Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa
File:                     e150b470-1521-35c3-a72e-d41a37e9a2d7.roa (raw, json)
Hash identifier:          Nb1MvRccgVm1t5mxOUOUkfE0Q1WfyYbNH6AEpDnoxqc=
Subject key identifier:   81:3E:34:2F:22:AE:79:CC:31:B8:0A:0E:3A:35:5A:F3:D7:6C:8D:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B892337604A7C470EC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        100.35.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b8:92:33:76:04:a7:c4:70:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=d8088182-90c5-4b8b-9e94-18593d4ee83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:c0:b0:23:c6:c4:29:dd:0a:67:0e:7e:01:
                    f7:39:a3:d0:4f:4e:9a:55:84:c6:fe:0f:d0:bb:2f:
                    dc:80:31:b2:00:1d:64:3a:ff:b2:e5:2f:55:72:8d:
                    07:29:79:8a:81:cb:e0:53:b8:61:b6:02:c8:d3:be:
                    53:3d:1c:37:61:63:64:48:ea:d4:0d:c3:21:0c:b3:
                    9a:6c:cb:f4:e5:15:3a:5a:38:e5:e1:0c:3b:39:81:
                    e6:8f:dd:1e:18:2a:e1:a9:17:d2:b9:e4:c6:87:e2:
                    a9:e8:3c:c2:ae:2d:90:8d:da:e1:3e:08:79:e7:ff:
                    a2:8c:e0:89:62:bf:e4:5f:c2:86:24:9e:09:55:cf:
                    dd:35:44:14:da:6d:50:87:9f:3f:00:08:01:89:0a:
                    fc:b6:9f:02:f5:cc:be:be:43:8a:7b:96:31:f0:17:
                    23:01:66:12:57:74:16:c5:aa:8b:28:54:9f:57:2b:
                    a3:d8:ed:63:0b:6c:3b:ab:91:41:97:df:9a:45:12:
                    35:97:bc:40:1c:df:d1:5e:8f:53:3c:86:45:d6:44:
                    d7:ae:2f:fa:e4:ff:1f:a1:d1:fe:69:79:ef:9b:39:
                    87:00:04:91:be:6b:89:6b:7c:39:50:db:ab:ee:06:
                    22:61:87:ab:ff:da:97:31:88:c9:f7:ed:d0:c1:4c:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:34:2F:22:AE:79:CC:31:B8:0A:0E:3A:35:5A:F3:D7:6C:8D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:4d:c4:eb:cb:cc:e9:4a:70:5a:5c:e0:1f:50:b0:81:94:58:
         3a:69:3b:e2:68:d4:50:36:9a:c7:b9:22:bf:9b:24:2a:8d:58:
         b9:bf:ef:20:79:25:57:9b:b0:f4:23:b6:00:fd:5e:e0:bd:0f:
         45:6e:5a:b7:44:28:bd:49:1b:15:7f:a8:f1:6e:9b:a4:7c:b7:
         95:14:85:7d:1f:13:e4:43:fe:bc:b1:13:f7:ab:1f:04:1f:de:
         13:f9:18:15:f4:0c:4e:40:4a:57:a1:a4:fa:21:e1:1b:b3:dd:
         30:e2:d5:19:8f:a8:03:ef:83:91:b9:7d:29:6d:50:df:df:5f:
         e6:9d:84:6c:0e:00:5a:f7:9f:1a:ef:2c:83:d5:b9:6a:93:91:
         40:14:f6:68:be:be:25:a5:04:7f:dc:cf:10:30:30:5c:f6:9a:
         bb:53:a4:6e:4c:7c:3a:f1:58:cf:ec:63:3c:56:64:77:42:2e:
         7f:62:15:01:32:bc:7f:8e:63:ea:0f:9d:c9:04:64:da:f3:df:
         da:7a:a3:f2:e2:ba:eb:7f:dc:d1:53:65:ee:8f:1e:67:94:b1:
         91:f8:3b:97:9e:f7:41:e4:21:31:f7:07:56:14:c6:46:fd:07:
         58:8d:7c:0f:5d:58:c0:07:6d:45:2f:95:14:de:f0:e9:51:4c:
         ef:0a:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:34 2024 by rpki-client on console-ams.rpki-client.org