Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3be981a-b818-3e2e-8d71-c19e831db0b0.roa
File:                     f3be981a-b818-3e2e-8d71-c19e831db0b0.roa (raw, json)
Hash identifier:          4lbuh1VvhLoMmIhv4/4ILPOHb3RtomiRTdYehs0xPkQ=
Subject key identifier:   21:AA:2D:3B:56:B0:68:70:42:4F:80:2C:7E:1B:73:DF:E7:1D:82:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A0C244370CF169205080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3be981a-b818-3e2e-8d71-c19e831db0b0.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        71.162.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a0:c2:44:37:0c:f1:69:20:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=4f95e3c6-2d1c-49a7-b2b7-00d64da52bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:38:7d:5f:5a:a6:e8:f1:9a:8a:8d:92:c1:a8:
                    a1:93:53:c5:b6:a4:a2:8e:b3:04:9d:25:e0:55:6b:
                    d1:57:3d:f7:9f:7b:81:d2:68:9f:1d:86:b3:02:e3:
                    3c:4b:6b:96:85:91:27:b6:a0:2c:9d:0e:33:2c:da:
                    c9:23:5f:2d:76:9b:04:8c:f2:93:9d:bd:c1:0a:c1:
                    f9:15:b6:6a:e1:28:b6:05:fe:63:64:e4:46:d7:ab:
                    8e:cd:ec:ad:dc:5a:ca:b2:30:ea:bc:47:ec:70:29:
                    b1:34:71:04:9e:a6:da:89:a8:55:29:fd:b6:e7:6f:
                    4a:04:1e:97:09:e0:2c:25:46:56:7d:5c:9e:b5:ba:
                    4e:01:c2:5f:6e:5c:23:ac:c2:dd:8e:da:e2:fc:cd:
                    a4:7c:b3:aa:d4:66:3e:7a:66:2a:5c:a8:bd:0f:82:
                    38:1f:cc:0c:8b:2a:a3:3f:fa:5d:61:af:c7:ed:6c:
                    a6:d3:f6:e6:ff:34:a9:5c:06:f5:31:1f:a6:ab:c5:
                    17:8a:17:c5:5c:d3:24:5a:27:25:88:17:5c:8d:75:
                    08:9a:a7:c2:65:d9:3b:df:d9:b9:51:9a:33:17:2b:
                    6c:81:3a:37:5e:f6:5a:36:0a:5f:07:61:97:b1:ec:
                    7f:e1:92:9a:a7:c4:fc:2b:bb:3a:e0:78:63:dd:42:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AA:2D:3B:56:B0:68:70:42:4F:80:2C:7E:1B:73:DF:E7:1D:82:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3be981a-b818-3e2e-8d71-c19e831db0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.162.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:85:88:b9:a0:ad:27:2a:31:c3:46:be:b2:1e:e5:7d:92:a1:
         2c:f4:2e:2f:f3:77:c1:de:c6:d8:a0:fc:9d:14:81:61:70:42:
         d0:5a:ad:07:38:05:30:18:64:5c:e7:f1:15:4f:03:e1:32:b4:
         4e:3e:8b:b7:62:15:a4:25:bd:ad:c6:67:9d:1a:11:ed:c3:9b:
         3e:84:ee:d3:b2:7c:95:83:45:ff:a2:f8:ed:c7:b9:0e:63:e9:
         8b:f4:c7:d7:a8:df:73:ef:f2:2a:85:1b:23:1d:a6:e7:1b:90:
         4f:9e:91:1a:f2:cb:b9:43:81:65:05:6c:32:53:e7:ba:91:d3:
         8b:c0:b9:5a:9d:ca:f1:43:2b:5a:75:14:f3:5a:65:a5:95:36:
         34:d0:23:74:c8:3a:e6:35:3e:73:46:d3:ca:e1:9c:cd:91:5d:
         9d:a7:4c:74:4b:aa:44:9b:ec:7d:ef:88:32:18:42:15:e9:2b:
         96:e7:9f:f0:ab:5f:f6:cf:e2:74:2e:ef:45:9f:9c:e5:7f:19:
         d3:15:9f:12:3d:27:95:e9:97:c3:94:44:fb:33:b6:97:9a:98:
         9d:f5:ae:85:72:b9:64:26:f1:d7:b1:8a:e7:c1:77:72:0c:60:
         69:ef:9b:09:5b:8f:33:50:99:8a:52:f5:79:ca:1a:65:c8:be:
         c5:ee:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:08 2024 by rpki-client on console-ams.rpki-client.org