Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c081c35-d4bd-38eb-8650-ae525c61ad25.roa
File:                     6c081c35-d4bd-38eb-8650-ae525c61ad25.roa (raw, json)
Hash identifier:          HqUHhSzh2rxmQpP3CG++T7UiuSr/8vY3ncU05oMNdVQ=
Subject key identifier:   41:9C:9D:EF:FB:FB:78:D2:FA:4F:5E:33:41:B2:83:C4:0F:C5:17:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD5FEE208FA3787AE4EA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c081c35-d4bd-38eb-8650-ae525c61ad25.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        141.153.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d5:fe:e2:08:fa:37:87:ae:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=1368a936-c835-45af-9352-2dc852a9f244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:45:09:e8:1c:80:29:87:44:6c:89:c7:8c:
                    58:16:bb:c2:9f:99:4b:fe:08:b2:4e:e0:75:8e:7c:
                    15:90:6d:63:8d:bf:ab:6b:4a:48:c6:5c:86:3c:db:
                    c1:74:0c:d9:5d:85:1e:b2:ee:49:24:5c:57:0e:bc:
                    65:09:a5:27:9e:21:02:61:3b:dd:9f:9f:17:bc:f1:
                    bd:c0:f6:38:95:18:85:1d:13:99:64:32:f5:44:a1:
                    df:de:5a:c7:74:6a:08:61:3d:52:0b:72:f4:db:88:
                    c0:a9:a3:0a:ee:24:4a:3e:9d:be:51:c4:79:02:ec:
                    0c:ec:2e:bd:af:ca:38:60:de:2b:dd:26:3b:64:be:
                    dd:d9:64:b1:0d:1a:fb:23:7f:07:e8:fb:3c:7a:d8:
                    0c:f6:c9:43:7d:84:13:89:a1:ed:1f:e2:9c:26:0d:
                    c5:a3:13:3c:cb:a5:a4:dd:71:88:2a:c2:eb:2c:48:
                    32:9d:67:3a:62:95:9e:fc:62:9e:cb:f7:de:5d:60:
                    d1:b4:6d:c2:a7:b9:66:a5:8a:b8:f4:ce:8f:00:4b:
                    83:c1:e7:59:e5:18:0b:b6:7d:99:30:eb:e3:cf:56:
                    fc:19:10:9d:d7:89:8b:cf:a7:21:f0:a0:d5:7f:7d:
                    32:64:27:39:83:8c:83:d7:c3:9c:1a:e1:b9:58:56:
                    d4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:9D:EF:FB:FB:78:D2:FA:4F:5E:33:41:B2:83:C4:0F:C5:17:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c081c35-d4bd-38eb-8650-ae525c61ad25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.153.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:ac:2f:77:1e:08:cc:ed:1f:41:39:ac:25:82:58:41:d8:
         97:c5:4c:c2:24:0b:85:dc:1e:94:7c:e6:f9:1e:5f:f7:1d:b2:
         39:aa:5e:f2:f9:54:0f:8e:e1:c3:ba:46:27:b7:3d:45:cc:5f:
         e3:d1:79:70:9e:f6:28:b7:b4:f1:ad:28:77:38:4a:03:a5:4d:
         bd:79:23:23:a3:ec:2a:9e:eb:6f:3d:8f:43:e5:6b:0c:a1:4c:
         88:f4:63:19:5e:dc:1d:e1:dd:59:48:dd:12:a2:f5:a3:e0:de:
         e1:1f:e4:e8:ed:6b:d9:5d:77:60:f2:f7:f4:52:95:1e:ca:94:
         1f:00:50:84:c8:d2:bb:36:5a:2c:4d:3d:87:20:78:ea:74:e2:
         7a:3c:14:4b:87:cc:a4:8a:e4:25:a1:8e:b8:50:f8:e9:ab:df:
         db:69:4e:78:c1:41:dd:d5:69:61:16:9b:70:0c:ab:5f:65:d4:
         6e:4d:00:3b:a3:dd:cb:91:f9:03:ab:25:23:92:88:45:7b:46:
         12:44:05:96:c2:95:a4:e8:fd:f7:8e:42:71:76:3b:76:7c:ae:
         dc:4a:71:d1:79:3f:35:50:3f:ac:69:5c:7a:43:0b:47:0b:e8:
         7d:c4:ee:d5:43:f3:2e:7b:c1:ab:c4:6e:02:15:a9:75:40:e5:
         c5:90:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:25 2024 by rpki-client on console-ams.rpki-client.org