Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/520a5da7-9a52-311a-8d13-6af33c211a8a.roa
File:                     520a5da7-9a52-311a-8d13-6af33c211a8a.roa (raw, json)
Hash identifier:          GRpv5oCxUIWPaxFAyNzvzJ2waOkXo007qzY9EbblkUE=
Subject key identifier:   FF:C0:06:DA:23:6B:C8:E2:00:F0:8A:56:39:11:4C:0D:D7:B6:9E:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B925E9F74F255A8AD8790
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/520a5da7-9a52-311a-8d13-6af33c211a8a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        71.176.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:92:5e:9f:74:f2:55:a8:ad:87:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=965825cf-50cb-4278-8091-f540a6bce4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:d0:1e:b9:17:41:cf:46:d6:e7:74:eb:6e:
                    9c:1f:e2:6a:ee:51:a6:d9:7c:2c:90:e7:f7:68:81:
                    1c:a7:ef:cb:83:c0:fa:32:59:68:80:d5:24:16:b6:
                    90:f7:fc:cd:2f:e3:ad:47:ef:0d:f0:47:a5:7a:e7:
                    c9:67:4b:f2:58:2a:22:35:4c:9a:19:58:19:b6:14:
                    df:09:3b:dd:94:43:16:27:34:59:8c:4a:e9:1e:78:
                    10:57:1f:90:88:e2:bd:73:30:f4:bd:6b:0b:f7:a1:
                    53:ec:2f:9e:b6:25:50:90:bc:42:2f:d7:a1:6f:eb:
                    45:81:7a:4b:87:eb:52:98:ae:a5:4b:a6:e7:8b:88:
                    3e:cc:b0:4d:3e:13:91:77:c7:94:c5:97:46:05:0d:
                    9f:5e:b3:2d:d4:f2:4e:a4:5e:91:c9:79:6e:a9:e4:
                    a5:18:a0:46:27:f9:5c:c6:b2:aa:ea:48:d6:71:4a:
                    f1:30:0f:3c:3a:6f:ee:ec:ec:36:f1:98:0a:0a:9d:
                    43:03:6d:85:2c:89:bb:c5:94:77:25:0e:cb:64:2c:
                    8d:ba:0b:f2:0b:34:5d:ee:36:20:83:70:6e:57:5a:
                    82:a0:9a:be:a1:52:8a:b8:a5:c5:0a:53:16:9c:5b:
                    c9:8d:6c:0d:6d:e4:9b:34:79:3a:e8:b0:98:7f:ef:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C0:06:DA:23:6B:C8:E2:00:F0:8A:56:39:11:4C:0D:D7:B6:9E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/520a5da7-9a52-311a-8d13-6af33c211a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.176.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a2:2d:c1:d1:56:46:31:66:46:5f:8d:c3:95:83:27:9e:7f:
         72:81:4d:14:7d:86:ce:f7:fa:2d:a6:80:0b:f2:a3:a4:74:ff:
         93:f7:28:80:4e:9d:b3:2b:da:20:c8:48:a3:6f:22:b5:c4:41:
         ed:20:3f:be:31:1b:67:90:6f:ff:f3:fc:f6:5f:b1:82:cf:07:
         a5:c8:58:cd:0c:70:23:f9:80:f7:bc:cb:6c:34:c3:cb:34:6e:
         63:31:f1:b5:22:cc:90:c1:a5:c8:1a:8b:84:12:02:ed:21:2f:
         5d:cb:15:e4:64:88:d0:31:f5:b3:9d:62:57:66:47:bb:f2:68:
         04:78:64:f4:9f:ec:8f:1e:76:21:2c:e6:3f:c9:df:b4:a1:f3:
         2f:81:c3:b8:62:c5:87:90:4e:7a:1e:70:ea:0e:f8:fa:29:24:
         d6:5d:e1:73:7a:86:da:de:bb:0b:d3:c0:ab:d4:ee:3f:64:13:
         ce:bc:ca:04:f1:c2:e8:d7:aa:ef:c0:c4:a7:8c:15:11:a8:7c:
         3b:44:eb:14:4e:5d:27:5a:94:13:5d:37:96:45:66:f3:6c:42:
         51:8b:54:df:e2:25:c7:f6:fa:4d:24:42:61:e5:af:f1:5d:b2:
         6a:af:5c:d2:45:f8:6d:2f:bd:93:dd:3f:d5:b1:d8:e8:dd:b3:
         c6:41:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:26 2024 by rpki-client on console-ams.rpki-client.org