Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa
File:                     c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa (raw, json)
Hash identifier:          PSIgsouBKClywXIbD+Xx/HD7l311A+OK/6HBiJCha34=
Subject key identifier:   DD:2E:23:C8:03:65:A0:40:63:21:EB:A3:EE:C7:6E:53:88:0F:11:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368991DCA856507DCA8BBA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        108.24.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:99:1d:ca:85:65:07:dc:a8:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=0cb066d6-6f28-4a82-b922-40103cbc32cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:6f:2e:d3:3e:dd:d9:34:18:bc:1d:4e:98:
                    23:b4:3a:a7:c3:cc:a4:9d:03:22:98:91:52:e7:3c:
                    cb:c1:f7:1f:0d:60:28:56:09:c7:bb:33:f3:a9:dd:
                    74:89:18:8c:1d:1f:12:2e:de:e7:2a:63:cc:77:58:
                    5e:39:fa:ac:26:bc:a3:65:4b:4a:7f:60:97:c8:13:
                    c3:51:f7:72:0f:b3:48:c9:1c:a8:dc:a6:71:c2:e2:
                    12:1c:08:a7:e7:e8:0c:13:8d:70:35:c7:64:6f:84:
                    74:75:79:4b:88:72:50:1f:e5:94:ed:d9:15:4a:3a:
                    8f:b7:fc:ba:23:f5:c4:06:6a:c0:77:55:3d:60:17:
                    b0:85:8b:f4:a2:7a:ff:52:45:81:ba:f6:52:28:b8:
                    ac:5b:e6:02:6d:39:c5:e8:ec:e4:eb:dd:73:16:21:
                    17:68:87:24:0b:46:1e:16:2a:ee:4d:6e:14:de:70:
                    88:9f:57:5e:79:05:aa:6f:65:db:f0:62:b8:57:98:
                    82:2c:b1:43:0c:a7:7a:ad:93:bb:f1:2e:48:66:31:
                    1c:58:68:fe:1a:9f:d6:89:a7:3f:40:27:76:ab:3e:
                    6f:04:62:46:55:b7:d1:f5:df:53:96:e5:53:b4:5d:
                    06:20:36:2a:a3:13:1f:eb:c7:a3:e8:c3:23:65:1c:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2E:23:C8:03:65:A0:40:63:21:EB:A3:EE:C7:6E:53:88:0F:11:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:55:3d:61:d4:ec:bd:5a:7f:74:ea:37:16:6e:47:ff:55:49:
         b2:a4:c6:5a:96:37:82:ac:b6:6a:d9:57:67:d9:a3:e9:24:82:
         70:b1:e5:bb:bb:61:79:fb:90:bb:44:4b:56:34:85:9d:e4:ed:
         09:d7:c9:1b:9e:81:ec:4d:7b:da:21:a1:a7:15:02:87:e1:0c:
         74:50:06:c3:c0:32:5c:f5:2e:7f:ee:2e:ff:3c:d2:88:43:87:
         36:bf:57:ea:2a:62:5e:87:9d:ff:c1:82:c3:99:44:86:65:a2:
         2c:2d:bd:8e:11:98:67:ee:0b:d1:45:86:6e:25:26:ad:d9:29:
         b9:c5:c9:83:53:e8:b1:fc:b1:2b:17:a2:40:4b:a4:c1:e5:b1:
         17:a3:79:9d:a5:4a:8f:3d:29:58:21:7f:7a:5e:7a:e2:4f:21:
         c3:30:66:2e:f8:17:d2:67:f8:ef:14:8c:b7:4d:34:b1:4e:d1:
         1e:78:bc:10:b5:ca:ab:f1:d9:3c:d9:89:8b:6a:27:de:fb:36:
         7e:e3:f1:77:62:7c:cb:77:be:59:75:fc:86:1f:90:1d:c5:90:
         59:64:60:83:e8:e1:d3:e5:b5:fd:02:74:5d:08:9a:3a:c3:5c:
         e8:31:3f:dd:3f:11:1f:d6:6b:7a:72:2a:a2:f4:17:98:5a:d6:
         2d:d1:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:05 2024 by rpki-client on console-ams.rpki-client.org