Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fde337d-9a82-305d-8892-35be1c80c916.roa
File:                     9fde337d-9a82-305d-8892-35be1c80c916.roa (raw, json)
Hash identifier:          XzkG4CKVY15sirrXNsBC9Xu+jGvPlB0seP2iBoz7E1w=
Subject key identifier:   6A:03:FF:3B:DE:47:C0:F6:0D:0E:B5:DB:74:F2:FC:05:13:15:51:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DDD93E83DBDC1793D15C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fde337d-9a82-305d-8892-35be1c80c916.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        74.109.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:dd:93:e8:3d:bd:c1:79:3d:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=7fe422f6-e87f-4f57-91a4-741739619a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:2c:5f:32:85:52:54:67:cd:b1:a8:d2:32:
                    e2:c0:33:41:73:4a:04:16:0b:e6:71:0c:f5:d7:8a:
                    58:d8:04:c6:54:87:b0:39:a8:85:89:7e:c2:3a:aa:
                    c7:1d:43:62:0c:88:ae:14:01:4f:90:24:12:d2:70:
                    53:51:92:bb:e6:d9:f2:12:95:9c:7d:1e:e8:6b:40:
                    c9:b1:69:49:25:db:19:7b:7e:34:1a:09:eb:f5:9f:
                    06:52:b4:a4:48:a3:6f:69:a9:4e:61:89:cf:4e:7a:
                    ff:c2:b5:c8:d1:8e:1a:e8:a7:7c:30:01:90:f7:ba:
                    8d:b1:bd:a5:6a:7e:80:66:62:78:f2:6d:89:15:5e:
                    bf:cf:6c:e0:94:a8:4a:06:84:8c:87:9b:25:e2:e4:
                    1a:c8:b5:d5:dd:c7:c1:6b:d6:8f:ce:dc:d9:35:7e:
                    b9:fd:9d:a5:fb:d3:04:91:ca:8b:f4:38:73:0d:8d:
                    19:d3:a4:10:dd:cb:34:a6:15:2b:12:c9:eb:8a:e7:
                    87:67:07:5b:62:61:5c:81:a6:99:ce:bf:49:1a:3f:
                    b4:32:42:40:3d:9c:41:80:f8:cb:c6:87:62:56:58:
                    0d:0e:97:dc:4b:34:00:68:de:65:b0:9f:0d:d9:6f:
                    62:c2:3c:1e:8b:b4:0e:9f:18:d5:16:94:a9:73:bf:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:FF:3B:DE:47:C0:F6:0D:0E:B5:DB:74:F2:FC:05:13:15:51:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fde337d-9a82-305d-8892-35be1c80c916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.109.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a7:b8:24:4a:48:38:8c:68:9c:78:b1:fb:80:17:0f:03:ba:
         cc:d5:c4:76:e3:eb:aa:e1:61:a7:94:2d:a0:81:c5:ef:1d:45:
         a4:13:24:2d:89:2d:67:d1:8a:ad:31:d2:7e:b1:76:4a:91:e8:
         2b:de:5e:c5:d7:1b:95:11:c1:fe:d7:e7:88:c4:ff:0c:1e:49:
         48:4d:f4:3b:be:cc:cf:dc:27:ce:7a:be:8d:f5:6d:38:a5:28:
         d5:85:f8:11:54:92:bb:93:b7:ec:6a:71:b1:38:e9:75:cd:b8:
         83:6a:e2:f4:2f:13:57:f8:db:de:18:57:8c:e0:9e:be:9a:4c:
         8c:88:0c:d6:ba:b1:d3:99:11:81:61:88:b9:f7:8b:4d:c7:fe:
         18:c2:9e:9b:9c:39:1b:1e:d6:69:47:d5:0f:96:64:9a:f1:16:
         92:6b:31:df:c4:6e:bc:42:e4:e5:e4:6a:9e:48:fb:4a:24:62:
         8c:15:db:75:7a:ca:03:18:49:3f:dc:c5:c4:35:4a:19:6c:a1:
         e8:00:78:95:35:55:d4:69:6d:34:c4:f7:3c:33:78:29:2f:9f:
         92:bc:4f:b9:86:17:45:1d:50:a5:fa:95:db:18:28:59:33:58:
         ce:86:c1:ef:63:bd:a4:12:59:72:88:cc:09:ed:63:81:d6:84:
         19:34:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:11:38 2024 by rpki-client on console-fra.rpki-client.org