Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa
File:                     d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa (raw, json)
Hash identifier:          vZVVi6BJaoISRHyEr0Uw8nt9scyJ9WQg48rkxTT5r1Y=
Subject key identifier:   39:F0:A4:F8:11:9C:F1:88:67:56:E0:0C:9D:E6:6D:A3:B7:36:5F:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A818A04ADB019A267740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        173.62.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a8:18:a0:4a:db:01:9a:26:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=53400b03-efdb-4ed0-a142-611de1393ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:1b:b2:4f:d8:7e:e1:c5:ac:74:92:3d:bd:
                    0a:4a:fb:e8:f5:cb:61:ae:5b:d4:bd:cb:9d:00:9a:
                    cf:85:2e:e1:17:36:5c:07:88:91:f1:96:fe:71:cc:
                    22:cf:14:98:63:ca:89:96:67:59:70:34:69:fc:25:
                    7d:2b:f1:67:ed:0c:74:d1:56:2b:6f:d5:ed:53:65:
                    4f:33:06:2e:53:70:e1:c4:1f:9f:9a:f4:19:52:30:
                    90:de:c7:c4:98:3d:c0:a2:89:af:01:2b:80:8e:7c:
                    d3:ed:9e:53:dd:f4:0a:83:b5:62:b3:2c:a0:ee:65:
                    7c:dc:b8:78:3c:9b:ba:3b:30:5e:bf:c9:7f:87:85:
                    7a:27:fe:af:00:ce:d8:5b:ee:c7:57:c8:19:80:38:
                    e2:85:1c:cf:6f:00:21:5d:fa:ff:a9:82:07:e5:28:
                    74:3a:64:3d:c6:3e:a9:b2:5c:3e:6d:3a:51:3e:b5:
                    10:15:34:de:07:27:e5:18:d9:cf:be:01:fa:81:dd:
                    f0:57:25:ff:7e:ad:85:35:d9:89:17:aa:32:0b:f6:
                    a9:af:bd:1d:34:81:a6:4f:15:20:e9:60:c0:b3:fb:
                    d5:74:4e:a9:57:71:37:9a:91:7f:57:a1:78:59:77:
                    45:6f:33:89:c0:85:90:56:e5:75:77:7a:4b:fe:ab:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F0:A4:F8:11:9C:F1:88:67:56:E0:0C:9D:E6:6D:A3:B7:36:5F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.62.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:14:38:f4:74:66:00:c5:95:09:c4:41:49:b1:cd:53:4f:e0:
         b4:83:ad:5e:30:78:c4:79:12:6e:33:20:53:ad:81:bb:98:6d:
         72:aa:6b:45:ff:de:6f:7c:8d:10:73:4c:7b:85:2c:36:6e:b4:
         2a:9c:27:5a:1d:2a:85:6d:31:52:27:92:f1:f6:8e:fd:08:e2:
         10:cc:ec:b3:7f:c3:17:2b:ff:87:1a:34:81:16:c2:a8:65:da:
         f5:83:b8:95:50:42:49:d4:44:20:f3:eb:b2:1d:5f:ad:7e:cb:
         f2:66:00:c0:05:84:09:0a:71:43:bb:82:c5:38:55:84:71:31:
         9b:32:18:7d:f1:12:a6:b4:3a:cb:29:ab:3e:d0:16:89:36:d8:
         72:35:3a:9b:56:63:67:cf:c1:9a:77:6d:d2:11:3b:61:4b:e8:
         6d:a1:32:f3:9c:13:c5:0f:e1:3e:4c:a8:e0:be:48:80:f8:01:
         55:f4:26:7e:6d:46:15:78:16:55:87:ba:ee:5e:4b:f7:cb:2a:
         e8:cc:d2:0b:91:59:7f:fb:42:80:32:ab:0b:4a:8e:0d:60:b6:
         de:e3:53:76:c1:67:f5:50:23:06:0a:1a:67:05:14:88:b3:a0:
         7a:c2:4c:61:2c:f0:7c:07:d7:52:76:f9:d7:53:27:81:5b:7d:
         cd:6c:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:29 2024 by rpki-client on console-fra.rpki-client.org