Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa
File:                     4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa (raw, json)
Hash identifier:          C89nbRGrOwz5VxrPPDEw34mUhQz1+37/m0l/qLwLjA8=
Subject key identifier:   E2:47:1A:1A:D5:50:D2:B9:09:59:64:94:33:A5:6E:7E:40:D3:F7:34
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F43285845FAB3FB432F6A4BE323E1ACF0
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa
Signing time:             Fri 24 May 2024 13:00:34 +0000
ROA not before:           Fri 24 May 2024 13:00:34 +0000
ROA not after:            Thu 22 Aug 2024 13:00:34 +0000
asID:                     399244
IP address blocks:        170.205.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:b3:fb:43:2f:6a:4b:e3:23:e1:ac:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: May 24 13:00:34 2024 GMT
            Not After : Aug 22 13:00:34 2024 GMT
        Subject: CN=faf9d4d0-7610-401f-879b-92405be0e251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:ac:c2:23:f7:4e:a4:96:9c:1a:a4:ac:22:
                    4e:1c:19:c8:9e:d2:8c:5c:5a:8f:a1:9b:51:e0:a0:
                    88:84:6b:7b:ff:82:34:af:13:e7:10:d2:b4:10:28:
                    b7:31:95:05:10:33:11:b5:dc:e4:70:14:d6:eb:a3:
                    2e:b7:52:11:f8:25:d9:0b:26:60:bc:87:ce:56:e7:
                    97:97:63:80:8e:ed:21:3d:65:58:07:e7:fa:6d:65:
                    eb:76:28:71:d6:e7:25:98:f3:df:d5:56:22:a9:62:
                    a4:c9:2c:f4:97:8f:c9:6b:6f:b5:5d:a0:06:d4:1d:
                    d7:fe:21:b2:c9:a2:c4:c0:58:fd:66:f8:f7:6c:e0:
                    d9:2a:fa:42:39:19:1d:61:88:c3:d2:f1:55:09:7a:
                    08:d5:b6:02:bb:4f:69:fc:69:8b:8d:86:25:86:74:
                    05:83:c7:09:60:06:76:eb:4f:3a:7d:6e:1f:19:82:
                    d4:60:51:af:3b:64:0e:b7:40:c0:57:13:68:f2:08:
                    43:87:5b:ee:83:d7:c9:e1:4b:e1:05:75:3d:77:e5:
                    b9:50:6d:16:92:73:c5:8a:06:34:68:10:b8:8c:21:
                    5e:3b:92:07:0c:5e:50:81:a0:4d:3c:5c:e8:18:e1:
                    22:23:41:ff:5d:96:5d:16:06:f3:fa:82:0c:2e:a8:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:47:1A:1A:D5:50:D2:B9:09:59:64:94:33:A5:6E:7E:40:D3:F7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:c9:99:80:ff:81:01:eb:a2:4b:61:00:00:65:4e:95:0c:
         2b:42:7b:4d:96:33:1a:11:05:a7:3d:7b:e5:eb:02:b6:62:05:
         8f:ce:5a:ca:67:fa:9a:64:28:25:7a:c5:20:4d:ab:bf:f3:68:
         cf:bc:36:51:10:af:c4:a3:d2:44:78:e7:30:92:80:26:98:95:
         56:b0:dc:dd:59:54:b7:9d:8c:65:84:8d:ad:3c:5f:3a:ae:d1:
         74:0a:ab:f8:99:6f:9e:b7:6b:2a:2c:0f:2f:6e:fd:5d:71:ef:
         ea:fc:dc:96:e9:9e:d6:c3:4c:74:b3:8f:61:71:b0:4a:b9:c0:
         4e:05:a4:87:af:0d:23:84:ac:15:d7:6e:70:79:ca:25:af:15:
         f4:d3:47:f3:9a:89:4b:d1:f2:46:9b:41:01:86:f8:65:8d:bc:
         43:bd:69:b7:69:6e:8f:6d:03:35:2f:d9:84:25:a1:44:24:bf:
         2a:75:bd:a7:1d:5b:a2:e2:1d:40:db:66:3b:44:a4:59:75:f9:
         24:77:da:01:9c:97:b7:b5:0a:4b:82:42:10:1b:b9:ef:71:d1:
         7a:a1:f4:bf:3a:27:06:65:64:b4:b0:88:66:66:87:11:d2:16:
         c0:42:e1:26:d3:43:74:dc:08:8d:49:c4:c3:5c:72:03:62:2a:
         ec:70:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:52:00 2024 by rpki-client on console-fra.rpki-client.org