Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa392dff-53cc-34e4-ab23-266dfd2db282.roa
File:                     fa392dff-53cc-34e4-ab23-266dfd2db282.roa (raw, json)
Hash identifier:          qjqV4E2x8OfuBkOTwkq9CLP3P2iTCvnsjRh0HKTUXp4=
Subject key identifier:   95:9E:98:6E:1D:68:BF:8A:E8:1A:DA:5E:F3:86:4F:E4:7E:0F:F8:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B87061325345763E97580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa392dff-53cc-34e4-ab23-266dfd2db282.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        151.202.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:87:06:13:25:34:57:63:e9:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=b3b52c75-d8fa-47c9-8de7-252c473d019d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:d7:e5:09:10:1e:38:d8:47:76:79:03:a1:
                    a0:b2:4b:ae:c3:5a:69:bd:85:00:a6:ab:bd:96:a3:
                    0a:1a:71:29:f3:49:3c:9a:f1:88:e9:8c:80:60:1c:
                    b2:6a:22:2e:32:17:2a:f8:e2:9a:d5:da:49:1b:52:
                    d6:d0:ee:a7:f9:d2:60:26:eb:f5:df:82:ea:d6:6f:
                    b8:ee:4d:3d:c4:4c:46:89:d0:fd:ea:48:53:97:91:
                    f4:89:ba:67:43:9b:1a:b5:cf:2d:52:a8:2c:32:ab:
                    67:98:eb:b7:79:b8:19:ff:cf:fe:49:2a:6c:53:3a:
                    75:0e:5d:0a:75:6b:0e:39:99:ec:cd:93:8b:89:d9:
                    60:d7:34:ed:3c:39:22:85:41:9f:ac:15:8d:0f:ef:
                    54:6c:b9:17:1d:77:f6:14:9b:bf:74:bf:71:b4:e8:
                    e6:d6:75:e3:f8:e8:73:c7:b6:7e:1a:69:1e:23:a7:
                    56:93:67:d7:b6:e5:07:d5:63:32:5c:76:96:36:54:
                    16:ac:e0:8b:43:8f:15:9b:e3:05:85:14:be:b3:8c:
                    a1:bc:77:ac:cb:6e:e4:62:45:51:9b:68:25:b3:3f:
                    62:d5:e9:67:4d:29:5f:b2:b5:8a:0c:de:8a:54:a3:
                    49:68:9a:67:88:9c:8d:c2:d0:dd:c2:68:fb:8b:9d:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:98:6E:1D:68:BF:8A:E8:1A:DA:5E:F3:86:4F:E4:7E:0F:F8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa392dff-53cc-34e4-ab23-266dfd2db282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.202.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:d6:11:ea:d5:55:0e:a8:a7:4c:5e:6e:fb:ae:fc:81:9a:
         95:d0:74:d5:8a:22:dc:9f:af:16:18:8b:b1:8b:66:02:3d:45:
         91:68:da:f8:9f:54:0c:01:63:34:74:ac:89:f3:f6:1d:26:4b:
         e8:3c:6a:de:5c:ab:a8:a9:78:ad:1b:3d:92:b0:c6:cc:69:de:
         1b:97:ec:89:86:8a:d6:5c:8d:57:e8:b1:76:a9:f8:a5:9c:4e:
         4d:02:d2:64:fe:70:a8:f5:e7:a9:dd:7d:c9:cb:75:18:ed:b6:
         3c:19:2b:90:8f:0f:c8:17:eb:74:a5:67:ca:fa:37:e6:36:c4:
         ef:c0:af:72:df:1b:2f:a0:7a:72:5b:4d:c9:20:10:51:75:d4:
         47:db:cb:a9:ba:8d:7e:8c:fb:40:e3:75:9f:a0:c8:bf:49:5c:
         85:db:64:34:db:1b:95:64:24:2e:f3:b1:db:e8:4f:52:64:71:
         b8:4f:be:4f:a6:44:13:17:ee:8d:88:cb:38:5d:8b:b5:e4:f4:
         a3:b7:c8:72:eb:9d:0c:40:19:bb:6b:d9:36:88:76:4c:41:b0:
         7b:ca:0b:84:83:43:ff:bf:2d:78:e6:f9:ed:02:a4:40:4d:78:
         f9:89:45:b5:4b:a7:7f:85:ac:cc:94:7e:20:07:ae:d6:61:64:
         fa:56:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:00 2024 by rpki-client on console-ams.rpki-client.org