Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa
File:                     89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa (raw, json)
Hash identifier:          vuRwpvLy8RLIHsCi2PE+qQFR6LnUXtw6JSLhDdhSOLw=
Subject key identifier:   90:EB:6D:50:92:0D:C7:93:E8:AF:28:51:60:7C:A8:F8:6E:5D:65:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B80EC4538FA38FD3CA2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        96.249.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:80:ec:45:38:fa:38:fd:3c:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=0beb1644-b5a3-4451-b4bf-4abddbc130d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:e3:1c:a9:16:33:c8:a3:a0:47:b7:73:11:
                    6f:0c:91:54:63:fd:c2:0a:b9:ce:5e:cf:d1:42:b0:
                    a1:de:22:30:ca:7f:5b:dd:5e:61:fd:58:5f:25:75:
                    19:6b:23:39:ca:4f:e6:d1:d4:c2:b1:f2:32:2a:00:
                    15:98:10:63:67:b0:57:e3:49:50:87:06:6a:74:0b:
                    b7:22:35:81:08:5e:96:41:a4:f1:85:8c:a9:da:bd:
                    46:e1:66:4b:5c:d3:a9:e4:2f:76:2b:a1:cc:44:5d:
                    e0:62:e7:1c:1c:1e:8c:84:d8:c1:65:4b:ce:63:25:
                    93:31:38:ca:25:b4:bb:e3:b7:e2:3f:60:c1:46:71:
                    5e:40:d8:9e:60:58:90:ed:7b:5c:64:a7:8e:4d:69:
                    38:26:f7:ce:8c:bf:4b:d1:72:72:d4:07:aa:b9:cc:
                    97:b0:28:8f:80:1a:d5:e0:bb:56:cc:71:c8:a7:7c:
                    c9:03:ba:c9:f3:38:2e:16:ba:36:7d:e0:63:09:ce:
                    7b:21:a2:27:e8:2d:f3:0b:fa:6e:3a:c8:c5:c3:70:
                    b4:1e:66:a5:2e:03:43:39:c7:c4:ab:7a:8e:6c:64:
                    a5:16:91:e6:7f:c3:9d:83:df:49:f6:94:0c:50:b3:
                    9c:c1:b9:4d:3d:51:77:31:2e:b6:c1:f5:d5:77:41:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EB:6D:50:92:0D:C7:93:E8:AF:28:51:60:7C:A8:F8:6E:5D:65:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.249.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:a4:ad:2f:4a:6c:4b:40:ee:dd:c7:49:3d:b8:26:b2:b6:
         fd:73:9f:5a:b3:fe:b9:25:48:25:c2:f1:19:31:61:88:9f:15:
         43:29:01:e7:13:bb:64:63:7b:f5:f1:fe:3a:5b:13:41:33:dc:
         b1:88:20:99:93:b9:ee:5c:9c:e0:e2:33:ab:30:ec:fb:49:e9:
         67:e7:93:20:95:b1:ea:a3:7e:78:a1:1b:e9:00:ba:74:8d:e5:
         df:88:a8:48:00:2a:73:87:a8:6b:91:71:d0:93:44:84:4a:5a:
         e2:25:7a:13:bf:fc:45:34:87:ee:fd:1e:8a:1b:d6:22:04:f2:
         b9:f3:61:c9:9c:68:f3:7f:f6:a5:8a:1b:2f:26:eb:89:8a:fb:
         cd:c7:e2:c3:44:4f:45:e9:48:49:a4:5d:6a:5e:84:94:17:38:
         b7:db:34:56:e5:73:c6:77:fb:9e:7f:42:66:d8:14:11:33:4b:
         4b:6e:60:7a:2c:36:f5:f0:f1:1d:30:95:ae:57:ec:f1:ad:d6:
         7e:fa:bd:1d:31:0f:cb:3c:22:47:f2:49:c2:43:4c:cf:ad:d6:
         22:88:cb:d8:98:65:b3:0f:75:db:8b:db:17:da:b2:5a:73:d4:
         7b:e3:59:10:69:82:e9:00:e8:2a:9f:08:e0:5b:97:9d:4a:9e:
         34:af:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:38 2024 by rpki-client on console-ams.rpki-client.org