Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdb3b0ae-2639-3003-9246-3a97e19e3df2.roa
File:                     fdb3b0ae-2639-3003-9246-3a97e19e3df2.roa (raw, json)
Hash identifier:          dBYeQHwZsgWh3/b4BgHGQf0ylsJ8jdBmPwfYgbsB4N0=
Subject key identifier:   D3:24:77:3D:99:CA:8F:3D:A2:F6:4F:5F:5E:F8:EF:62:61:53:13:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD8CFEA1A5DB4B9D98D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdb3b0ae-2639-3003-9246-3a97e19e3df2.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        141.150.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d8:cf:ea:1a:5d:b4:b9:d9:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=8d3eb7b3-2641-45f0-bab9-9223c616a705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:36:9d:97:af:b2:17:a3:b9:9a:58:fb:3a:
                    d1:97:0b:01:0f:11:ca:a0:db:82:e0:2c:ce:c4:52:
                    d7:3b:d6:e6:39:c3:57:d9:a3:8f:13:d3:f9:59:22:
                    e0:e1:1e:86:d6:34:02:4e:1d:b2:d9:4f:c5:dc:da:
                    4a:e6:3d:24:4f:48:4f:fc:da:be:32:72:3c:f3:b3:
                    d1:b5:6d:4a:f5:dc:4c:7a:db:8c:1e:f6:0d:7c:65:
                    1b:05:46:e5:78:00:da:8e:5c:b5:46:6e:f4:fb:de:
                    21:8d:91:e9:d0:df:bd:fe:a0:05:fb:d2:d4:bf:73:
                    d1:46:11:56:66:36:b5:67:a6:9e:f9:14:64:bb:73:
                    85:49:1a:36:1e:77:e6:f0:c2:0c:c3:a8:bf:9f:65:
                    fe:d4:43:40:e5:c6:f6:02:2d:2b:42:83:0d:79:06:
                    b7:22:9f:35:81:ce:42:21:17:62:b0:a4:a5:7a:83:
                    24:57:90:37:b5:1e:7d:da:a6:df:1f:8d:47:77:08:
                    f9:a0:07:8a:be:5d:ab:72:a6:37:31:ac:fe:51:d3:
                    fc:a5:87:2a:b3:20:67:35:de:6c:6a:19:50:33:3d:
                    05:da:cd:9d:89:58:d0:56:9d:36:6c:49:bd:ae:fb:
                    4e:68:fa:7f:02:73:6d:82:b7:69:94:3d:b8:ba:3a:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:77:3D:99:CA:8F:3D:A2:F6:4F:5F:5E:F8:EF:62:61:53:13:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdb3b0ae-2639-3003-9246-3a97e19e3df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:37:21:28:9f:b8:af:66:88:6a:bb:ff:bc:3c:18:b9:80:
         32:31:6e:8c:76:a5:0a:92:c2:7f:96:3b:76:d5:50:7b:23:fc:
         d1:62:e8:01:06:61:6e:43:ce:f0:bc:8e:99:5d:07:bc:77:46:
         c7:f9:97:59:0f:f9:c2:7a:b0:e5:25:53:54:ee:d4:38:de:c6:
         ca:54:fa:0e:13:33:1b:fc:bc:85:f7:da:50:3d:e4:28:4b:93:
         6a:f2:32:59:89:bd:2a:c9:83:d7:04:99:d5:c7:86:a1:c4:45:
         a9:42:08:dc:73:fb:49:4b:54:67:8a:bd:4b:12:fd:2a:3b:94:
         17:a1:20:c5:f5:ca:1f:2d:46:af:ce:75:1b:e5:d2:c2:ea:b0:
         c6:52:62:71:29:68:a2:b1:28:93:55:32:f8:92:11:3d:ca:92:
         f1:b4:3d:fb:ec:0e:b4:a5:08:ac:e9:a6:69:1f:ef:49:f5:1d:
         bb:63:4a:a7:16:2c:9c:a3:ba:b1:b7:bb:d5:74:51:b1:3b:29:
         e9:1b:1e:28:80:df:7e:ce:94:94:19:3b:37:ec:ab:96:1f:f0:
         76:ba:8f:1e:fd:b2:af:9f:ba:0f:30:5f:2b:4c:ac:e7:95:a4:
         f3:09:3e:67:c7:47:45:61:2a:b5:21:34:89:84:7e:dd:10:d3:
         51:41:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:32 2024 by rpki-client on console-fra.rpki-client.org