Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fadf5763-ad1a-33fa-b59f-332991248b53.roa
File:                     fadf5763-ad1a-33fa-b59f-332991248b53.roa (raw, json)
Hash identifier:          mkoFyiljQ9Na+jffosI5KQPmVRtAAis8Bc6WeMv8jvY=
Subject key identifier:   18:65:B8:18:6B:24:38:D5:1C:9A:21:6A:DC:ED:20:88:D1:02:E8:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD1656D7E88D3DBFD3588
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fadf5763-ad1a-33fa-b59f-332991248b53.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        209.158.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d1:65:6d:7e:88:d3:db:fd:35:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=f71b593a-de14-4173-9c61-d581616b9bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:a3:d6:76:4c:e0:47:f1:af:43:23:18:44:
                    b8:79:d6:bf:d8:de:54:4d:b1:ff:d0:cb:1a:3c:bd:
                    da:0c:2d:63:28:0b:5c:c7:81:53:49:36:07:11:2c:
                    d3:fd:7d:2e:ee:1e:2c:fa:17:83:a3:54:01:3b:64:
                    8f:68:da:f1:f0:8d:0d:2d:de:76:de:3d:e1:c5:a3:
                    f7:5f:a7:c8:1f:b4:e0:65:e2:1d:0f:76:fe:7a:e8:
                    d4:32:24:56:4d:71:a3:b4:4c:d7:8b:23:34:0f:31:
                    b1:c3:76:d5:3f:ae:ed:f0:a3:94:87:89:37:18:9e:
                    35:9c:4d:36:53:13:f2:be:9e:02:2c:9d:98:85:fc:
                    80:2d:9f:0c:1d:a7:74:51:9a:d9:e7:b7:c3:ba:0b:
                    02:7a:5d:69:24:fd:6c:7d:f5:bd:9e:1c:01:d5:d4:
                    a8:7d:2e:e8:bb:17:3d:ad:d4:5d:47:c7:1d:c9:2c:
                    c4:65:2a:d5:ee:2a:b9:ae:e3:ca:42:bc:81:eb:2e:
                    f1:5c:b6:cb:1a:44:c8:f9:91:3b:0d:7f:5e:72:fd:
                    3e:c0:7b:83:9c:3b:31:ed:ee:c0:4a:0e:ea:fe:3a:
                    7e:81:b3:a5:1e:da:90:bc:45:69:ed:87:09:b1:bb:
                    25:8d:34:74:6f:fc:5a:bd:38:ed:18:90:9e:8b:8d:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:65:B8:18:6B:24:38:D5:1C:9A:21:6A:DC:ED:20:88:D1:02:E8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fadf5763-ad1a-33fa-b59f-332991248b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.158.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a9:e6:9a:dc:71:ae:36:0a:41:af:b9:6f:35:83:76:6a:9e:
         af:65:da:29:6d:07:a1:23:b9:ca:21:47:97:59:b5:76:83:e4:
         0a:41:73:01:12:26:fa:0c:c2:90:59:1b:84:ca:9f:9c:08:dd:
         6a:c8:c3:9b:43:d3:eb:fb:4e:ba:87:eb:fc:0a:e7:00:84:b1:
         30:a2:89:9c:93:5b:35:e1:68:39:f1:d3:7e:73:b0:45:86:ac:
         11:d7:cc:06:fc:b7:3f:14:0d:0e:bf:64:96:80:6d:ae:af:84:
         56:7b:7c:4e:e7:73:62:c8:67:c7:0c:78:45:57:2a:e2:45:08:
         c4:49:f9:e2:b6:bd:5c:17:50:a6:39:d2:bc:3c:4e:37:92:6f:
         3b:99:7c:74:5f:c2:8a:2a:e7:c9:38:67:ee:31:6d:31:a9:01:
         b9:95:d1:8b:2e:ba:60:45:10:f0:c8:b0:b4:81:c8:48:c2:6f:
         9b:3b:e2:98:65:48:af:81:56:7b:67:6a:76:bb:ed:f4:d9:92:
         8c:fb:ae:c6:11:6b:af:f4:36:9c:72:55:42:50:ea:f1:0c:b5:
         b0:9b:67:96:7e:d5:fe:03:ec:13:d4:5d:ff:9b:98:a0:d5:70:
         61:dd:8e:9f:29:fd:fb:d8:aa:fa:2d:9d:5d:27:9d:30:7e:8f:
         e2:5d:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:11:44 2024 by rpki-client on console-fra.rpki-client.org