Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/855e2391-88f2-3a9a-9529-aac250b8b3ea.roa
File:                     855e2391-88f2-3a9a-9529-aac250b8b3ea.roa (raw, json)
Hash identifier:          N5Fvy1dSF9d8diNz/BHF+jpDgEGLo9b9rhUMSlBYVCY=
Subject key identifier:   72:00:89:53:65:A0:18:5B:20:FA:2C:1E:57:A4:C9:A8:51:E5:62:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B2293E2BE197893A6380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/855e2391-88f2-3a9a-9529-aac250b8b3ea.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        71.167.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b2:29:3e:2b:e1:97:89:3a:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=35c94f71-abbe-402a-b5fd-fa8ff8f16ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:9e:82:b9:dc:ab:9a:93:d3:76:92:9e:a0:
                    d1:28:49:04:18:54:14:6a:6b:7b:e6:d5:82:4d:5a:
                    17:28:71:f2:2d:78:7d:81:8f:cf:fc:43:2d:f2:03:
                    8b:80:0e:7e:ec:95:37:8a:bd:15:87:d7:85:64:e2:
                    23:f3:35:dc:00:f9:72:a7:a7:17:58:61:87:1f:b3:
                    f8:a5:a2:e8:85:b7:56:75:8a:f0:ca:f3:2b:5f:ad:
                    fb:3f:d6:7c:05:aa:8f:26:4b:19:07:c0:ff:32:a7:
                    d1:41:85:b1:7a:ac:dd:d3:51:27:44:41:12:76:5d:
                    99:98:05:c4:95:d4:10:ba:ff:94:e9:89:d3:9d:d5:
                    0b:77:61:ab:ed:2a:07:c2:81:08:45:d0:e6:52:c3:
                    9e:c3:6a:24:7a:7f:36:2e:9b:3c:26:26:cc:77:24:
                    11:f2:7d:06:b9:89:1f:32:15:e4:ff:8b:3c:18:96:
                    84:d4:2c:de:4b:c0:db:98:98:d4:6c:bb:a1:46:86:
                    4b:5b:a3:ed:54:10:f5:e7:63:2e:a9:0d:6a:14:57:
                    57:77:71:80:9b:06:ad:0e:55:1c:bc:89:60:37:1c:
                    f8:f8:9a:27:d7:36:90:f0:b3:d2:cd:da:88:79:08:
                    6a:41:90:df:23:75:97:60:89:0c:af:50:19:5b:73:
                    10:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:00:89:53:65:A0:18:5B:20:FA:2C:1E:57:A4:C9:A8:51:E5:62:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/855e2391-88f2-3a9a-9529-aac250b8b3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.167.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ef:14:e5:ad:b6:f1:4c:42:f8:e0:3a:5c:80:7c:cc:5d:d7:
         14:95:f2:e9:9f:3d:59:73:e8:a6:6e:6f:71:66:49:84:37:3f:
         1b:5d:90:e5:8d:01:2c:14:46:3a:f5:ad:f5:e4:69:58:6f:24:
         c5:4b:0a:9c:77:45:06:2c:04:ef:50:e8:e6:63:09:e0:2f:09:
         fc:b8:1a:88:ad:ca:56:0e:a3:53:5b:a2:9b:ee:09:6e:b4:0b:
         3a:6a:ce:65:92:90:63:55:65:33:30:ba:60:31:e5:9d:ed:bb:
         01:75:b5:96:b6:29:fb:3d:e4:2e:3c:c1:54:35:80:50:e0:f1:
         67:69:5f:64:8c:c3:79:88:a0:9c:08:f9:7a:80:8d:8f:f2:b2:
         44:2d:a7:68:1a:c0:0a:ab:f0:13:6f:07:7d:d3:23:8b:aa:9e:
         bb:42:fe:f3:85:a4:48:d9:15:da:26:df:ed:47:3a:0b:03:c0:
         9d:43:c6:ca:fb:32:5c:fd:ab:60:af:19:0b:e9:24:dc:99:89:
         3b:25:30:ba:8c:f6:96:84:ab:11:a1:7e:f6:9b:c3:00:f0:ff:
         8d:a8:31:e7:88:3d:ff:6f:ca:e6:c0:f5:06:77:d4:62:b3:5f:
         61:cd:33:98:b6:9e:47:e5:93:bf:c7:c7:5e:51:7c:ab:78:d1:
         00:6d:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:03 2024 by rpki-client on console-ams.rpki-client.org