Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
File:                     6b231feb-36a3-3410-bd81-3149f25c8a96.roa (raw, json)
Hash identifier:          i9026U2zlfWnuLShTwcxkaafBIQWm+VFLodRAFJPdSo=
Subject key identifier:   D2:A5:9B:A3:67:DB:93:B5:3B:7F:CE:3A:2B:18:7B:CD:3E:B2:42:B8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D3F6369029F1780BFD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        71.125.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d3:f6:36:90:29:f1:78:0b:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=404a1485-e8b7-494a-8574-a739ce1ed53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:96:2c:84:93:1b:37:3e:2b:94:a0:7c:fc:
                    63:39:8c:b2:9e:f0:69:e8:dd:5c:b2:1b:ab:60:fa:
                    2b:a9:9c:ba:79:88:0f:dd:f8:26:b6:ec:5e:66:b3:
                    af:0d:60:04:cc:b0:37:16:16:14:75:ad:f3:20:6c:
                    b2:cb:bf:2c:08:2a:4e:c0:e2:f2:3e:d6:78:68:33:
                    2b:5b:89:d0:b2:b0:08:ec:43:9d:0a:96:47:95:d0:
                    97:cc:f2:97:92:22:f0:a0:e3:20:d4:ea:25:a5:d5:
                    29:8a:81:80:64:90:33:06:8f:eb:7b:49:f0:4a:9e:
                    8b:2f:21:41:72:da:a3:c5:9f:b6:53:38:fb:2a:00:
                    a8:89:0a:a6:04:b7:48:b6:39:0f:84:3f:a1:f3:0a:
                    74:4b:75:55:c7:48:df:84:57:c7:e9:d5:15:f9:54:
                    97:1b:fb:c2:e6:cc:46:e8:54:27:57:90:cf:92:95:
                    54:e5:2a:cb:86:4e:8f:47:a1:fd:a0:f1:20:61:ae:
                    92:87:9e:32:cd:0d:65:43:32:f7:e9:9d:b0:45:3d:
                    eb:d1:50:2e:4d:b7:70:66:ff:54:63:11:08:a4:03:
                    89:af:22:fb:d9:a4:3c:47:5f:e9:8c:2d:bd:a2:16:
                    ab:2c:cc:8f:59:7e:43:66:52:46:45:19:04:2f:78:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A5:9B:A3:67:DB:93:B5:3B:7F:CE:3A:2B:18:7B:CD:3E:B2:42:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.125.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c3:83:1f:9e:6b:c6:d0:d5:fe:28:de:8c:48:d0:89:73:cc:
         e4:fe:e4:9a:71:7e:9c:ab:73:ed:c4:ec:de:40:42:3e:e2:a1:
         f4:b4:72:9b:f9:5f:f1:9a:0f:a7:af:8e:31:34:7d:f9:e7:bb:
         3a:77:0b:ca:08:ad:fe:c7:2d:02:16:a6:5c:f4:3c:e1:ad:c0:
         37:cb:43:90:9e:9b:99:0e:36:73:97:8b:31:3b:f0:87:9e:1f:
         3c:69:2c:60:47:81:dc:c6:6c:6b:b8:7a:c2:5d:47:23:01:b4:
         1a:54:ee:72:79:c0:f4:3c:60:92:86:54:60:12:f1:5c:ef:b6:
         c2:7b:0a:41:55:ae:e5:9e:4b:81:72:6f:1f:77:61:ac:fd:31:
         36:c2:c1:3c:8f:4e:2f:0e:2f:70:d7:ca:00:23:66:0d:5a:6e:
         ef:4e:85:46:9c:75:ed:23:67:ed:63:bd:ce:a6:6f:bf:cb:55:
         0b:e6:8a:9d:51:0a:d8:6c:78:06:8a:85:d3:96:7c:75:4e:3a:
         88:eb:84:1b:b3:63:05:8e:96:ae:22:6b:0c:7e:95:fd:5b:b7:
         32:52:02:94:3c:d0:aa:75:37:35:a7:a0:f3:70:8e:cd:d0:3e:
         8d:71:f3:f6:89:79:64:a0:60:be:f2:06:71:71:46:1b:1b:ec:
         90:8e:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:31 2024 by rpki-client on console-ams.rpki-client.org