Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaff572e-2f0d-36e5-8882-78e50777f1c1.roa
File:                     eaff572e-2f0d-36e5-8882-78e50777f1c1.roa (raw, json)
Hash identifier:          Btco3MJQBiXVQwSnwoS9og3bd7MzQFNWGUeCBuGoGjk=
Subject key identifier:   6D:F9:DB:F6:69:F4:E5:F0:57:37:6D:E1:6F:4A:75:41:3D:A6:0B:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2ADB86564A8C8CDE7ED600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaff572e-2f0d-36e5-8882-78e50777f1c1.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        71.246.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:db:86:56:4a:8c:8c:de:7e:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=b109d04c-75b7-41a7-944f-dd3b76a12087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:dc:43:b1:4a:65:b7:da:ef:61:d4:dd:5d:
                    9d:ab:a4:4a:1e:c0:33:19:fb:7f:75:b6:38:08:21:
                    34:e8:1e:90:da:d3:63:50:5b:50:00:04:91:27:8e:
                    9c:ee:c6:26:4a:1b:db:ee:13:d7:9b:52:ba:aa:19:
                    a3:06:a6:df:b3:0d:32:46:69:4b:4f:e1:df:14:0f:
                    63:fc:03:71:24:56:bc:34:b4:0e:a9:27:30:32:b6:
                    d1:9e:bb:da:22:ba:6d:ae:ce:92:df:39:2a:17:e0:
                    a0:1f:7e:30:6f:6f:78:91:54:ac:61:da:16:49:05:
                    6b:c7:2a:4b:5f:63:61:77:29:5c:85:c3:3e:e2:8c:
                    69:22:70:34:bb:4e:5b:f8:9a:00:12:98:5a:0e:ba:
                    44:c3:d8:53:5d:f1:35:a5:be:19:d4:77:f9:5d:21:
                    74:5f:df:5b:16:83:66:8d:64:75:01:1f:d6:ac:c0:
                    45:2b:67:c1:ec:c1:1f:e7:50:9f:85:82:e4:33:c5:
                    c7:3b:db:55:ce:f1:9e:9e:ad:bf:62:75:c9:0a:0e:
                    02:87:f1:cf:b7:3f:b3:05:d9:fe:13:00:81:ef:11:
                    c6:8e:66:b0:1b:95:e8:57:03:58:c3:50:f1:07:4f:
                    ed:cb:71:35:6d:f8:87:63:1e:3c:2b:6a:6e:b4:2b:
                    ab:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:DB:F6:69:F4:E5:F0:57:37:6D:E1:6F:4A:75:41:3D:A6:0B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaff572e-2f0d-36e5-8882-78e50777f1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.246.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:c7:8c:04:c9:e4:9b:50:f5:24:4d:dc:bb:9b:6a:d2:c7:
         b2:3c:a6:80:ff:8b:11:43:13:31:62:1f:f8:55:c5:17:c7:15:
         40:6e:df:73:50:5f:b2:d9:1d:39:6f:01:c3:f0:94:3f:ca:5b:
         ef:cf:88:3b:7d:63:1c:d4:64:10:3e:31:27:ab:eb:f2:42:dd:
         24:d0:5f:58:ef:99:7b:3c:66:7f:d6:36:7c:6b:1b:14:3c:99:
         29:77:7a:e5:1c:2b:70:60:e3:cb:ac:dd:cf:64:6d:ad:ec:a4:
         e9:22:99:5f:f4:66:e8:c3:a9:24:8a:0e:14:a5:b6:0c:97:ab:
         08:91:89:02:4f:62:7b:71:c0:7a:e2:c2:73:25:c3:23:f2:e9:
         cc:46:7a:47:22:1d:0a:ed:94:46:55:c8:fd:e1:17:c7:03:26:
         40:08:64:a1:bd:1f:58:88:48:4c:f2:bf:e8:2f:e2:63:e0:51:
         f0:02:3e:e5:ab:45:cf:33:ee:68:21:9e:7c:5c:09:e3:b6:d8:
         ee:c5:70:77:79:27:e7:35:4b:f8:fd:b2:ae:9a:73:64:1b:0f:
         4b:c0:3c:a0:e1:ab:85:2c:47:c6:e4:5e:bf:55:37:5b:db:78:
         7d:9c:45:da:5c:c7:02:3a:6f:12:ee:5d:38:f8:74:3b:49:60:
         84:7d:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 12:40:29 2024 by rpki-client on console-ams.rpki-client.org