Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa
File:                     74955ea1-c95c-3e03-8594-4e9406f667b1.roa (raw, json)
Hash identifier:          VgZ7NLtYYx3GF+Jc92GMeYZsoOJeaRhLc854OUMztCM=
Subject key identifier:   FF:BE:D0:1B:FD:2F:EF:06:BD:CC:27:E3:B5:DA:77:0C:E3:1F:12:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DDDF0136BAE2294F523C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        71.162.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:dd:f0:13:6b:ae:22:94:f5:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=39ea4540-55d9-47ef-ae64-71f9baca85b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:ba:06:3d:f1:b8:82:8f:aa:2d:64:09:b8:
                    9c:66:a6:66:2b:50:16:96:2b:2c:e1:57:b8:c3:68:
                    ee:50:4e:60:45:7b:eb:6d:e2:e2:af:32:9e:fd:fc:
                    25:03:cf:f9:ac:5b:87:ef:7d:2c:06:09:47:98:1d:
                    d4:70:41:f5:ae:f7:4a:75:ef:8d:58:3b:da:3d:05:
                    b8:7b:f3:b5:aa:94:74:59:bd:a3:f2:8e:08:79:2c:
                    c3:40:dc:89:0a:4b:3e:cd:8b:0f:fd:fa:33:28:27:
                    b9:a7:ed:27:66:da:24:0e:a6:0b:f8:30:17:39:e0:
                    6e:43:c6:ed:14:76:5c:55:d6:9b:a9:87:f9:e1:3b:
                    f1:ca:5a:ce:87:7c:09:03:21:7e:90:9c:63:fe:1c:
                    3b:0b:f6:06:40:27:92:43:3f:be:07:54:fa:ec:6b:
                    dc:af:38:e2:55:61:d0:fc:c8:63:81:53:7b:cf:3b:
                    b3:db:0a:97:3d:35:06:2b:52:2a:a8:76:22:9c:3a:
                    ce:8a:82:17:9d:e9:9b:fb:54:9b:c3:a0:c3:9a:69:
                    fe:94:0e:cc:4c:23:ca:f9:67:a3:f3:e9:eb:14:12:
                    a9:e0:28:80:35:3f:3a:29:db:e2:44:f4:65:f7:27:
                    2d:78:9c:79:2b:13:ad:a2:48:e0:07:e1:2e:85:7b:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BE:D0:1B:FD:2F:EF:06:BD:CC:27:E3:B5:DA:77:0C:E3:1F:12:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.162.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:d8:de:39:71:d0:2e:ed:3f:af:8b:14:de:bf:60:3e:70:
         71:3d:99:83:43:0f:6b:b4:0c:fd:cb:41:36:72:0d:79:e7:20:
         2e:62:70:33:9b:df:ab:d4:56:80:ae:14:40:9d:9b:57:41:51:
         ce:04:3c:0b:b4:5e:08:5b:3b:cd:1b:5c:e4:c1:10:7e:92:21:
         8f:ce:ac:e7:d0:03:49:f5:ca:d0:39:2d:9b:56:60:7e:5c:88:
         28:46:66:9d:4a:a1:18:1d:d8:8a:06:35:88:7f:d1:59:20:1e:
         12:5b:78:33:92:fd:30:a8:7e:6d:58:82:57:af:ba:fb:3f:7e:
         e6:6f:fe:98:b4:68:60:45:f3:ff:b8:5c:ca:53:b7:a1:9d:8e:
         5b:b0:9b:e5:32:9e:eb:38:83:ff:9c:42:f6:c2:8e:a0:b1:e9:
         94:09:32:ba:a8:0a:81:a1:f2:99:73:8e:b3:c5:62:85:72:e4:
         c0:85:46:d9:db:05:fa:84:78:85:6c:a9:b8:70:89:a4:eb:0f:
         ac:61:f1:52:a5:13:ac:bc:94:df:82:5f:cb:d4:03:74:10:ec:
         4a:9a:ca:df:34:68:9d:c0:5b:85:77:7e:e0:bb:d7:b5:c3:bc:
         d9:c1:d3:4a:29:e4:e1:02:02:cb:a6:39:1b:db:9c:a6:ec:f2:
         f2:b4:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:26 2024 by rpki-client on console-ams.rpki-client.org