Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7716e526-a308-38b7-b021-f36a230563f6.roa
File:                     7716e526-a308-38b7-b021-f36a230563f6.roa (raw, json)
Hash identifier:          YYGwR955GXpvB28CrGk8kR6CJ/QqcV98C3cXmjuGRp0=
Subject key identifier:   55:0B:28:6E:23:46:F5:84:BE:A3:B7:5A:CF:72:8F:0F:41:D1:75:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8485DA2F1FB0B0894D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7716e526-a308-38b7-b021-f36a230563f6.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.4.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:84:85:da:2f:1f:b0:b0:89:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=b4127a83-eee4-4571-9f56-33d96612cc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:32:41:30:c4:25:7e:7c:16:55:84:b6:45:
                    47:d1:54:3d:08:0d:c1:18:42:82:98:8b:e7:97:2d:
                    e1:f2:db:f7:9d:a7:3e:19:3a:7b:05:e5:93:cb:2b:
                    f7:d9:66:25:27:5d:02:18:25:ee:ce:c3:cf:69:85:
                    14:17:34:5c:b1:2d:ba:c7:b8:ad:74:85:83:25:ec:
                    6a:16:1f:2c:dc:87:7d:82:83:c1:b2:c0:f8:de:79:
                    ee:5d:d6:67:f3:fd:c0:3d:01:95:de:7a:ee:b8:fd:
                    13:92:df:1a:b0:8f:e0:27:8f:40:78:c4:39:08:a6:
                    7d:c3:88:22:d5:30:0a:d2:06:8b:59:4d:81:ff:9a:
                    f3:5d:60:8f:bd:80:a6:16:3d:0d:7d:f1:f2:3e:a4:
                    66:f7:20:5c:8f:68:94:e4:12:35:e6:0e:10:97:d7:
                    0c:69:0c:de:73:5a:2f:c3:97:3b:49:bd:44:72:36:
                    b7:59:c9:1c:28:ca:d8:37:6d:dd:49:78:43:10:b4:
                    fa:60:0b:fe:54:c8:40:4a:c8:b9:e2:99:fe:9e:73:
                    82:f5:b4:7a:f1:3f:81:b8:70:af:72:4b:8e:e9:6a:
                    37:49:a4:c8:0e:b3:ca:26:1a:93:ca:23:5a:b0:87:
                    e3:dc:6d:ae:2b:ad:cd:f9:05:24:2e:fe:49:38:3d:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:28:6E:23:46:F5:84:BE:A3:B7:5A:CF:72:8F:0F:41:D1:75:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7716e526-a308-38b7-b021-f36a230563f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.4.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7a:2b:e8:5f:cd:dd:7b:94:57:83:a8:a4:97:d3:13:cd:ec:
         e5:57:b2:0a:e9:a0:f9:9d:fb:d0:82:56:db:9f:8b:0c:90:73:
         c8:b1:78:73:94:1c:01:04:19:34:f9:81:c8:6b:93:61:4b:62:
         28:72:2f:73:82:ec:f9:04:2a:4d:24:2e:95:88:c0:9d:a9:3f:
         fd:93:0b:c4:c9:7f:e9:1c:6f:9c:41:d3:5d:52:1d:18:34:36:
         72:6c:f9:13:29:3f:3c:10:ba:05:b5:cd:83:38:4e:fe:60:73:
         0a:08:92:21:36:64:01:6a:f6:bf:2c:28:dc:7a:87:3e:8a:20:
         f6:35:c9:76:39:85:ed:d4:b0:60:cf:19:69:71:71:53:f9:ac:
         53:82:36:bc:a6:f0:62:2f:35:b0:33:50:6f:83:83:1e:a6:ea:
         ab:40:49:2d:bf:ed:0b:92:ae:65:21:40:18:c2:25:4c:84:28:
         40:4c:6a:e5:8a:11:d9:14:90:2e:03:5e:23:51:ce:0d:36:87:
         48:84:1b:3f:64:1e:e7:e9:9f:5d:df:90:6c:bd:18:6f:f6:ea:
         09:bc:77:82:65:cb:1d:ab:d5:cd:8e:ba:5d:a2:d0:1c:2d:59:
         6b:f9:d7:2c:8b:6e:34:b5:6c:bf:c0:53:e7:b2:d5:a8:22:11:
         0d:e3:86:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:38 2024 by rpki-client on console-fra.rpki-client.org