Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
File:                     d898c3e6-e536-3098-b097-31f14862b8a8.roa (raw, json)
Hash identifier:          CelbQO4MCJ2O1Z8rwENlBZMGTwuv39OGtoRnniB5hgg=
Subject key identifier:   68:8E:A4:61:57:19:12:8A:CA:94:D3:01:5D:75:77:92:93:39:CD:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD7E757EA657F33EFED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        108.15.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d7:e7:57:ea:65:7f:33:ef:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=7df28b36-2ee6-43ab-9260-24b3fd63ce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:dd:19:0f:4c:ec:e1:95:2c:20:a9:31:16:
                    6e:02:d7:0b:96:73:36:e6:ea:3b:da:f4:fd:8c:1b:
                    2c:93:77:9a:a8:a8:8f:c8:c5:df:d5:71:97:d4:36:
                    ea:9d:c4:52:50:e3:d1:bb:83:b2:09:ec:e3:71:e8:
                    8f:81:d7:1f:8c:1d:7b:b2:7e:72:6e:0a:12:a3:d1:
                    bf:b5:ae:c7:12:d4:c8:be:f7:06:9f:de:11:bb:d6:
                    8a:f2:8c:ff:1a:d0:fd:62:fb:2a:85:bb:c2:c6:e6:
                    9a:df:5c:7b:d5:b9:c0:02:c3:51:59:1b:c9:21:c9:
                    e2:e9:46:93:aa:f7:0c:76:07:80:7e:9c:fc:1f:dc:
                    13:d1:2f:8f:1b:7b:da:11:20:81:6e:35:2b:8c:a6:
                    23:d9:00:e0:d8:a9:16:72:f4:31:43:a1:be:5e:b9:
                    05:2d:a8:51:50:4a:91:8c:0a:92:30:00:be:6e:cc:
                    9c:03:3f:f2:07:82:19:85:55:26:ab:84:9c:8e:89:
                    c9:f7:35:df:d9:95:dc:70:b4:79:a2:cb:70:85:0c:
                    e5:3f:f2:60:45:86:89:9e:1f:a7:20:b3:bb:66:08:
                    1f:4a:b7:3d:86:6e:2d:03:22:7e:a2:75:6c:bf:32:
                    8c:d5:42:28:f6:1e:eb:d7:5f:7f:4f:97:e7:67:44:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:A4:61:57:19:12:8A:CA:94:D3:01:5D:75:77:92:93:39:CD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.15.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:13:38:fc:bf:bd:03:ff:e8:c0:81:ce:c2:68:89:75:46:
         2c:fc:98:ae:83:60:8c:7f:2c:c3:47:00:15:5d:ff:8b:70:fb:
         b5:e0:98:d5:b3:08:a0:eb:ef:4f:21:c8:3a:aa:f6:2d:1a:11:
         e8:af:e6:be:07:cc:ea:42:b4:18:00:64:54:9b:5a:14:9f:5e:
         45:16:c2:02:78:47:47:1f:ca:32:85:8e:66:68:ae:af:55:ab:
         de:ca:fa:c0:e5:79:42:f9:5a:9a:db:48:9e:49:13:40:1a:97:
         02:a7:2e:ae:4c:8b:ec:d2:ad:ee:3a:01:9d:15:9a:1f:20:be:
         2b:c5:10:d9:dc:91:c6:bf:1c:67:ac:de:58:1f:7e:48:a8:d3:
         27:43:a1:91:bb:c1:0b:21:0a:a7:61:63:82:bc:72:3f:0e:23:
         72:d1:ce:2e:03:73:06:27:5f:d9:da:2b:68:cf:15:da:25:bb:
         b5:a8:53:32:56:94:a3:7c:8f:f7:5f:00:4a:d4:c8:d3:7d:0b:
         70:e9:d3:da:31:d1:42:ab:92:b6:67:42:f4:60:33:dc:38:8c:
         e8:ef:82:f4:86:9e:c5:eb:6e:b1:2d:21:4e:db:37:c9:e8:83:
         a2:40:68:80:22:c7:ac:a6:af:9f:9f:df:e4:8f:5a:15:ec:0f:
         75:aa:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:34 2024 by rpki-client on console-ams.rpki-client.org