Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe258391-3d9a-3536-9708-5853c0a47de4.roa
File:                     fe258391-3d9a-3536-9708-5853c0a47de4.roa (raw, json)
Hash identifier:          +6jb/Qklfv2Oa+teGpZl3KnxXEvX8QqDcJ3WNxkqN6g=
Subject key identifier:   61:B2:08:8D:F0:5B:4A:62:18:CD:37:9A:96:7B:1E:1C:34:9C:46:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8F4137F6771BBE8CB300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe258391-3d9a-3536-9708-5853c0a47de4.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        70.16.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8f:41:37:f6:77:1b:be:8c:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=6d4bbe04-a92c-46e5-8846-dae28920c30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:e6:21:00:24:f7:97:d6:fc:a8:36:7d:9a:
                    90:0d:ed:72:b6:55:18:29:39:29:c5:8d:d3:a1:ed:
                    00:26:3f:2e:20:12:97:27:96:19:bf:f5:ad:37:db:
                    fe:5b:2a:73:b1:c1:df:46:6d:21:83:5e:e8:da:c4:
                    6a:d8:ef:41:c2:22:e5:d9:11:68:9c:b6:f3:b9:03:
                    a9:9c:22:02:68:9b:42:bb:ab:78:bc:db:e1:08:82:
                    30:2f:6e:d1:fc:37:75:22:f4:ba:e0:2c:33:cf:b6:
                    0e:40:f0:a8:e4:b1:ff:f9:71:df:f8:d1:ee:a0:0e:
                    f6:36:cf:56:28:4e:2e:45:53:c6:f0:28:f5:41:db:
                    1a:ae:0f:45:12:f3:41:4e:59:a7:77:61:5e:98:3b:
                    95:59:10:be:cf:30:ca:7b:92:6d:29:1e:5d:fb:d1:
                    db:f4:ba:d7:a5:ce:5b:e4:69:d3:fe:b2:1f:d5:e2:
                    29:59:7a:a9:31:b5:e5:19:08:8f:d4:ac:7c:75:27:
                    45:ae:6b:d2:de:c5:48:8a:e8:84:eb:f9:85:98:ff:
                    34:0b:4c:53:c2:6c:07:fb:be:a4:38:6a:b3:b5:81:
                    b9:20:52:65:c7:1e:0a:f6:6b:df:ad:27:e2:77:1d:
                    13:66:e2:64:fb:c0:c4:b4:f0:8b:e6:e8:c0:12:be:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B2:08:8D:F0:5B:4A:62:18:CD:37:9A:96:7B:1E:1C:34:9C:46:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe258391-3d9a-3536-9708-5853c0a47de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.16.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:ff:bf:7c:48:ae:ea:f4:a9:c2:be:98:71:ef:83:88:b1:
         bd:47:f8:ac:01:f8:f1:d2:88:cf:23:80:b1:2e:dd:2a:b5:ea:
         83:64:ee:07:7f:57:ac:68:53:c6:5f:43:c4:55:82:dc:70:b3:
         c4:3e:46:ba:98:01:46:80:8a:44:8b:98:8d:30:f8:53:a9:60:
         d1:e5:2f:9f:a1:7a:af:5f:1d:bc:d2:a0:af:74:59:1c:b3:5f:
         c2:e4:32:32:fc:67:5e:fe:05:9b:8a:a3:d8:8b:28:d0:43:3b:
         58:70:5c:44:6e:7c:6b:c6:3d:b8:77:eb:18:b0:66:5c:3e:12:
         c0:06:02:0f:78:6c:c6:f4:9c:04:6f:73:8b:57:0d:bc:2d:7e:
         e9:f8:a5:95:72:96:ca:f8:eb:15:59:a8:61:31:69:54:37:10:
         06:ad:e6:bf:9d:12:ff:ee:c1:56:26:0d:47:ee:35:7b:88:07:
         7b:ff:b4:5e:3a:62:94:28:53:fc:c2:d2:cd:05:bd:bb:e0:e9:
         76:33:78:22:e1:8d:73:da:93:d7:65:de:91:7a:67:87:40:66:
         57:19:53:15:9e:7f:97:cf:81:48:c9:f0:e0:d8:97:6a:f1:1e:
         52:6a:c7:9e:f3:ed:69:9d:ac:f3:94:e4:cf:7c:9e:6d:be:34:
         40:4a:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:04 2024 by rpki-client on console-fra.rpki-client.org