Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa
File:                     74955ea1-c95c-3e03-8594-4e9406f667b1.roa (raw, json)
Hash identifier:          mLTr7jRz7RslY1cfFy4OhMsM01VtfgPJm8mnH3j/8UQ=
Subject key identifier:   F5:2B:DE:86:8D:DA:63:48:FA:7A:9C:0F:B1:00:E0:CC:F9:AA:63:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80C8BDA2595912C0DE6B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        71.162.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c8:bd:a2:59:59:12:c0:de:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=f09bf66e-5f5b-42df-aa37-64dd38aecba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:3e:0f:99:34:23:59:d1:0f:e5:8d:46:74:
                    ce:d9:9f:e2:51:58:0d:6c:c6:69:08:8b:c3:6f:31:
                    df:97:ca:fa:a9:18:aa:ef:70:d8:1c:32:62:9a:fb:
                    9a:b1:13:65:02:c7:21:4c:27:10:c4:07:68:50:55:
                    0c:a7:ab:7b:ec:0f:a5:53:86:4a:ed:be:73:e5:2c:
                    1b:0e:13:a1:a0:d9:f3:29:be:04:d2:50:cb:22:59:
                    5f:07:47:ff:67:e1:ff:e6:9e:67:fe:ff:dd:84:22:
                    14:e7:77:ba:50:a8:8d:e4:1d:7e:49:29:f4:31:87:
                    5f:a2:81:0c:e4:5a:e7:6b:d6:d7:af:a5:c7:fd:46:
                    b5:ec:48:ad:86:f2:21:68:06:c4:44:2e:25:d4:4d:
                    02:aa:82:e3:ee:95:32:da:8e:85:56:6f:be:2c:8b:
                    87:5c:9c:6c:27:eb:06:55:b6:4a:aa:a0:4e:db:e9:
                    2f:95:51:2e:04:65:8c:94:b8:b0:52:27:fd:c1:6b:
                    f1:7a:50:0a:7b:82:1f:1d:d9:c5:01:53:07:14:a2:
                    37:86:f2:ba:17:da:b4:69:08:db:73:c0:0c:c3:e5:
                    97:71:e3:9f:55:50:a5:1b:9f:db:3c:72:bc:26:9e:
                    f8:db:e3:ba:99:d2:e6:f1:bf:c9:7f:24:11:44:ed:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:DE:86:8D:DA:63:48:FA:7A:9C:0F:B1:00:E0:CC:F9:AA:63:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.162.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f5:c0:f8:e6:36:49:0e:8c:3b:cc:d1:7b:99:e2:d0:c0:fe:
         c8:70:5f:54:a7:04:e5:fc:34:27:6d:00:34:31:b3:bf:c2:c1:
         92:f3:22:e5:2a:47:de:40:99:67:d3:d9:07:09:7e:19:74:c1:
         aa:90:6a:3c:4e:3e:2b:ca:7d:03:68:0a:50:56:f9:f7:cf:8b:
         cb:3a:cf:c2:4b:f7:b0:a9:74:76:30:6a:1b:fb:0c:96:c3:7e:
         67:31:c8:96:22:76:3e:48:c2:5a:92:82:8d:7f:cc:f0:05:bf:
         c2:59:95:c4:89:e9:f5:6d:86:60:58:c8:41:fa:ca:d7:f8:bd:
         98:04:67:b7:4f:b1:72:d6:79:80:64:79:ff:fd:88:fd:40:48:
         3b:11:36:54:e4:f9:c7:4f:9b:c1:03:d4:a4:01:8b:5c:d0:49:
         86:df:1b:5e:1a:67:78:29:99:f8:f1:fe:9a:7f:ab:38:74:35:
         ae:2b:d5:cf:57:59:2e:b5:90:22:7a:6d:06:c2:21:ba:77:26:
         d6:97:48:75:d3:9b:60:63:01:f0:24:8c:ff:a3:4f:cc:01:06:
         12:28:27:a3:d0:7c:60:24:d6:1a:83:51:c4:ea:ca:c8:cd:9c:
         09:30:72:34:86:24:43:54:1d:08:23:10:52:30:7e:bf:02:66:
         99:11:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:35 2024 by rpki-client on console-ams.rpki-client.org