Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a1f3bc0-7e8d-3a2f-a52a-0dfd47ab2402.roa
File:                     8a1f3bc0-7e8d-3a2f-a52a-0dfd47ab2402.roa (raw, json)
Hash identifier:          IPgczip/xsw3LNKokTDlFYCR7jW04U7v7YbaLn42hlo=
Subject key identifier:   26:D2:0D:98:47:2A:A2:A9:6E:92:28:7C:B3:E1:6E:B9:C6:BB:27:16
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584593689FCA88ED5A7BEED20780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a1f3bc0-7e8d-3a2f-a52a-0dfd47ab2402.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        68.162.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:9f:ca:88:ed:5a:7b:ee:d2:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=a83197ef-9490-4224-9f27-100c630ea8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:93:18:cb:ef:45:77:da:d6:71:76:db:61:
                    60:87:76:e5:83:97:64:87:8e:87:f7:8e:7c:94:c3:
                    2d:5c:46:f1:a8:a8:70:83:c6:0e:2e:e9:12:cc:95:
                    32:b6:16:5f:9d:54:3e:a7:4e:35:3d:54:bd:39:c0:
                    91:68:4b:53:c0:9f:2e:cf:97:5c:2b:4e:29:f3:e9:
                    73:74:6b:f9:4e:59:0f:70:1a:d5:2f:e0:f8:5f:bd:
                    cc:c0:98:00:70:49:c7:53:d8:78:77:20:9c:cb:43:
                    ab:bf:f9:22:6a:5b:1e:79:19:62:40:bd:1e:aa:2e:
                    a0:d5:d3:40:5c:65:85:e0:27:15:1f:ad:5f:5f:e7:
                    03:92:eb:62:ef:74:39:8a:d0:72:9b:86:da:0b:56:
                    82:f1:06:b4:c2:0d:ee:4e:88:36:28:b6:24:10:d3:
                    f4:8b:ab:66:d7:d9:43:89:b4:5b:37:11:6b:9d:e4:
                    ee:f2:39:41:d5:11:28:2d:0f:24:4b:00:f9:c4:09:
                    7d:50:3c:43:d1:a2:6c:16:1e:7c:a2:8f:55:9e:15:
                    02:d1:06:9c:ea:85:2f:51:10:65:d3:f5:96:4b:9e:
                    f7:48:96:0b:88:f4:64:62:ab:c7:c7:a7:98:5a:bb:
                    e5:00:dd:dd:7c:d5:4f:30:e5:76:1e:e5:95:59:78:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D2:0D:98:47:2A:A2:A9:6E:92:28:7C:B3:E1:6E:B9:C6:BB:27:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a1f3bc0-7e8d-3a2f-a52a-0dfd47ab2402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.162.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:8b:21:c1:62:9c:89:1a:4d:21:86:0d:50:bd:a8:f3:c3:
         cc:3b:84:23:0c:ac:2c:93:db:b5:27:c7:7c:9f:f2:7d:d0:5c:
         0b:fd:b5:2e:46:a0:84:17:79:7d:99:fd:1a:4a:fd:61:f7:6c:
         38:7f:8b:f2:ad:49:d2:1a:9e:d9:e5:6a:73:9d:2e:8f:3d:d7:
         27:89:81:1e:2b:e7:aa:67:56:26:44:cd:b8:e1:72:71:96:08:
         09:ff:55:75:fb:ee:70:f2:89:85:77:c2:d2:2a:ce:74:b4:0a:
         90:02:be:e6:62:6c:3c:5f:e6:fa:c9:b5:c7:7c:d3:69:15:b8:
         ee:2c:a4:76:13:99:a5:07:a6:51:a4:1a:69:d0:fe:3d:e1:40:
         ec:26:8d:06:69:c2:00:4f:f2:ad:27:2c:60:66:df:96:f6:2c:
         8e:05:e4:3a:7e:bd:7b:88:c1:27:0a:51:91:c3:6f:7f:79:1d:
         96:84:3b:3e:62:67:c6:f3:b6:c0:07:fc:74:8f:7f:df:96:09:
         eb:df:9d:f4:95:39:8b:d8:a8:de:02:b4:64:ab:4b:28:ab:d3:
         b1:6f:4f:f3:55:58:41:7d:34:97:12:55:cb:c6:8e:10:37:9f:
         01:69:a3:47:a7:c6:48:f6:59:dc:a7:09:38:a4:d7:e5:f1:8b:
         f1:42:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:35:57 2024 by rpki-client on console-fra.rpki-client.org