Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8c4027a-e0df-3749-bfe7-4343e8475ce1.roa
File:                     f8c4027a-e0df-3749-bfe7-4343e8475ce1.roa (raw, json)
Hash identifier:          4a/A4SbqTEPlX+ay44Hj+NnQwACKeFQRsGN7XMXq6Qc=
Subject key identifier:   BC:D3:F5:0A:6F:1E:5D:0D:3E:A5:66:FA:CD:F4:02:8C:81:7D:3C:D7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE0FF66CEFD9984F18280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8c4027a-e0df-3749-bfe7-4343e8475ce1.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        74.103.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e0:ff:66:ce:fd:99:84:f1:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=8ea43b3e-61d0-4c91-8b24-f883dbcabcb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:38:d8:74:e6:9b:b8:0c:bc:02:4c:1b:f3:
                    4e:eb:3e:26:40:c4:06:bd:43:86:05:da:a6:20:3d:
                    a9:07:a9:c6:9c:aa:9c:b2:38:aa:78:e2:ee:f4:0b:
                    ff:39:ad:d4:61:c2:45:bb:0b:07:02:94:1a:1a:1f:
                    c2:89:58:3c:09:d8:bd:48:a3:c4:37:16:73:54:83:
                    96:b9:04:ef:69:1e:3f:26:ed:32:09:a0:c4:18:72:
                    bb:88:f3:02:af:d6:ca:83:08:34:fe:70:1f:0c:ec:
                    77:1d:22:04:e8:20:7e:16:1c:f3:f6:ea:f4:57:22:
                    ff:d3:cf:9d:2e:c0:22:72:0a:b7:57:ed:35:ef:5c:
                    3f:21:77:fd:cb:de:19:f5:e6:2b:f7:f7:1c:8a:b4:
                    23:28:5e:b1:c3:23:6f:b8:d1:1a:93:8a:8b:9a:6a:
                    78:4e:37:68:ec:32:d5:ac:7a:a6:0e:2b:6d:7a:6b:
                    63:71:e1:94:33:12:86:ad:74:ce:d5:9b:3d:19:b1:
                    e6:ed:2b:06:c6:56:1c:d8:22:b9:88:c5:87:0a:00:
                    b4:0b:59:20:38:45:45:62:83:89:ba:e9:8d:28:ac:
                    4d:3e:9c:04:99:69:06:bb:55:df:93:cf:bd:2a:f1:
                    bd:2d:4b:76:dd:62:41:20:49:0f:72:10:46:bd:27:
                    c8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:F5:0A:6F:1E:5D:0D:3E:A5:66:FA:CD:F4:02:8C:81:7D:3C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8c4027a-e0df-3749-bfe7-4343e8475ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.103.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:13:ff:34:bd:30:1e:84:54:cb:ff:fa:21:4f:97:0d:a0:
         c0:da:2a:66:1a:59:dc:fa:56:90:9b:01:9c:9d:46:a1:5e:b5:
         ad:2b:28:45:11:8d:36:11:24:db:45:bd:54:26:1b:d9:bf:11:
         bf:15:b1:a4:e1:fd:d5:e2:72:0e:dd:db:9d:b3:be:a1:16:6c:
         10:9d:5f:51:d3:70:09:78:cd:68:51:cb:42:92:59:c2:d1:73:
         17:46:b1:5f:fa:aa:c5:90:af:bc:4b:91:e6:cf:a8:6e:d1:ea:
         09:f4:dc:df:ab:77:49:0c:41:03:e8:d6:f9:ee:88:bc:23:8c:
         77:aa:88:cc:dd:fc:bb:98:63:00:51:5a:32:a9:e1:31:f8:e8:
         da:f5:b8:4c:a7:4f:f7:16:c1:c1:95:f1:17:f3:1f:25:09:b2:
         be:ed:39:e9:7e:ee:95:57:f6:fd:9c:b4:44:ca:f5:5f:e7:cc:
         46:a0:22:c5:44:e3:c7:02:47:8b:f8:09:e3:7a:46:f1:02:db:
         55:e7:fd:30:9e:ea:64:24:e5:a8:5b:b0:30:60:4a:e3:8b:29:
         19:95:f6:1a:e2:db:eb:0e:06:4e:e3:ba:0d:6b:1c:70:09:5d:
         4b:e8:cd:b1:f5:3d:37:a3:7a:8c:83:2c:16:fa:78:83:9c:a8:
         b9:60:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:32 2024 by rpki-client on console-fra.rpki-client.org