Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec724e84-89d0-3ef7-bce2-bb23382c0302.roa
File:                     ec724e84-89d0-3ef7-bce2-bb23382c0302.roa (raw, json)
Hash identifier:          ardT5R2w3n+h6l63LJUJ4Za1cQh+NNcZwGJEa1WCLtY=
Subject key identifier:   AC:69:94:86:E1:74:B6:F9:63:B6:06:2B:12:A2:54:4B:14:69:1D:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D7DF7DC1906A4D849D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec724e84-89d0-3ef7-bce2-bb23382c0302.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        96.227.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d7:df:7d:c1:90:6a:4d:84:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=65059d54-36f3-4de5-96d4-cd74f2349e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4d:2f:97:8f:0a:15:bf:81:eb:9b:6b:69:b0:
                    32:a0:56:27:4c:e9:71:6f:97:31:5d:a3:c6:a6:cb:
                    16:15:d4:b2:95:df:49:1b:c9:7e:af:02:cb:3f:b0:
                    58:27:ed:29:89:d6:5c:ee:1d:ab:4f:51:03:97:60:
                    c4:f9:e5:f2:73:9f:82:69:f2:0b:e4:2b:3b:7a:11:
                    aa:dc:00:0b:a1:2a:c6:5f:87:a5:97:f7:2e:16:0a:
                    80:cc:65:4e:35:41:1b:57:9e:5f:ef:23:0c:54:b6:
                    bb:f1:1e:91:5b:7e:ae:ae:62:91:4b:05:ee:53:ae:
                    fd:3e:b0:84:9e:17:1b:a4:c2:27:cf:8c:88:06:91:
                    80:16:44:ef:0f:b5:0c:d0:8a:de:9b:5d:e6:07:b4:
                    1f:a7:20:46:f5:c0:70:25:e7:00:3d:9a:83:19:37:
                    b0:d4:70:cf:9f:54:f5:be:bc:44:df:86:39:3a:f8:
                    ca:7d:d0:5e:81:30:a3:a0:10:13:50:fb:85:04:c3:
                    29:17:7c:0f:c1:e9:fb:2b:d1:fd:53:1b:b6:fd:73:
                    9d:78:1f:a6:26:cc:56:5b:22:21:a2:62:c2:35:72:
                    22:97:d7:99:cf:57:a3:a7:9d:3f:5f:55:c5:f5:79:
                    f4:db:5b:e4:47:46:b4:c2:9f:54:75:31:7f:f9:78:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:94:86:E1:74:B6:F9:63:B6:06:2B:12:A2:54:4B:14:69:1D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec724e84-89d0-3ef7-bce2-bb23382c0302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:41:37:a5:ec:3b:2b:97:c6:0c:48:f1:7b:71:69:12:60:2c:
         33:35:d6:06:c4:8e:69:b3:c2:fa:88:95:48:c7:61:27:c5:ef:
         56:9a:75:fb:85:a3:8f:82:62:ff:28:bc:e6:bd:a9:a4:d2:be:
         4a:0b:a7:d7:88:b1:7a:05:ff:8a:ad:13:2a:79:44:e9:1c:bc:
         40:f8:b1:51:d9:fa:ac:7c:a4:e3:1a:48:62:cd:8d:3e:21:02:
         f2:48:e6:61:62:e6:7f:6d:60:53:49:87:78:83:2f:5d:47:43:
         ca:e7:d9:01:de:b1:f0:07:13:f7:de:88:74:4e:2f:f4:d6:b7:
         cb:8f:fd:17:e6:69:9c:f0:d1:4b:55:a8:7a:a4:7f:ce:65:bd:
         64:c7:5b:a4:13:6d:78:96:c9:e7:b8:9f:98:bf:32:9a:40:e0:
         33:04:8d:01:1d:15:28:2d:83:f3:db:11:1d:8a:ca:5f:a6:d0:
         e4:b6:53:a8:36:08:2e:09:59:fd:5b:07:4a:66:40:4a:22:1c:
         c9:5d:3b:62:8c:37:f4:80:36:9f:31:bd:85:75:87:2c:42:fa:
         2a:5c:e6:29:bf:fe:10:b6:ed:a1:03:dd:b0:58:08:00:29:30:
         53:9c:3b:4c:a1:6a:d2:a0:b1:2a:58:a5:7b:8b:01:44:bc:99:
         dd:01:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:00 2024 by rpki-client on console-fra.rpki-client.org