Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/777c33ac-073a-308d-8f7f-3938856f4a9c.roa
File:                     777c33ac-073a-308d-8f7f-3938856f4a9c.roa (raw, json)
Hash identifier:          yrJki3hvHKxv0dU6H9m/TlR1q4E+Cw0UVdVHppSyY3U=
Subject key identifier:   92:A5:FB:13:51:19:56:03:4B:19:A8:F6:00:FB:09:08:25:43:50:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE05DD6CC96C5E1A2FDE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/777c33ac-073a-308d-8f7f-3938856f4a9c.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        71.98.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e0:5d:d6:cc:96:c5:e1:a2:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=22046e54-dcbe-4881-b97b-d0322a4b331c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:0d:5d:51:e9:d2:5d:6e:9f:18:69:19:e3:
                    8e:42:10:b5:08:96:9e:21:a9:e7:94:e5:90:15:cc:
                    af:eb:7c:3a:fc:56:46:66:f5:25:2b:f2:c9:df:8c:
                    d5:16:ff:d9:1c:fd:33:19:74:58:29:25:09:4a:ee:
                    fe:e1:61:3a:f1:99:0f:6c:45:72:ce:c2:a6:19:f7:
                    5d:49:9d:80:4b:97:85:22:aa:b1:ee:e8:cb:84:b9:
                    c9:c2:e5:1d:50:2b:ef:07:6f:d5:aa:86:55:90:c1:
                    7e:0c:9c:6b:b8:e7:75:fd:2c:b6:ea:50:d1:af:de:
                    42:d8:16:ac:4c:d1:33:0d:8b:4c:4f:a8:a1:58:3c:
                    df:cc:95:a4:cd:79:7a:65:cd:98:53:43:61:7e:a9:
                    22:85:49:2d:11:f9:ee:7d:29:48:74:17:a6:44:e7:
                    da:3d:69:fa:13:b1:4c:f7:0c:b5:58:ec:13:f3:94:
                    68:8e:4f:b5:bb:43:5d:14:7f:0b:d1:0a:c7:6c:ba:
                    e5:7f:d3:8c:21:35:56:a7:8e:b5:e0:b0:78:22:22:
                    7b:38:52:e6:19:28:bf:60:16:a8:4f:1d:a4:d2:01:
                    b9:28:70:19:5f:90:98:90:8e:8a:f1:78:ff:39:08:
                    b7:94:82:5f:c1:7e:31:4d:f2:fd:48:c6:25:d4:93:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A5:FB:13:51:19:56:03:4B:19:A8:F6:00:FB:09:08:25:43:50:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/777c33ac-073a-308d-8f7f-3938856f4a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.98.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:4d:d5:07:8a:63:ec:28:b7:71:2a:c5:22:15:a1:b0:de:
         5b:6a:9c:71:a2:2a:6c:a2:8f:d1:5f:e7:63:a4:fb:4d:40:cd:
         5a:fb:45:47:d7:44:68:ac:43:2a:96:0d:44:07:77:78:f1:00:
         06:c3:b3:77:7e:b3:fd:c4:62:67:0d:36:cf:b8:ba:97:02:29:
         99:4f:d4:2d:fc:d2:19:ca:00:d9:5c:ff:9d:63:d6:50:a0:17:
         fb:c7:56:c5:50:71:1b:c2:aa:11:1c:ab:86:aa:74:2d:ba:50:
         fe:fd:27:69:c0:d9:ae:6a:c2:c5:5d:89:81:6d:3a:6f:70:81:
         39:aa:a9:00:12:22:8e:ab:22:a8:f9:58:05:7e:28:60:d0:3a:
         64:65:09:cb:63:1d:48:05:fe:64:82:a9:f6:1b:79:9f:3c:fc:
         f4:60:d4:40:a2:f6:db:ba:75:8b:e1:7b:f4:32:03:65:c8:68:
         1f:23:47:87:ad:de:97:66:30:99:e8:66:51:9d:15:09:bb:33:
         f0:a9:49:9e:4d:24:36:cb:9e:0e:07:b1:27:06:d2:09:22:bf:
         ac:09:ac:b1:3e:93:d2:ca:17:a9:a8:ce:d7:6f:0f:6e:a1:9f:
         c6:18:2f:ac:c3:76:f3:fc:02:23:3a:67:60:4c:d5:e8:08:78:
         08:24:24:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:24 2024 by rpki-client on console-fra.rpki-client.org