Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa
File:                     b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa (raw, json)
Hash identifier:          moO14tcInu2A1yVP0ELgQjJmM3RGJhFwafQW32zF+qc=
Subject key identifier:   70:EF:37:3D:8C:80:6E:4E:B2:C0:83:9E:FE:A9:BC:EF:88:42:64:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DDF8596B24E1C78A4BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        71.126.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:df:85:96:b2:4e:1c:78:a4:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=48b0e1f3-681d-43b8-90bf-b7f5f71a5027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:c4:8b:24:16:68:43:ac:74:ce:ef:af:79:
                    12:56:19:d5:14:92:12:17:5b:1c:b1:4f:04:bc:81:
                    07:41:9d:fa:b4:88:e5:92:c4:ce:8e:82:a2:bb:c6:
                    ba:da:ba:ca:d1:ac:04:79:00:d4:9b:48:ed:d7:06:
                    d2:7a:5b:a7:1a:34:0a:8c:66:f8:07:d3:fb:b5:b7:
                    4e:30:8f:ab:fb:61:d9:7c:4f:a8:2d:95:cd:8c:d9:
                    c3:ff:5d:84:f7:27:38:28:fd:e3:a8:84:20:03:a5:
                    3c:4c:7a:c0:ce:3e:23:9c:3e:68:9a:c6:69:92:16:
                    63:56:0a:35:3d:3b:04:c2:44:28:56:ce:48:5c:4f:
                    e0:5b:31:68:0c:c9:6d:e8:db:4c:fb:86:15:85:fc:
                    23:9a:63:39:8d:8b:45:6a:51:d4:a2:74:bb:f7:c7:
                    9f:04:4f:51:55:73:91:1b:74:b5:f1:2e:4a:0c:bd:
                    9a:5c:28:13:55:89:89:1c:7a:f7:17:46:b8:65:3c:
                    e3:36:cb:25:28:f3:4f:b2:f8:9e:95:4a:86:27:62:
                    e5:40:25:aa:21:75:86:f9:30:48:b6:6b:62:0b:2b:
                    83:20:47:14:79:a2:0d:43:26:63:1f:35:92:2f:c3:
                    0b:12:2a:cb:a6:76:77:f0:37:03:7d:42:95:25:31:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EF:37:3D:8C:80:6E:4E:B2:C0:83:9E:FE:A9:BC:EF:88:42:64:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.126.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a3:f1:c3:1d:cd:ea:92:c4:e2:69:77:68:25:35:bc:dc:90:
         83:44:d1:24:4a:1b:68:e2:8a:40:7f:3a:03:32:d1:00:dd:5e:
         00:2c:19:de:7d:8b:af:02:3d:3c:24:03:a5:2a:9f:cd:3c:8d:
         85:c8:5b:64:43:ba:34:29:4a:3f:53:83:3b:52:db:1e:b3:b2:
         71:3f:41:44:21:15:c4:80:d9:51:fe:51:6e:e3:69:11:11:f3:
         a7:21:3f:df:ca:74:da:da:7a:ca:cb:51:bf:1c:98:40:49:6a:
         4c:8d:89:8b:dd:fd:2e:16:bf:a3:48:e2:c8:5e:6d:cb:81:81:
         72:ce:b7:5f:76:b4:f3:e4:fe:17:30:7b:6d:15:15:e6:cd:c4:
         04:28:a1:a1:2c:9c:c1:52:1b:b0:31:ac:eb:12:a5:c4:d9:ed:
         3c:4e:7e:d0:07:60:88:e1:ab:f7:fa:56:05:5b:29:f1:00:c8:
         cc:79:bd:e8:5d:9e:d6:8a:a4:ae:36:a4:02:2e:bd:b7:dc:9f:
         e0:72:99:45:a0:32:e2:87:6d:c5:92:c7:a0:1c:c5:86:9c:e3:
         24:0b:54:05:4a:09:7b:58:00:32:ce:9b:7b:e4:79:98:76:96:
         f2:ca:c4:9a:73:be:a9:48:f2:1e:67:a0:77:d6:66:0b:42:1f:
         eb:40:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:33 2024 by rpki-client on console-ams.rpki-client.org