Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/4a509c65-019a-32dc-98ff-83abb09bc6a2.roa
File:                     4a509c65-019a-32dc-98ff-83abb09bc6a2.roa (raw, json)
Hash identifier:          ZzTMLHtTkcq5IOSm/MevGKT7vvSHQrFHnPiAsrd/Sgc=
Subject key identifier:   E3:60:76:99:79:3F:41:D0:F5:FC:31:64:93:E9:48:06:48:87:6E:AB
Certificate issuer:       /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial:       010D0C9F43285845BA7E36742D9346BF78B78A40
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/4a509c65-019a-32dc-98ff-83abb09bc6a2.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     0
IP address blocks:        149.112.4.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:36:74:2d:93:46:bf:78:b7:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=2d4d4c5b-9f03-4736-965f-210b0af6ffc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:ae:0d:fe:8e:ac:79:83:67:75:e8:98:4e:
                    9c:c9:b4:e3:c8:8a:58:ee:7e:25:c2:d2:da:1f:4f:
                    66:4c:7a:2e:80:dc:3b:96:63:b7:e6:33:b3:59:81:
                    59:3b:43:b3:c8:52:dd:31:73:09:51:5b:99:38:64:
                    c5:93:11:67:83:fc:92:87:ce:7c:4f:03:73:8d:ea:
                    aa:ee:ec:7d:d4:a7:36:3d:c6:ef:94:bd:fc:36:10:
                    8d:76:1c:be:d6:48:36:bd:5e:72:76:77:72:3b:8e:
                    5c:b3:e5:bd:56:40:80:bc:37:0c:ee:82:bb:d6:65:
                    59:52:21:2e:5e:9d:c3:c0:0f:42:d6:c6:06:56:b8:
                    29:c0:b7:0a:68:e6:f0:86:1d:1d:8c:ce:7e:1b:c4:
                    9e:6f:b9:6d:9e:36:4a:3a:b7:81:52:79:b8:d4:8c:
                    40:a5:59:38:73:b5:7d:86:c0:d4:d2:1f:0b:7b:58:
                    8f:7b:00:43:9e:c7:bf:13:d8:d7:a1:d6:d3:9e:00:
                    68:4e:db:95:a5:77:14:2e:51:a3:5e:6f:2c:64:22:
                    62:38:2f:04:73:55:6c:70:91:b4:9e:ad:85:78:3c:
                    2a:92:6d:05:a1:40:eb:e3:81:96:43:6b:0c:4c:ba:
                    b9:1e:43:0f:73:04:77:f2:71:01:a5:08:51:d5:01:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:76:99:79:3F:41:D0:F5:FC:31:64:93:E9:48:06:48:87:6E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/4a509c65-019a-32dc-98ff-83abb09bc6a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:40:79:fb:70:30:a0:5e:0d:0d:13:7a:e9:c5:4b:17:2c:
         ff:a6:43:1a:b1:65:70:24:4d:7e:5c:4b:7e:35:50:5e:e7:da:
         81:92:92:3f:8d:d9:4b:20:fb:a7:ed:b6:1d:c6:3f:8a:61:1a:
         9d:b6:91:cf:ab:92:7a:9e:08:41:2b:f2:2c:67:b8:7b:ae:25:
         d0:be:61:9a:a2:dd:1f:9f:7f:20:0b:f3:7b:1d:61:d0:fb:39:
         8b:14:a8:14:64:db:c3:9a:66:a3:72:9a:f4:8b:1e:32:ca:ef:
         e1:2d:4b:5f:a6:38:3e:7c:79:bb:74:60:00:ae:ff:8c:38:36:
         dd:2f:61:de:d0:9a:53:12:c0:6d:f9:12:a6:d0:6f:99:38:ff:
         a5:31:67:82:dd:11:98:1d:bb:ca:e6:bb:a8:47:9c:12:bc:34:
         d6:d5:23:ae:4a:81:c6:79:77:d8:5f:31:f7:e8:2a:5e:93:5b:
         0f:35:0f:2d:1e:73:18:cb:bd:eb:70:d3:be:a9:4c:e0:7f:cf:
         15:63:f7:5d:53:78:03:48:e8:88:88:17:39:24:3e:44:9b:ac:
         cd:75:ca:ff:4a:af:19:90:3e:4a:42:8b:7e:c1:4e:d5:7d:8c:
         6b:d4:02:43:5a:03:8a:81:a8:9c:75:f0:a5:bc:ed:be:d2:f1:
         aa:41:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:36:10 2024 by rpki-client on console-fra.rpki-client.org