Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa
File:                     6c829838-1482-3a20-82ea-a9981a23fcae.roa (raw, json)
Hash identifier:          vKBIvMcx27qMjqYHkge9Kb82YxfH5PUUY33zV2MIpCM=
Subject key identifier:   66:03:45:D6:BD:EC:68:50:EE:BF:18:A6:B8:9B:F3:C7:3A:50:21:51
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B183E0E6B7B1AEA65AE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        70.21.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b1:83:e0:e6:b7:b1:ae:a6:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=9c6cc200-6901-4f99-9961-bc3054bb30b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:1b:9e:b5:20:e0:cd:4b:98:8c:17:41:7d:
                    e4:5e:ca:14:76:bc:21:d3:a8:26:0c:a1:e4:80:28:
                    a6:9a:d7:6e:39:70:50:73:a4:3f:7f:97:39:40:b6:
                    39:b1:a6:67:ee:ae:29:df:cb:42:6a:ac:81:09:de:
                    53:26:a5:b6:2c:b4:ff:89:e4:04:15:d0:ec:e7:6e:
                    75:58:2a:e8:0e:7f:c7:eb:83:4c:c0:e2:c6:c0:72:
                    ca:2f:37:21:a6:1b:a7:d8:52:44:79:de:1c:74:ea:
                    8b:24:6d:ad:06:02:08:c2:52:bb:1f:e9:1b:9e:63:
                    e2:7d:e0:6a:9c:a5:e3:9e:c2:75:08:e6:c3:b0:47:
                    2c:9f:12:29:b3:c8:5f:02:4f:33:b3:cf:f3:1c:3b:
                    22:d7:2e:b8:eb:d9:3a:2b:a0:61:23:e5:aa:ea:6a:
                    a8:ff:d1:f3:27:b0:bc:0f:ce:cc:f4:7d:a0:93:01:
                    a2:ed:71:14:2c:17:98:f3:74:22:99:dd:ca:66:68:
                    b7:ea:d1:9b:f3:bf:07:ca:cd:a9:b5:11:4d:1d:80:
                    77:14:43:3b:1f:59:dc:ab:6c:e8:45:bf:a3:bc:c8:
                    78:b1:af:06:e3:86:e2:d9:52:14:3c:ef:27:ba:27:
                    17:77:a5:f5:e1:c8:2a:47:76:89:be:00:dd:11:1f:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:45:D6:BD:EC:68:50:EE:BF:18:A6:B8:9B:F3:C7:3A:50:21:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.21.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:40:a5:3d:8a:20:7d:c3:73:e1:c0:2f:1b:08:e5:c3:69:
         4a:10:68:ca:89:9a:3f:21:e5:48:51:a0:a6:ce:d7:20:f6:79:
         d2:83:92:f2:82:ba:5e:b3:b5:59:99:4c:49:c4:96:b5:24:17:
         9d:8e:09:f4:4a:46:2d:1e:2a:d8:c8:0a:1b:0b:12:14:30:34:
         c5:fd:02:71:6f:99:4d:9d:b3:9e:9c:a5:77:50:6a:6c:7b:29:
         32:8e:4d:5a:d7:ea:e4:0c:47:3a:0f:69:60:a8:3a:9c:70:2a:
         c1:fb:dd:0b:0c:02:c7:ce:b1:32:21:ca:bb:fe:be:97:04:34:
         ae:75:37:9e:92:e0:33:b9:14:bd:24:71:03:3b:1c:dc:f3:ac:
         3d:37:d8:d8:4d:24:20:4d:90:6b:d4:16:14:74:cc:d9:20:ba:
         30:98:64:48:b2:28:fd:74:b8:a3:3b:d3:7a:35:04:0e:d9:65:
         61:be:8a:07:c0:87:a4:c6:05:e0:b5:14:b6:47:3a:84:93:30:
         e7:5d:07:44:92:89:56:5a:d1:1c:18:d8:cf:c7:1d:23:45:95:
         e6:68:78:99:25:6d:db:56:a3:ca:67:63:80:af:92:d1:d9:c8:
         52:ef:99:d5:ad:1a:17:bf:d6:44:a2:1f:7c:02:cf:0b:0c:6d:
         cc:11:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:24 2024 by rpki-client on console-fra.rpki-client.org