Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa
File:                     c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa (raw, json)
Hash identifier:          cyI6pUZQRituleQja24yzaKN+DBrKGDAELvso5X4TI8=
Subject key identifier:   F5:66:C2:EC:48:E9:70:FC:C8:C8:0D:D6:49:3E:53:6C:53:50:BC:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD95429AC592F6D989F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        209.158.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d9:54:29:ac:59:2f:6d:98:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=96af7970-470e-47c1-888d-7b6739667b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:45:78:47:cd:49:6a:2d:28:f8:8e:f6:24:
                    a6:f7:76:ad:af:92:34:55:5d:fc:8c:d0:9e:8a:f8:
                    f1:9a:84:2e:19:01:f5:28:15:2d:81:e9:b2:3c:e2:
                    a6:c6:fb:99:3e:11:42:dd:6c:bd:76:5c:60:e6:15:
                    90:ea:05:98:8f:66:9e:d5:ca:38:4b:b4:12:e2:cb:
                    bc:37:77:29:bd:fc:ee:62:5a:70:4e:d8:c5:3a:e6:
                    59:17:cc:2c:2c:51:9f:54:0b:32:98:ae:0a:f2:71:
                    fa:3d:94:09:6c:ab:43:f8:db:51:16:25:17:0b:56:
                    62:7e:61:79:f8:14:84:87:9f:eb:02:1d:58:0d:35:
                    ac:f0:9e:ff:ff:47:90:d2:a1:e5:26:cb:58:e8:f1:
                    95:46:3e:33:da:a3:8e:5b:6f:31:4e:99:c9:1a:cb:
                    6a:19:f0:ec:e8:bb:78:1f:b2:43:50:a3:37:c3:8d:
                    2e:f5:b5:e4:71:50:65:02:74:3f:96:f2:e1:6e:0f:
                    30:98:64:c3:79:83:80:10:2b:f4:8e:45:ad:6d:04:
                    9b:07:cc:07:f4:dd:2f:0a:4c:fb:08:41:ab:ad:09:
                    65:19:af:39:f9:c2:21:cc:8c:7d:ee:37:e4:2b:41:
                    0e:bd:62:d6:f3:29:21:4b:e8:f3:82:4f:43:7e:51:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:66:C2:EC:48:E9:70:FC:C8:C8:0D:D6:49:3E:53:6C:53:50:BC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.158.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:0a:a0:22:3b:7a:57:25:64:e6:4d:e4:cc:d7:8e:85:10:a7:
         f8:13:d2:4a:5d:f3:fd:a6:b0:22:7b:42:5f:2c:ba:22:3f:47:
         7d:50:34:e7:9f:6c:94:41:99:a4:a0:18:8a:8a:df:3f:19:ab:
         52:e9:17:b8:e0:03:20:dd:3c:c6:41:b0:ad:69:d5:3c:9d:99:
         e6:79:24:c6:a2:1c:34:6d:fc:54:68:c3:d8:11:00:1d:63:74:
         e8:ad:fe:ba:5f:76:05:95:2b:33:36:ae:6d:87:ae:54:81:3f:
         e6:8d:a3:f1:cd:c6:1e:f4:00:cf:95:50:19:13:ef:0e:60:c2:
         f2:1d:1b:d4:a4:ad:b8:35:37:63:2d:0c:e6:93:57:0a:38:b5:
         2d:81:25:58:7b:db:97:33:24:cf:e1:3a:39:e3:46:fe:e6:e2:
         1f:3d:65:cb:40:52:80:28:2c:70:7e:9a:14:ee:63:5c:45:74:
         ce:a4:d7:5e:9d:9d:c7:83:10:fa:e9:69:1a:9e:51:ea:8e:0a:
         75:75:5f:51:4e:41:03:24:01:2b:51:7f:6f:79:0a:2f:a9:7a:
         83:8a:1e:ca:2a:11:b3:31:3b:f2:e5:c1:7c:3a:0a:63:2d:d2:
         d1:40:4b:d3:33:47:c9:2f:de:76:16:04:d0:88:84:f8:e9:2d:
         5d:df:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 12:40:27 2024 by rpki-client on console-ams.rpki-client.org