Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/883ef756-d4d4-3979-8f5d-22c844b09a2b.roa
File:                     883ef756-d4d4-3979-8f5d-22c844b09a2b.roa (raw, json)
Hash identifier:          I/HpN3zMZYPhUnZ8B3rCfL7w3DTkYl3EwwaTc3R38SY=
Subject key identifier:   F2:00:21:B4:57:BA:7E:AB:68:E6:8E:15:E0:9F:E7:98:46:A5:1C:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE761D218916D464493D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/883ef756-d4d4-3979-8f5d-22c844b09a2b.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        96.235.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e7:61:d2:18:91:6d:46:44:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=53a93c93-dcb7-463c-8121-00b8293866c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:17:49:59:d4:57:b7:d0:d7:a3:07:53:d9:
                    40:a7:36:5d:dd:a0:2c:d2:02:7a:e3:5b:3c:3a:6c:
                    cf:f7:fb:87:35:e9:e1:da:d2:9d:a8:5a:b3:5a:a8:
                    62:bd:02:2d:41:e9:84:f8:33:93:6e:50:fe:37:1c:
                    6b:5d:4d:9f:5b:6a:0e:53:6e:fa:3f:fe:19:9e:c2:
                    ba:c8:70:22:08:60:7e:aa:6f:94:8f:0e:5d:df:0f:
                    1a:11:85:ce:da:48:33:14:28:b3:36:9b:f6:1f:dd:
                    93:28:47:42:e1:97:fb:66:34:a9:ec:79:4d:34:a7:
                    2a:74:03:72:21:20:0d:e1:f6:ef:69:cc:0d:13:c0:
                    3c:bd:b4:70:c0:1f:d7:14:62:46:49:e9:24:f6:e6:
                    50:d4:df:9a:c7:03:f9:37:16:af:e2:d3:9e:e1:23:
                    dd:90:18:e8:2b:ca:58:a5:46:5e:60:ec:50:72:22:
                    4f:3a:89:20:d9:36:ed:35:a1:22:56:45:b3:63:45:
                    bc:5b:2e:50:ed:d6:fd:98:5e:4a:ae:c9:fd:1b:90:
                    0d:32:9f:f6:58:c3:fa:98:58:12:ae:83:87:71:86:
                    4b:76:9a:17:fa:29:ae:2e:d2:7e:06:e1:9a:c6:7b:
                    3b:f4:36:f1:cf:be:7a:da:7d:5e:84:8f:c0:d6:e3:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:00:21:B4:57:BA:7E:AB:68:E6:8E:15:E0:9F:E7:98:46:A5:1C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/883ef756-d4d4-3979-8f5d-22c844b09a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.235.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:02:13:1a:ad:dd:27:d0:35:7e:c4:dd:27:58:87:c1:64:
         48:3f:f9:7c:59:39:6d:01:af:5d:2a:0e:12:d3:01:c0:b2:d9:
         b7:1e:6d:bc:83:a4:96:c8:10:39:ca:68:fb:b4:d3:c8:a1:f8:
         31:41:01:6c:98:01:9b:31:81:79:80:2b:88:f9:88:6b:e7:99:
         e4:8e:57:f8:4c:b2:46:39:9e:22:df:89:35:d3:8d:5e:f0:63:
         e3:58:40:68:b6:26:20:3a:f8:33:da:41:70:b5:20:c8:ac:fb:
         ee:d0:9e:51:2f:ac:06:46:7e:6e:84:62:e3:6f:f8:b8:9e:47:
         91:b7:38:14:8c:e8:8f:da:c5:64:1c:4c:a5:c1:79:25:7a:b6:
         3b:21:16:83:42:2d:82:a8:43:aa:cb:b2:77:cc:0a:2c:aa:47:
         fe:b1:3f:88:b9:6d:b4:fb:ac:a0:d1:5b:22:07:37:7c:74:3c:
         73:f3:59:0c:37:3a:74:d3:72:c4:60:36:b0:c6:15:ac:b7:8e:
         11:60:ef:ad:a3:f9:40:85:bb:0c:22:4b:ae:8d:6d:b0:d5:6a:
         a8:c2:fa:7e:bb:80:c2:37:37:87:7c:2a:12:c3:8b:25:2e:24:
         af:f2:1b:20:e2:ab:95:a0:10:b5:31:eb:13:21:9d:b8:e0:a7:
         0a:f9:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:11:36 2024 by rpki-client on console-fra.rpki-client.org