Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
File:                     d8fb982a-1c07-32dc-bc30-bf26804ba396.roa (raw, json)
Hash identifier:          AsmHde/S7ATXk+2qpLn6qA1tY/RAYMfug0ftfcRmNkY=
Subject key identifier:   C4:20:82:B8:7A:60:FA:93:F5:DF:07:17:2A:CE:4B:7B:0F:A1:0C:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845840DD214285ABE6A932BBB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        204.51.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d2:14:28:5a:be:6a:93:2b:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=e3cc6bc9-627b-4214-890c-20426f41b5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:2c:5d:f6:44:7c:c1:b5:a7:a6:d3:d0:27:
                    53:41:f8:0b:f3:47:ef:c7:1c:85:1a:c0:e3:09:c0:
                    45:7f:08:50:2d:16:55:91:dc:b3:5a:f4:73:8b:99:
                    dc:65:54:b5:00:fe:0b:23:ed:2f:48:28:51:41:4c:
                    f1:b4:f7:97:02:96:cc:a2:cc:30:41:95:fd:f0:3b:
                    2f:f6:20:a1:8f:b8:92:b3:3d:77:0b:0a:68:d3:86:
                    ad:ad:7c:a7:9b:4b:57:60:9e:bd:d9:af:c5:96:01:
                    cc:49:71:c8:a5:a0:35:77:8b:53:de:6a:09:3f:68:
                    7c:d6:7e:8a:05:eb:39:cc:b3:87:a8:ff:99:59:5c:
                    09:e8:34:87:bb:94:82:f9:46:0c:e5:b4:90:85:4b:
                    d5:f9:d8:87:d4:19:34:fe:a9:96:e2:18:83:29:66:
                    8b:3e:ee:13:4c:85:d8:3b:12:7d:18:dc:4a:66:0e:
                    a6:dd:c7:ed:b6:06:6c:79:9b:bf:ed:b7:73:f4:81:
                    76:92:7f:9d:e0:28:5e:40:32:05:d1:c8:68:0c:72:
                    ed:8b:11:56:a2:1e:e1:85:53:db:0e:54:ec:8c:5a:
                    65:c1:7c:e1:57:78:39:4f:ae:68:9b:b7:8f:e4:b2:
                    90:82:fd:f4:df:6d:f4:d0:f2:d1:b3:01:e8:33:51:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:82:B8:7A:60:FA:93:F5:DF:07:17:2A:CE:4B:7B:0F:A1:0C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.51.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:da:15:f3:72:85:38:a6:e4:fe:85:14:92:88:ee:f6:2c:00:
         de:94:0b:df:72:e6:5f:e1:cd:5a:f5:d9:22:4d:f4:38:4f:61:
         18:03:71:59:1c:0a:40:11:87:a5:c4:41:1e:5d:6e:94:3e:9f:
         da:c8:54:e8:ff:0c:af:bb:bf:4f:e1:28:f3:85:fb:40:48:09:
         97:fc:f4:f6:3c:a2:2f:a8:dd:e0:97:ce:0e:c3:14:0d:8a:11:
         ae:01:e8:79:91:c4:b8:07:c3:ed:0a:1c:b8:19:65:a3:af:22:
         6b:49:4d:df:ee:dd:02:28:fe:c2:98:37:6d:fb:fe:57:d2:3c:
         3b:6b:1c:a1:1c:dc:8f:b8:1c:b2:5f:11:3a:24:de:ef:a2:91:
         c9:74:90:84:a0:5f:f4:46:41:f3:b6:59:42:b3:5c:e7:3b:6e:
         9d:fe:d9:58:e5:4b:fd:82:6b:28:0b:74:03:3f:12:d5:71:fc:
         50:91:d1:7a:9a:a8:c5:58:95:e2:04:58:51:d3:2d:1a:d7:bc:
         92:fc:83:08:32:90:78:c3:0b:46:b8:fe:c2:29:61:33:a7:85:
         b4:1e:6d:46:ba:2a:e2:f1:d6:9d:36:be:3a:c2:09:5e:9d:9e:
         03:e9:11:f8:24:98:5d:77:99:ec:87:f5:94:92:a3:56:36:ba:
         43:53:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:06 2024 by rpki-client on console-ams.rpki-client.org