Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa
File:                     d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa (raw, json)
Hash identifier:          0W69vPKoQX5yq1MIPbJzmW4H/IhEv7IKPVS0tpTxsws=
Subject key identifier:   20:33:C6:7F:52:73:79:6E:A0:34:ED:6E:06:E6:7A:5F:C0:37:CA:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2ADB499FF06417A5555000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        151.201.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:db:49:9f:f0:64:17:a5:55:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=8e024641-a33b-4260-ae7f-cb8be1d0a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:f1:1a:31:ab:cf:68:59:86:c0:69:06:0f:
                    e0:2e:82:51:07:a6:71:cb:79:07:2f:0f:c8:b1:a5:
                    72:b6:a4:d9:0a:97:f4:1a:0c:24:5b:4e:22:45:e2:
                    1f:c2:cc:03:35:c9:26:89:78:e2:03:fc:ea:a6:de:
                    5f:5c:5a:40:61:be:af:27:92:b7:5b:32:92:6e:4f:
                    6c:3e:12:ae:97:30:a3:82:d4:24:81:ac:bd:62:67:
                    0f:4f:c5:d7:79:97:dd:43:ed:40:be:91:48:ec:37:
                    6c:82:2c:8c:6e:36:4b:05:57:71:d7:92:2f:ac:6e:
                    45:d1:2f:66:f4:99:3f:3c:4e:12:96:ad:fd:1a:cb:
                    31:e6:98:84:89:75:c9:a1:f1:f7:71:bb:a6:8a:0f:
                    b0:96:7c:a3:1f:e2:12:a1:ce:1c:e9:7a:76:44:ff:
                    66:09:52:69:55:09:42:cf:f0:1c:ab:bb:2e:d9:3d:
                    96:78:d0:24:26:5c:a7:a6:5d:38:58:7c:6a:3b:e5:
                    ba:93:11:39:68:0c:4f:6f:be:36:5f:d2:87:15:32:
                    17:99:8b:78:fa:96:02:ed:b1:c9:4a:4a:c3:9c:72:
                    f1:0a:1f:4b:16:a0:0a:9a:f5:f4:9a:31:52:74:e1:
                    d8:95:58:78:04:fe:c3:97:38:7b:d0:12:4d:c7:ce:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:33:C6:7F:52:73:79:6E:A0:34:ED:6E:06:E6:7A:5F:C0:37:CA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:12:0e:dd:b4:30:18:45:d8:4e:58:a9:d1:3d:d3:82:f5:b0:
         54:5b:7f:ce:55:43:28:42:8a:28:01:69:8f:4e:0c:bb:22:b7:
         24:ea:13:e9:ad:88:3f:0c:07:96:3d:cd:1c:ca:2d:24:c5:a8:
         49:44:c1:65:fb:d3:04:f9:7d:91:7b:72:e8:96:f3:11:8e:20:
         12:41:06:9d:7a:82:6b:b7:59:17:02:ac:56:78:c9:e7:ff:b3:
         bc:79:71:e3:1b:68:3d:16:bb:1f:69:ee:37:10:98:65:b2:62:
         32:a2:9f:4a:53:57:4e:bb:1f:85:bc:d2:1d:19:2d:cd:ea:fe:
         fc:f2:a2:24:4c:90:2f:ec:ad:5f:40:1a:87:e6:a8:3f:84:24:
         d5:a9:c0:94:6f:57:f6:b1:20:e3:c9:6d:f2:2d:38:67:c1:a3:
         d6:a1:af:68:86:47:bb:02:f0:b0:6c:5a:fd:dc:5a:0f:0a:14:
         ba:d0:11:41:51:92:6a:bd:b6:15:d3:39:2b:e4:b7:4d:14:9a:
         a0:69:64:f0:b4:ee:e5:8e:b0:89:e7:96:4d:82:41:bf:18:32:
         69:36:bf:33:5b:15:27:52:4f:87:24:49:35:9e:00:b2:6e:30:
         f3:4a:20:63:e9:c3:36:a2:ef:a1:17:54:e2:50:96:5c:ba:fb:
         53:56:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:33 2024 by rpki-client on console-ams.rpki-client.org