Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f52162cd-abf2-3b48-b07d-aa904b66fbe5.roa
File:                     f52162cd-abf2-3b48-b07d-aa904b66fbe5.roa (raw, json)
Hash identifier:          wUPkiqRt5AX8FCBHpOcKFgZGjJhsF15otImRJdKfohA=
Subject key identifier:   AE:FB:7A:7F:99:75:08:AB:04:3E:C7:6C:02:AD:B3:7F:1E:D9:B5:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B96345E8A551874989B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f52162cd-abf2-3b48-b07d-aa904b66fbe5.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        151.204.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:96:34:5e:8a:55:18:74:98:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=71b30eac-7260-4001-83d2-771a8a2e8776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:75:a7:f2:86:51:40:0f:48:0e:59:ee:60:
                    0e:df:83:0d:b9:77:e2:2a:b5:9d:6f:42:ec:d0:c9:
                    61:57:b3:d1:56:50:6d:a3:0d:2e:8c:70:d7:ea:46:
                    53:71:a6:60:72:95:b7:02:d9:64:1c:b4:2a:c5:e1:
                    e3:05:d1:ed:9e:71:53:b3:d9:26:d3:88:26:78:77:
                    26:40:07:b0:f7:27:54:f8:60:c8:6e:03:da:48:35:
                    23:82:cc:03:9a:84:a9:fd:f5:59:62:2e:68:32:2e:
                    8f:db:64:1a:45:39:23:74:65:78:38:91:a0:5e:53:
                    d8:52:75:b6:38:02:a9:48:fd:82:4a:7f:8c:59:b9:
                    cf:84:2f:73:ac:f8:16:5b:5a:2e:65:64:c9:4c:a4:
                    b2:63:b3:f4:09:b8:4e:16:4c:28:be:7d:8b:22:24:
                    ff:3d:ba:b7:c4:c7:1c:3e:42:39:8d:ab:2b:05:cb:
                    95:89:41:13:52:df:06:45:f6:7e:af:9e:97:97:49:
                    6e:64:a1:29:39:64:7c:51:5b:22:52:52:e7:99:b4:
                    dd:c8:82:e6:b9:df:1a:f1:7a:af:46:f4:41:b3:da:
                    32:d9:86:62:23:5f:6c:26:03:bd:cc:6a:89:73:2e:
                    8c:31:6e:bf:a9:d5:d7:24:59:ff:87:c6:b4:4d:dc:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:7A:7F:99:75:08:AB:04:3E:C7:6C:02:AD:B3:7F:1E:D9:B5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f52162cd-abf2-3b48-b07d-aa904b66fbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.204.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:06:52:ee:df:42:a9:b1:3b:55:7a:0a:ce:56:26:a0:1a:
         0e:d9:50:4b:9b:da:39:bb:87:e8:84:b2:1a:7c:20:7f:c3:8a:
         f0:06:23:85:82:e3:ea:e0:e1:3d:a5:b5:19:2d:aa:69:77:01:
         0c:94:38:da:4d:df:0d:90:c4:e9:7b:3d:2a:ac:b1:5f:9d:84:
         33:6a:3b:e8:1f:67:58:dc:f9:bf:0b:e0:78:88:0a:58:c4:af:
         7f:68:09:a2:90:b9:57:84:d5:3a:95:ad:c8:4a:40:f5:22:cd:
         0d:e5:58:fe:4e:c8:e1:fb:0c:87:c9:c8:01:2f:cc:0d:76:01:
         0b:0f:10:7a:cb:0c:24:33:c6:32:ee:9e:1c:b6:a9:1a:11:0f:
         13:82:1c:a1:e2:43:85:9f:c8:d5:b5:a8:74:a4:6a:9e:a9:7e:
         3e:77:6c:b3:e6:5c:d7:3e:69:ad:8c:6a:ad:86:6d:15:cf:e6:
         ae:29:09:fe:eb:88:fa:e0:07:95:a9:71:f7:94:91:6b:0e:a9:
         43:34:b0:aa:e8:d1:27:9f:df:21:ea:d6:57:84:52:4a:cd:cd:
         e6:af:00:3d:c3:fd:00:cb:f6:09:b6:76:1c:41:4b:7e:de:e1:
         20:e7:64:2c:17:da:e3:93:b0:b3:bd:47:9a:5a:3e:23:3d:02:
         25:9f:0c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:58 2024 by rpki-client on console-ams.rpki-client.org