Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9e7d4bc-21e3-3c6f-b0f3-ddb9f1a93ffd.roa
File:                     c9e7d4bc-21e3-3c6f-b0f3-ddb9f1a93ffd.roa (raw, json)
Hash identifier:          +Wpcol+VnJe6BFMgji+z+1iMZy9NA3MLr6kHFE3hnPs=
Subject key identifier:   FD:88:7A:40:9B:C1:AF:E7:EB:1D:2B:DD:82:E1:FE:10:58:1B:4A:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B58C10AFB06EB74FEC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9e7d4bc-21e3-3c6f-b0f3-ddb9f1a93ffd.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        108.1.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b5:8c:10:af:b0:6e:b7:4f:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=fb3ca2c3-03e1-48b5-a118-4640e3ea9718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:d8:d7:6a:0b:09:d5:7f:a9:1a:cd:e4:d6:
                    5b:92:df:66:0a:ff:05:96:68:87:c4:60:76:7a:58:
                    c9:fd:d3:4f:47:9c:97:c2:7c:3d:5a:94:3d:ff:22:
                    9c:66:b7:f1:bd:e5:5d:61:9d:7d:f5:41:d3:e4:f5:
                    f4:4e:a1:49:03:81:6d:97:f2:0d:55:ef:6a:a0:0d:
                    73:75:9c:92:7b:9e:ca:e3:3a:2d:a8:e7:83:99:d9:
                    88:06:f2:53:22:00:3f:0a:05:45:55:47:5f:8f:e7:
                    3c:f5:7b:5a:09:50:16:9a:e3:37:71:4a:db:83:cf:
                    c4:c4:cf:fa:8b:79:f3:89:cb:74:0a:3b:b6:5f:9b:
                    d9:26:f9:df:be:88:77:3b:b1:0e:f4:47:ad:a9:f0:
                    e0:a2:74:02:fe:12:a3:56:6b:20:20:aa:2e:de:f9:
                    ce:9b:8f:5d:e3:2b:5b:b6:ce:31:27:c5:65:91:ae:
                    69:b6:53:3f:4f:2a:28:0e:e6:39:7b:b0:3e:d3:96:
                    3a:f7:bb:5b:47:29:0d:1b:f1:52:91:12:35:1d:55:
                    51:ea:26:e0:0b:82:a8:b7:f0:ba:e6:fa:96:16:c7:
                    ba:f6:c7:10:7a:ad:c6:46:8b:04:98:6a:90:fa:0f:
                    e8:8c:68:2f:76:2b:23:cc:50:df:c7:5b:6a:dc:b0:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:7A:40:9B:C1:AF:E7:EB:1D:2B:DD:82:E1:FE:10:58:1B:4A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9e7d4bc-21e3-3c6f-b0f3-ddb9f1a93ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.1.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1a:a2:4c:bb:2c:f8:9e:ba:66:18:a4:ca:1e:b8:1f:cd:9a:
         e4:ce:cb:b6:60:b4:06:e2:52:f6:32:58:fe:eb:7a:bf:58:6f:
         03:c1:21:60:2a:ad:56:2b:21:07:09:bb:93:62:1d:b1:bb:0b:
         43:da:7e:39:9a:53:95:ca:49:87:a2:3c:fb:51:14:9b:f0:63:
         66:ec:5d:a3:24:e9:16:95:60:7c:82:56:9a:6a:ca:f5:08:ec:
         01:32:ef:65:1b:ce:03:82:cc:8f:7b:d5:92:75:b1:7d:91:2a:
         bb:a1:6a:e9:58:5c:fd:db:3a:62:e0:7e:ed:e6:0d:ac:87:ae:
         d1:81:83:12:29:bc:7d:71:f0:08:82:72:d3:a0:a2:88:05:f7:
         39:cd:14:bf:cb:6f:06:4a:0f:2c:d2:06:77:29:3d:98:bd:a7:
         93:a7:1c:0d:c4:bb:86:f2:5b:97:90:69:a2:33:53:a6:88:73:
         89:58:90:07:bd:a2:fc:94:46:22:0c:28:42:b3:5e:94:c3:52:
         04:3d:f3:5b:a7:a0:cf:97:37:f8:bf:b3:9c:0e:5c:2e:ca:4a:
         70:62:02:62:7c:71:36:f7:f0:19:80:ab:67:87:94:49:10:61:
         74:b7:58:b1:b7:e5:02:7f:1c:57:64:47:b7:45:34:60:34:3a:
         c6:ec:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 12:40:28 2024 by rpki-client on console-ams.rpki-client.org