Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2e9c68a-d9d6-3ca0-b7c8-f57bb70c87ff.roa
File:                     e2e9c68a-d9d6-3ca0-b7c8-f57bb70c87ff.roa (raw, json)
Hash identifier:          opjcVCeOoyJp5bp0VWsEoEsFhri55LQaOONFOfP0UzA=
Subject key identifier:   C6:5A:9B:24:A8:A3:E7:DA:5B:B0:82:E3:6F:A2:1B:E3:1D:81:83:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE53CAAEBD1D67E6CF8CA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2e9c68a-d9d6-3ca0-b7c8-f57bb70c87ff.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        71.121.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e5:3c:aa:eb:d1:d6:7e:6c:f8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=5971e856-8596-4138-83af-8f0b78640930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:3c:00:18:55:dc:dc:ca:2e:82:4c:d5:57:
                    21:df:1c:8f:b0:2b:53:a2:7a:3a:13:4a:3d:49:95:
                    b2:07:06:2e:53:a9:c0:79:2b:56:13:d0:b4:c5:42:
                    17:8d:26:fa:69:6a:f3:6f:04:e0:e1:fb:99:67:17:
                    81:c3:18:96:e1:2a:56:1c:3d:b8:04:de:e5:5d:fc:
                    28:a8:cf:d0:0f:fe:02:2b:fe:d2:ae:18:dc:c6:97:
                    36:12:2c:e1:c5:6d:4e:30:11:1e:3d:1f:ad:f4:5c:
                    3a:a6:99:fc:ac:b8:1c:a9:a2:ac:7f:ce:17:4b:2b:
                    86:4c:d7:87:11:1c:18:1a:7a:ad:41:f6:c4:a0:cd:
                    49:29:48:7b:41:bd:f5:fa:52:bf:f0:fe:0d:39:5b:
                    49:b4:09:f0:84:13:a6:32:8d:24:62:01:26:0b:88:
                    f5:ae:fe:d9:69:26:38:bb:2a:77:72:1a:f3:0e:a8:
                    f6:ce:ad:7f:71:36:75:c8:c3:8a:e7:c9:17:7c:cd:
                    9b:57:8a:1b:25:f9:b8:95:54:6f:e3:86:a9:5b:6b:
                    88:2a:7d:b5:bc:a2:8d:fd:d9:6e:06:42:33:f3:d8:
                    c4:b6:17:6f:17:d2:d0:0a:2a:86:c8:ff:27:ab:64:
                    cb:69:39:71:46:c2:11:2b:5c:43:54:4f:73:d7:0a:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5A:9B:24:A8:A3:E7:DA:5B:B0:82:E3:6F:A2:1B:E3:1D:81:83:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2e9c68a-d9d6-3ca0-b7c8-f57bb70c87ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.121.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:e9:ac:63:8a:73:28:b8:f3:72:52:f4:07:11:e3:7e:15:
         90:dd:74:93:23:6a:df:1c:f9:65:d2:07:27:2d:03:25:a7:d1:
         aa:37:41:07:29:2b:a3:0c:04:13:6f:99:ac:ec:8a:13:4c:cd:
         ef:c1:b3:4c:e8:f2:7b:e5:73:58:ab:31:23:e7:a4:b7:90:d9:
         57:4d:01:0a:fe:e0:10:3b:ee:19:60:39:5c:8d:d9:72:61:58:
         26:c0:17:9a:13:e0:51:01:f7:46:5d:05:cf:05:71:71:01:e2:
         fa:87:b0:48:a6:05:38:11:eb:58:f2:74:da:b6:ea:a9:10:8c:
         ea:89:82:09:28:11:e7:62:9a:81:6f:35:7b:c3:43:3e:77:be:
         6e:64:6d:83:02:d4:47:0a:72:bd:19:da:a7:4a:66:ef:d6:26:
         14:32:69:86:5a:dc:47:0a:a7:25:33:3a:15:5f:c3:74:14:c5:
         40:f2:9f:7d:29:1d:5b:db:e9:8f:d2:f8:92:47:0a:ac:bc:63:
         47:12:5b:79:3e:6a:fc:c2:34:15:b4:f5:7b:38:ee:5f:42:35:
         71:d7:d7:3f:16:0c:f6:1e:cc:54:f3:d0:48:29:c6:d5:ff:fd:
         5e:82:65:e1:db:ad:80:06:da:b1:80:ea:88:78:31:b0:81:2b:
         d1:f3:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:30 2024 by rpki-client on console-fra.rpki-client.org