:28:6a:3b:
         b4:9a:90:9d:0f:30:5e:e1:89:59:21:fc:4c:7b:57:4d:0c:28:
         ae:7f:26:d8:9a:c4:77:9e:b6:de:31:88:a2:6a:ca:2d:f2:6b:
         fc:50:d1:f0:6f:4d:32:2f:60:bb:bf:87:cd:6f:01:a0:2f:35:
         13:c6:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:26 2024 by rpki-client on console-ams.rpki-client.org