Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa
File:                     df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa (raw, json)
Hash identifier:          VjAXvBMHbTaE+zUpPsY/jeu7VEdMET/76SGiu6WHqbM=
Subject key identifier:   A8:E1:CA:7D:08:E6:81:CE:7C:44:F4:9B:AC:EE:AC:EF:C9:AE:26:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80CBA225D7FF8B79412880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        72.89.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:cb:a2:25:d7:ff:8b:79:41:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=022b41a3-4a66-4fce-8a85-f84f3b305d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:1e:f9:0f:4a:26:41:e7:c6:2b:5a:e6:6b:
                    1c:97:78:ee:03:d2:4a:9d:32:e8:cd:5d:11:c7:c7:
                    8c:1a:e2:cc:1a:67:8c:1e:cf:c3:77:e8:f3:3e:56:
                    45:db:0b:d0:2e:4b:84:05:47:2a:5a:a1:07:35:dc:
                    cc:0c:67:05:8c:a3:69:ea:f1:39:9f:0b:5d:10:61:
                    8f:aa:e1:d0:11:df:e4:69:7f:5b:4c:c0:67:9a:4a:
                    d2:b9:81:bf:a1:f4:fa:ae:3f:e0:4c:ea:84:ba:fe:
                    1a:e7:97:71:e4:0c:b8:4a:ef:4d:dc:54:df:99:50:
                    df:68:59:a6:eb:41:83:69:30:88:02:d3:83:be:4a:
                    d7:33:8d:ad:36:94:92:c1:ed:dc:4d:90:23:d5:d5:
                    37:57:4d:8e:ff:f4:52:be:58:af:0e:97:b6:f9:72:
                    ca:c3:3f:7d:f4:65:44:2e:26:ee:14:f5:35:a9:c7:
                    e1:db:01:45:b5:60:7f:a7:99:a3:49:c1:f2:5c:16:
                    f0:38:2c:8a:78:6c:80:ec:43:7b:66:63:fb:1f:95:
                    3b:80:44:2a:9e:f5:cd:7d:e8:43:de:39:8a:a5:a1:
                    8c:ad:7e:8f:3c:14:d7:46:d8:9a:28:49:28:71:3f:
                    e6:3e:d5:c6:8d:f9:60:61:de:db:c1:c6:6d:b3:52:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:CA:7D:08:E6:81:CE:7C:44:F4:9B:AC:EE:AC:EF:C9:AE:26:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.89.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:cd:a9:f6:98:24:15:c0:f1:3c:41:41:ed:c8:4a:53:f2:55:
         43:dc:0a:de:fe:6d:92:ce:6f:d6:77:d9:e3:a2:3a:1b:8a:6c:
         27:2a:3c:dd:8f:9e:e0:5a:b0:44:cd:4e:11:17:ba:5d:dd:41:
         92:39:90:9d:29:b9:16:f0:91:91:9c:e7:0f:9a:f6:cf:70:9e:
         64:8f:45:f8:43:6e:31:78:bb:19:cb:16:ee:b4:35:09:e6:4c:
         d8:38:af:3a:d8:f8:38:56:b1:7f:3b:b5:a1:27:ea:4e:44:64:
         4e:1b:75:8d:f2:40:78:17:94:bf:50:ac:64:80:c7:af:ae:bf:
         33:2e:a2:70:0e:42:3b:18:7b:ea:f7:3c:b3:f1:c1:84:77:6b:
         d3:a8:dc:23:d3:2c:c5:d9:29:4b:1c:de:2e:9f:42:9e:87:70:
         af:d5:11:29:81:7b:64:d2:1a:ff:2a:af:c3:5e:85:ee:26:e2:
         68:b7:49:e7:34:a9:bb:1f:41:f3:55:1d:c3:40:2a:7a:28:ab:
         61:d8:d5:83:a7:01:07:fc:51:3b:fe:cb:ac:57:6c:62:9c:76:
         a9:18:d4:af:ab:d8:bb:84:13:a2:1d:c6:17:50:bc:e9:d6:37:
         a1:c9:f3:b2:e4:33:b4:f0:37:3a:a1:9f:20:34:90:82:f9:ed:
         9b:ed:21:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:58 2024 by rpki-client on console-fra.rpki-client.org