Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
File:                     7750e7a6-bfbf-32e2-98ca-db25150e8279.roa (raw, json)
Hash identifier:          mD4vAdXceK7afAPhYE66FxxXa+4xRf7h/VqyCS1ksrw=
Subject key identifier:   8A:AD:F1:97:DA:39:A2:02:D8:12:9E:F9:98:22:08:A7:79:83:0A:B4
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845D933B01602615684E61C2140
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     62651
IP address blocks:        216.131.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:b0:16:02:61:56:84:e6:1c:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=06c96b70-09be-427f-982a-ccacf570564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:e9:49:10:d9:3f:b2:12:43:fe:75:f3:c6:
                    05:37:ba:c3:23:49:9d:17:46:b6:a4:47:cc:86:a4:
                    e8:e5:28:c3:9c:44:39:85:d0:a0:45:d0:97:de:35:
                    e0:50:11:97:dc:cb:59:35:2a:f1:ec:d1:cd:9e:25:
                    0e:35:d9:0f:d9:da:c0:52:c2:7a:e9:ef:15:29:85:
                    92:95:b5:55:e0:fd:da:3a:1f:2e:e9:74:0e:c2:8c:
                    6b:8a:68:e1:08:90:c1:5b:4d:b6:ea:c2:94:36:d2:
                    aa:ca:09:e5:cb:61:36:ff:17:05:cc:7b:cd:40:a0:
                    ac:3d:cc:2a:14:f0:80:80:28:86:62:f5:cb:03:17:
                    4f:f9:e9:48:8c:54:2f:94:69:af:e0:7a:16:e8:b5:
                    fb:63:f4:d1:18:22:97:94:ef:c4:67:6b:d4:77:c3:
                    1a:8d:8e:ad:8c:92:db:a2:29:1b:34:97:39:76:ac:
                    26:83:21:6c:d8:4c:cd:6f:11:b6:db:82:51:b8:b2:
                    37:7c:c9:3f:8e:21:a2:21:0f:73:8e:66:8f:b6:15:
                    83:0b:7d:ad:50:cc:ec:fd:7a:9c:af:95:3c:03:bf:
                    b5:fc:3d:b1:30:31:88:b2:e6:c4:95:07:25:8a:02:
                    c0:5e:72:95:b6:17:b7:2b:bf:37:17:c7:c3:92:70:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:F1:97:DA:39:A2:02:D8:12:9E:F9:98:22:08:A7:79:83:0A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:53:ec:74:d5:7c:63:e3:9c:fb:ea:c8:a0:f6:cd:ec:11:21:
         ef:59:71:b3:85:49:fd:80:17:61:a3:4c:6d:15:34:2d:66:b9:
         28:2f:02:6b:52:f0:55:23:98:54:34:0e:96:44:31:be:ba:d1:
         d5:87:45:ef:eb:80:5f:ac:85:44:d9:51:95:3c:11:f9:6d:6c:
         c6:f6:34:0f:ac:7e:bb:46:81:18:c3:bd:96:0c:96:c4:3c:5b:
         2a:2c:71:17:cf:03:00:98:de:57:fa:3e:6e:d3:26:3c:0f:1e:
         a6:52:22:2a:fa:c3:79:10:8f:d2:20:35:0c:dd:d6:f9:02:b1:
         62:ef:bc:26:4a:54:31:4f:33:0d:1b:86:d9:58:ef:54:77:f3:
         7f:c5:a4:65:73:3e:43:19:bf:0f:ec:fe:eb:7f:4b:dd:c5:52:
         21:c0:12:48:78:b7:ea:c8:70:ab:39:d5:21:06:18:da:d9:d9:
         6c:de:5f:d9:4d:84:9c:c5:29:9c:87:66:6d:10:45:38:de:86:
         fb:cc:a3:a1:95:a8:20:c0:e9:83:14:a9:76:c7:0d:36:11:09:
         04:db:92:2c:75:15:93:77:78:0d:e9:3f:22:21:ba:53:f0:eb:
         c1:dd:42:9d:fe:fa:93:58:1a:97:9d:fb:fd:6d:f4:5f:df:d4:
         c7:78:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 11:32:19 2024 by rpki-client on console-fra.rpki-client.org