Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c23083b-3587-3051-ad7c-8d76aaacf485.roa
File:                     5c23083b-3587-3051-ad7c-8d76aaacf485.roa (raw, json)
Hash identifier:          3trU7ExUzR67dC547pheEW2utWN2PSn+YRCUo0nbjsU=
Subject key identifier:   C6:53:D5:05:E8:12:BE:CF:7A:C5:83:53:85:25:1B:97:FD:08:64:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD9401CDF0A677AF3BF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c23083b-3587-3051-ad7c-8d76aaacf485.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        141.152.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d9:40:1c:df:0a:67:7a:f3:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=ab3adde9-6cfc-4f0e-a084-c41800b4dc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:4b:94:9e:33:9e:73:fb:29:05:f2:48:bf:
                    e5:aa:be:82:7b:5a:8f:89:67:a7:5e:0f:16:42:86:
                    df:2f:c0:fc:92:bb:fb:a6:b5:01:21:4d:0d:ee:e6:
                    9a:89:2f:5d:58:c6:b3:f2:ad:f4:ba:62:3c:63:b5:
                    3f:2a:d1:01:d5:a2:9a:c3:2b:dc:65:7d:88:52:63:
                    8d:cc:9e:9b:61:30:5a:a1:4a:37:a2:c1:98:83:7e:
                    f2:1e:5b:82:f2:2a:21:99:ac:5a:37:7d:0d:e7:3e:
                    f5:21:73:56:cd:ea:e7:64:22:0b:28:ac:36:2e:fa:
                    1c:56:e4:0e:91:e8:6b:12:2a:6f:5f:94:01:bc:1a:
                    0e:4a:86:6f:10:d1:c5:20:fd:15:51:19:dd:0f:9a:
                    7a:87:18:33:43:86:6a:de:20:fd:d5:7b:75:cc:b1:
                    64:7f:dc:47:bb:2c:2c:8d:23:20:66:2b:d2:0b:cf:
                    58:34:be:fb:1a:0d:02:e9:fc:9f:60:13:87:a1:e3:
                    ca:f6:93:40:0c:cb:9f:69:18:ff:44:ef:ba:a2:ac:
                    c2:5e:e7:60:3a:4c:02:fa:66:bb:b3:4c:49:8d:80:
                    c3:50:ca:b2:55:56:c2:70:a4:db:1b:ef:d9:9d:76:
                    91:75:fd:46:7f:da:d7:21:42:06:26:6c:80:2b:92:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:53:D5:05:E8:12:BE:CF:7A:C5:83:53:85:25:1B:97:FD:08:64:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c23083b-3587-3051-ad7c-8d76aaacf485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.152.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:54:41:81:04:c6:5b:d1:d2:72:13:12:5a:b3:e8:a3:ce:5a:
         eb:50:f5:ac:f8:0a:64:64:2f:0e:e0:18:74:69:61:30:28:7b:
         27:19:c6:45:68:7d:1d:b7:2c:15:c7:19:c7:ed:0d:52:04:40:
         89:4e:fd:3f:08:9a:4b:4c:8d:d4:d3:0f:db:93:e6:7a:2a:bc:
         09:b3:56:c0:0a:c0:1f:b1:a5:52:9c:f3:6f:b6:88:a5:0e:cd:
         3a:a9:b5:bf:c2:33:d4:f4:7b:42:4a:7f:28:f8:cc:a8:b8:55:
         a6:09:99:8d:f7:88:fd:41:5e:4b:76:6d:04:bd:33:46:73:d0:
         f9:26:3e:30:30:62:1a:47:a1:8a:63:de:7f:f5:12:6d:45:aa:
         8b:20:74:00:15:f4:ec:6f:1e:88:fc:e8:36:c8:f3:e9:f6:9d:
         b7:58:c4:c9:94:59:df:65:f2:80:c2:95:69:a6:b2:fd:f7:22:
         ae:21:4c:8b:13:4f:46:a4:6e:3d:9a:d3:d2:c4:63:9b:30:c7:
         a2:c7:82:2c:c3:78:51:b3:81:02:d1:23:34:60:cd:fa:1e:b2:
         95:aa:8c:fc:7b:50:fe:cf:b0:d6:b2:95:3d:f5:90:d3:e2:9d:
         b2:cb:4e:77:90:b8:72:8d:7d:3f:5e:78:f5:b0:10:5a:48:8d:
         f6:8a:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:25 2024 by rpki-client on console-ams.rpki-client.org