Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/981ec40e-111e-346a-845f-5106fbb43aec.roa
File:                     981ec40e-111e-346a-845f-5106fbb43aec.roa (raw, json)
Hash identifier:          1qJvlhos4hM1xcqjuURlZXT8NXifrrWCdL7qX+UqmMA=
Subject key identifier:   D5:26:C4:DE:58:A9:49:0C:F6:B8:33:00:D9:1B:3D:99:B2:2E:A7:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8D9944EA5DAB01DF55E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/981ec40e-111e-346a-845f-5106fbb43aec.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        71.244.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8d:99:44:ea:5d:ab:01:df:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=8c4d732e-a850-4204-9eaa-a725d2873c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:e6:a9:b2:2b:1e:fa:fc:2e:87:77:73:a5:
                    17:e1:f8:da:b1:17:42:dc:97:f8:29:65:22:58:1e:
                    9e:1c:c6:a9:6e:f1:d8:52:cf:31:09:64:c2:ba:b6:
                    60:5c:38:6e:82:6a:48:80:1e:28:cf:5f:c6:11:d1:
                    ea:55:31:87:85:b9:80:05:ec:74:98:f8:13:ca:6b:
                    ce:4c:c3:ea:a8:6a:6b:b4:69:5e:4e:6d:af:67:36:
                    7a:cb:9a:60:83:8c:37:70:b5:af:b0:55:86:2d:7c:
                    84:6e:9f:50:a4:30:fb:81:12:a9:70:4f:0d:96:01:
                    11:cf:2f:a4:1f:24:a6:fd:0c:34:2d:04:0e:f0:8b:
                    0d:76:c2:69:93:8c:51:60:14:40:5a:9e:3a:60:74:
                    d1:0c:92:21:61:f4:24:ac:2b:67:23:77:c4:d9:4b:
                    56:91:94:91:c8:87:6f:16:0a:66:15:b3:c6:e0:7f:
                    58:68:ee:b8:4d:84:76:8e:4b:44:7a:14:7b:e1:27:
                    9b:85:d8:1b:2b:46:90:9b:a8:4d:b4:e5:b5:6f:2a:
                    70:df:12:68:a8:3a:56:28:a6:7f:d8:48:1b:42:1a:
                    13:9e:32:e3:a6:bc:03:61:77:53:cb:0f:ad:5f:c7:
                    12:05:96:10:0e:a9:6f:f0:bc:84:fb:c9:0f:a0:88:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:26:C4:DE:58:A9:49:0C:F6:B8:33:00:D9:1B:3D:99:B2:2E:A7:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/981ec40e-111e-346a-845f-5106fbb43aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.244.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:3e:0b:49:a9:96:41:4c:49:0c:ee:45:1e:05:d1:d1:17:
         75:e5:77:56:53:b7:65:aa:f0:9c:38:e4:08:8c:c2:6c:6d:65:
         ef:a8:7d:ed:f1:8f:da:4b:af:17:f1:26:6f:ea:6b:23:43:7a:
         f7:41:31:98:f5:a3:04:fd:dc:b6:0e:c2:6d:36:e6:09:69:99:
         95:1c:fa:d9:5a:06:db:52:51:37:0b:53:c9:a9:26:5f:ca:27:
         13:9a:b2:3c:2b:4a:19:84:28:83:f7:9d:f8:f0:0e:03:b7:6d:
         25:e7:a7:e9:f5:d4:ce:96:3b:ed:d8:3a:69:b3:df:2d:a3:77:
         80:9a:c9:7e:5d:12:da:ec:ac:6e:df:c1:59:ce:e6:e7:55:30:
         63:cf:a3:48:d5:e1:f1:bd:e2:ee:8e:f3:38:91:27:17:b1:99:
         53:08:f3:ce:7b:f1:9b:8b:b5:27:5c:b8:1c:fa:14:e5:57:e5:
         95:b8:d6:bb:d3:9a:c9:44:81:49:53:ec:03:75:9f:85:f0:16:
         d2:9f:67:1a:f5:64:8f:42:ba:29:38:03:48:f2:0d:84:bc:90:
         c0:30:59:9d:92:e6:b1:e7:1b:7c:f0:27:d5:23:30:bd:9f:d6:
         24:59:c9:53:c6:9e:2c:87:93:9c:a6:62:15:98:7f:7d:d3:c8:
         56:db:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:44 2024 by rpki-client on console-fra.rpki-client.org