Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d2bf38a-7b44-39e5-8cea-3a266b191399.roa
File:                     5d2bf38a-7b44-39e5-8cea-3a266b191399.roa (raw, json)
Hash identifier:          lLiWFs8Rg0R7QKJrfcJVhNgaNpK4emBlIY2Bk5hzYmM=
Subject key identifier:   40:33:B1:29:37:51:94:CA:50:0F:AA:5D:00:4A:70:E4:6C:53:0D:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76E9AA53ED8E7752DC2BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d2bf38a-7b44-39e5-8cea-3a266b191399.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        151.203.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e9:aa:53:ed:8e:77:52:dc:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=328533e8-a079-46af-bc3e-1bb2c3d839a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:a7:15:b3:48:49:80:cc:7c:a9:26:0e:c4:
                    fb:bc:0a:07:98:a7:23:52:0b:cf:87:a8:2e:d5:97:
                    0c:90:bb:d9:50:f9:af:ee:18:de:66:8e:83:88:0f:
                    c2:1e:26:3f:17:27:58:6c:40:63:04:fe:64:81:ca:
                    72:2c:ed:cf:3d:16:c4:fa:93:96:e2:9b:c7:9f:a4:
                    03:98:8b:94:a4:3c:16:f0:6f:db:6c:2d:51:43:a4:
                    ba:d6:78:71:1b:14:8d:b7:70:15:51:13:94:79:45:
                    e1:7d:a5:7c:ce:a4:e6:95:5b:ea:c4:52:92:d7:33:
                    2f:23:72:da:c5:b3:41:87:50:3f:fd:55:91:a4:ab:
                    f5:80:1f:1d:4e:75:05:25:14:f6:31:86:42:7f:68:
                    68:58:7f:e0:67:3b:a3:71:c3:c3:bc:ba:e3:04:42:
                    d4:e3:13:9d:84:42:f4:d5:94:f0:a7:02:e7:55:67:
                    b5:2b:af:34:4f:42:1c:2e:98:8e:ee:c0:08:c5:0b:
                    cf:5c:1a:ae:e5:88:cc:d1:49:0b:59:4b:d8:03:e2:
                    13:6c:38:10:40:d7:ea:74:42:00:b0:da:27:b2:5f:
                    72:2f:0e:58:ad:c5:91:cd:40:07:3c:bf:2b:2c:9b:
                    29:db:c9:58:e8:fc:f3:d8:17:84:b6:ad:af:e2:19:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:33:B1:29:37:51:94:CA:50:0F:AA:5D:00:4A:70:E4:6C:53:0D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d2bf38a-7b44-39e5-8cea-3a266b191399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.203.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:52:9a:95:21:6b:a6:ea:f9:80:49:38:84:b9:f3:a3:b4:23:
         83:dc:4f:af:b3:a0:b3:49:f6:e0:da:da:cc:f8:c8:64:a6:9f:
         6f:96:9c:2e:c4:95:e7:7a:cf:91:79:c1:03:69:c2:5e:4b:08:
         57:fc:b2:6a:42:5f:6b:f3:49:83:53:da:6f:e8:d4:7e:40:c0:
         5c:17:e1:52:38:1a:9d:c3:ff:4b:da:7c:ee:48:db:4a:4a:5c:
         77:64:05:78:a6:72:e0:f1:56:af:e1:43:8f:1e:04:71:0d:9c:
         9c:4e:1d:6a:45:44:8c:41:84:db:72:6d:a9:0b:7b:a7:b8:98:
         41:2e:66:18:6f:00:ef:f7:db:4d:95:f8:39:79:bd:bf:11:af:
         3f:3f:83:45:2c:89:b6:6b:9a:ec:ed:49:d6:53:6b:96:da:01:
         d7:0d:3b:7a:f2:b2:62:6f:1e:50:72:b8:f0:87:aa:5c:6e:16:
         c0:ee:78:72:78:0c:93:73:15:58:7f:b4:42:5d:95:a2:c8:d9:
         68:c0:9f:e7:83:37:7e:93:f5:a7:69:93:ba:a7:6f:b7:b5:ad:
         82:de:bd:77:f2:e9:fb:28:ec:55:db:9e:64:d3:55:9f:25:40:
         bf:87:cc:01:a5:fc:18:cf:2f:fc:a1:5a:d4:fb:8b:c2:c4:67:
         d3:1e:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:32 2024 by rpki-client on console-fra.rpki-client.org