Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa
File:                     dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa (raw, json)
Hash identifier:          K0+D/SdNbEjpWObcGD/6srvvAWK1m/lU601MX7WlA6I=
Subject key identifier:   CD:A1:BC:36:23:29:7F:30:55:28:D7:95:11:11:37:AD:60:3D:21:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B87EBEE17B03FA5904580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.44.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:87:eb:ee:17:b0:3f:a5:90:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=4d2c0b61-24f0-4c43-8d93-6d262de02105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3a:cb:8d:c5:a5:f7:2a:50:60:c3:b8:72:7a:
                    a0:56:0c:aa:50:0b:81:11:e6:85:de:76:09:d7:aa:
                    f4:80:53:6a:5b:b9:a6:8f:92:74:97:c2:8c:5f:4d:
                    87:f2:a9:3a:b2:f1:cd:fc:e9:37:57:6e:8a:03:31:
                    72:4a:87:ec:07:ac:e4:db:b3:02:c0:43:af:1f:67:
                    f1:c1:6c:ab:3f:a3:50:97:19:32:48:a0:07:91:36:
                    e2:42:84:4f:33:ed:f0:ef:29:25:29:e6:82:a1:cf:
                    5a:22:bc:e7:44:f8:c0:83:dd:d2:d9:d5:0a:9d:5e:
                    b5:4a:2b:44:9f:70:1e:40:c5:59:02:cb:d0:80:59:
                    ac:ec:2e:fa:aa:2e:c7:2c:86:43:5a:77:46:c4:ca:
                    ed:10:d5:71:14:ba:53:30:7b:b7:e2:32:f3:9d:a7:
                    61:75:55:88:6e:36:a1:84:4a:7e:d5:d3:ec:ee:54:
                    53:e5:23:7a:b5:42:e6:31:09:7e:0b:df:5a:85:42:
                    99:b8:0c:62:9e:bd:71:eb:3c:d9:fe:a8:9b:fb:9a:
                    24:b4:ef:6b:1f:bd:27:6f:cb:77:e8:9c:88:cc:9c:
                    48:6a:39:3f:1d:81:29:19:ca:30:28:45:5c:8e:fd:
                    68:b9:d4:3f:87:de:a7:6e:14:78:16:c5:9b:f6:e4:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A1:BC:36:23:29:7F:30:55:28:D7:95:11:11:37:AD:60:3D:21:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.44.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e1:f7:52:53:58:e3:f7:b8:4e:7c:fa:cf:81:9b:45:64:33:
         4b:b7:50:8b:79:9c:54:6f:82:1a:05:4b:a8:68:70:91:ce:e6:
         f4:f3:e8:f3:11:5f:c0:80:bd:b3:2c:fe:ba:ff:8b:2f:91:df:
         25:65:9a:b2:eb:32:71:83:69:e8:22:fe:c7:4d:0d:68:e5:3f:
         fa:8b:16:bc:db:a0:61:d9:e5:24:04:50:33:fa:98:ec:8f:15:
         25:34:c9:2d:df:bf:57:12:cd:bb:bc:f4:18:b0:59:d1:ab:5c:
         9b:c0:af:e5:00:71:42:61:0a:9a:cc:cc:0f:3f:76:a4:15:00:
         27:bc:77:ec:54:6a:8c:1b:78:2a:1a:11:17:09:45:84:42:3b:
         f2:9d:ad:d0:92:f6:31:90:1d:37:4a:99:98:63:d0:88:af:c8:
         6e:0d:39:97:b3:ad:14:4b:4c:22:95:39:64:78:f1:7c:4e:bd:
         c7:ec:e9:61:cf:6c:22:05:6a:a1:33:67:21:31:70:54:8d:e4:
         a8:c3:ce:5b:ad:05:fa:93:02:55:7e:0d:78:78:73:03:ac:48:
         a1:04:fb:1e:d6:87:1c:5c:d6:45:fc:84:f7:22:03:08:96:70:
         69:00:fd:5c:13:f7:41:e1:1e:a3:8b:09:0e:41:f2:a1:e4:5e:
         fb:3b:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:54 2024 by rpki-client on console-ams.rpki-client.org