Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3cdea68-188c-3efc-adb7-9923c62ed446.roa
File:                     a3cdea68-188c-3efc-adb7-9923c62ed446.roa (raw, json)
Hash identifier:          0foUHjGp9gmBG2AIYrGRUccOhuGC2CvmuAtvfppwZmM=
Subject key identifier:   36:39:52:D7:20:5C:48:5B:6B:98:04:81:66:23:C2:D8:D2:02:F0:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B7DF4C0E8F60DF6B7D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3cdea68-188c-3efc-adb7-9923c62ed446.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        100.8.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b7:df:4c:0e:8f:60:df:6b:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=763f8e9d-4437-495a-82aa-58c2dc23a0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:02:f1:14:87:b3:09:3b:25:3e:50:67:6c:
                    aa:d3:04:3b:16:41:87:ad:e6:55:5b:d3:d1:2a:3f:
                    09:c3:5a:db:bc:86:aa:cd:87:6e:f5:17:5e:9d:34:
                    71:fa:24:9c:a7:3b:d4:df:91:c0:7a:3a:47:29:77:
                    bb:25:6b:d5:c8:b2:19:60:8b:e4:2b:3b:7d:53:ed:
                    0b:c6:1a:24:7e:d1:26:75:f3:55:b4:25:c3:75:67:
                    18:af:55:8a:43:39:9a:7f:7a:f9:60:da:dc:30:09:
                    88:5d:e6:1f:e9:eb:a0:42:91:52:24:7f:46:c0:7c:
                    0d:b8:1f:c6:85:8c:87:23:94:54:6b:74:8f:81:d9:
                    6c:7f:2c:77:9b:b2:38:fe:b1:fe:86:72:94:5e:37:
                    2b:ac:81:13:d2:29:18:6d:06:cc:b9:ca:b1:3b:76:
                    e5:92:65:66:01:99:c0:7e:56:1a:0c:48:ce:52:a0:
                    50:58:b6:9e:0d:54:c4:d0:a6:44:2a:59:67:b2:d1:
                    0d:28:73:c0:61:d7:d3:4c:77:42:5a:ce:b0:f7:cf:
                    33:42:8e:eb:cb:25:05:92:f9:bb:2e:19:b1:fd:b3:
                    ba:2f:81:d1:00:01:11:15:b3:c0:ae:fb:88:49:0f:
                    7d:e2:20:a8:b7:3c:dd:5d:1b:e9:d2:92:d0:a3:f1:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:52:D7:20:5C:48:5B:6B:98:04:81:66:23:C2:D8:D2:02:F0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3cdea68-188c-3efc-adb7-9923c62ed446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fe:8a:85:51:64:62:ad:8c:ff:21:aa:dc:57:ef:12:b6:e6:
         ee:2b:19:ea:71:8f:bd:e5:3c:ad:b4:45:7c:04:e2:47:21:69:
         8d:4e:e0:c0:d5:f7:46:6f:fa:5f:52:15:66:1c:66:e2:d1:f9:
         70:c1:13:17:a9:9e:18:34:36:7b:08:11:91:7d:ac:bf:4e:71:
         c6:7e:6f:ff:78:39:dc:fa:cb:25:a8:f6:3e:96:ea:e1:2e:48:
         05:8b:c0:ce:73:34:86:04:ca:04:fb:f5:61:5d:1f:80:c8:a1:
         26:b5:72:f5:38:12:42:7f:37:37:da:d3:b3:ce:08:68:b0:14:
         c2:e9:81:cd:ff:54:81:d6:76:e0:3e:50:f1:4d:84:53:a4:b4:
         42:d5:1a:e7:cf:c4:97:a9:b1:5b:61:c6:b9:4c:78:fc:c2:d6:
         a2:38:11:f4:2e:f0:2a:c6:5e:73:db:a7:90:ac:28:1b:6d:b5:
         2a:4b:78:b5:a5:c7:eb:b6:5c:23:21:52:89:e8:d3:f4:35:47:
         06:b5:bd:c7:7d:ea:d7:ec:3b:ce:9d:65:d2:7e:e0:37:b9:3e:
         32:c5:9d:e1:ed:82:ff:d8:6c:56:0e:3a:72:4f:ac:ba:40:2b:
         8e:63:dc:57:9f:a7:7e:18:4f:d5:a1:15:63:f2:fa:c0:6d:97:
         ba:6d:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:27 2024 by rpki-client on console-fra.rpki-client.org