Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d82026e9-4f37-3475-9ee8-704450d225d4.roa
File:                     d82026e9-4f37-3475-9ee8-704450d225d4.roa (raw, json)
Hash identifier:          gSjj+cS/7+LPPTthWWyH6DLSmrhsM5/HvXDx1J+O+SA=
Subject key identifier:   AB:F3:C6:4C:B5:E9:B8:57:F2:4E:64:C3:2B:83:76:BF:58:22:12:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE6C7E5D4FA9480730500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d82026e9-4f37-3475-9ee8-704450d225d4.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        71.114.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e6:c7:e5:d4:fa:94:80:73:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=4d64d965-d356-4ea3-a96c-181f0de26c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:f8:b8:d2:2c:fb:62:6d:33:12:42:bc:47:
                    55:4e:98:83:0e:d3:48:84:b7:4d:51:2a:95:68:41:
                    52:38:82:34:76:07:71:a5:5e:8d:3a:56:55:01:43:
                    f4:6c:cc:4d:8f:cd:0f:4d:98:88:63:e4:c1:69:aa:
                    c8:89:ec:39:e5:65:fd:86:b7:33:ba:98:c4:ef:d8:
                    c4:e0:a1:eb:15:93:56:7e:64:53:73:e8:4e:4a:51:
                    5d:1c:f5:20:0b:06:c4:65:1d:7f:05:8e:0f:1e:40:
                    77:25:01:b6:3a:d9:84:3c:5a:03:b3:21:35:da:cb:
                    08:d4:53:4c:ad:df:7a:12:dd:be:ac:39:56:0f:46:
                    41:52:3e:62:d8:2c:b4:8c:11:ab:ae:b9:2b:fc:dd:
                    c6:07:26:f8:e5:53:28:73:94:53:a5:ae:b0:d1:6d:
                    3c:fd:0c:d0:44:41:7d:fa:5b:87:1a:14:5f:3f:4e:
                    e1:35:e3:97:81:ff:c0:f1:37:c6:82:8b:df:39:a8:
                    11:69:6a:0d:65:e7:10:20:02:e0:b3:d7:03:28:20:
                    84:7b:bb:3f:79:9b:11:0e:83:fb:b8:c5:7e:b1:a9:
                    2c:d6:a6:ac:f8:78:30:d0:17:0a:a3:a3:5f:67:fc:
                    bd:58:51:61:53:4d:dd:91:b4:24:ad:9e:d7:47:8c:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F3:C6:4C:B5:E9:B8:57:F2:4E:64:C3:2B:83:76:BF:58:22:12:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d82026e9-4f37-3475-9ee8-704450d225d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.114.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:82:f7:aa:49:65:4a:31:e2:b5:0c:12:60:13:f5:56:62:6b:
         20:95:22:6d:e9:23:0e:c0:9f:97:49:bc:b7:7d:88:6a:24:a9:
         b8:5a:46:b8:71:3f:54:fd:29:85:e4:23:b4:99:5c:d3:3e:5d:
         c0:1f:54:82:18:c8:4e:51:1c:b5:e4:76:16:11:c8:15:41:2c:
         be:29:51:2c:e0:d8:f7:dd:f4:6d:6b:84:a3:61:74:cf:3b:3f:
         52:6b:74:4e:6b:9b:12:f5:f7:4e:1a:a2:45:54:6e:9e:8f:c8:
         70:dd:98:59:98:50:45:ff:20:aa:21:d5:a0:3d:7e:db:d5:77:
         68:05:88:3b:63:2b:32:9a:81:01:69:7b:4b:57:ff:95:1e:ce:
         e4:83:8b:19:50:b6:24:2f:ba:2e:96:1b:28:46:b4:4a:e3:80:
         7d:05:3b:3e:17:8d:40:1f:4f:80:91:ca:ed:24:30:8f:7e:93:
         ee:cf:10:73:87:d0:83:e6:b1:d0:f8:9b:4a:48:ad:7a:b2:19:
         72:e4:79:6b:bd:f9:37:d2:43:fc:3d:88:c0:55:d6:12:09:46:
         08:c1:88:17:a7:ce:16:36:a4:73:c0:f9:95:80:45:35:31:3a:
         52:cb:ea:ca:16:49:75:8a:2c:6b:98:72:4f:12:f8:21:8b:75:
         59:5d:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 12:40:28 2024 by rpki-client on console-ams.rpki-client.org