Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa
File:                     0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa (raw, json)
Hash identifier:          +t5nVaU3qA1FjX4efrddkti9OR3yRfqisriEcW0HEZo=
Subject key identifier:   7A:F4:63:9C:26:19:6B:69:65:47:F7:F7:B1:BD:14:D0:C0:EB:10:3C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453CDD594040A9EB0CB0D84500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        154.5.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:59:40:40:a9:eb:0c:b0:d8:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=49060da6-01d6-4687-8691-2286fffdacbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:c1:21:2a:33:35:4f:73:ab:3c:f0:58:c4:
                    d6:cc:84:14:00:cd:b2:88:13:d8:06:3d:12:78:2d:
                    c1:92:9f:4a:2e:65:20:c9:ff:11:bf:2d:03:53:70:
                    3f:c9:0f:65:a7:1d:65:5a:36:3f:51:97:80:b0:54:
                    ee:b2:24:e9:35:a6:52:ab:be:62:9a:f1:e2:03:bb:
                    15:b7:d7:2e:24:4b:92:37:68:40:ce:09:31:ed:c5:
                    2c:4b:00:3c:14:21:d0:71:90:47:18:73:94:76:10:
                    eb:14:46:60:1e:43:32:e9:68:43:16:ee:9a:0d:2c:
                    0b:a5:4c:45:a1:27:be:b9:e8:0b:4f:2e:f9:74:d9:
                    67:da:b2:1e:49:92:e0:b2:f5:fe:34:7e:12:6e:a8:
                    86:9f:ba:d1:20:72:9e:76:2e:57:0b:ca:36:b8:d3:
                    a9:9c:04:2c:9a:5f:45:60:bd:6f:5c:56:39:fc:bc:
                    c8:8d:ce:d8:42:77:a8:53:be:52:0d:30:67:15:cc:
                    6c:01:24:13:14:7c:ec:0b:18:02:c3:96:50:8f:26:
                    5b:b1:98:a2:8c:f8:53:e2:4f:cd:68:ec:f0:3b:cd:
                    8d:ab:c1:4c:d5:a3:6d:01:dc:13:4f:c0:68:cf:ca:
                    39:f3:e8:ac:ea:87:cb:95:57:d2:64:4a:be:3c:67:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F4:63:9C:26:19:6B:69:65:47:F7:F7:B1:BD:14:D0:C0:EB:10:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:73:c1:51:82:1f:5e:72:27:12:67:d9:99:e6:43:f3:4b:1c:
         1b:9b:a6:11:be:b4:72:9f:00:96:12:25:15:38:65:a1:d6:26:
         be:1f:a5:8e:df:f4:40:43:aa:09:48:a5:cc:c4:df:9f:da:e6:
         eb:a5:c6:21:6e:79:d4:ff:9c:0c:eb:f9:d9:9e:55:1a:2c:81:
         62:63:90:7c:96:28:58:24:89:c7:76:42:a5:ef:94:ad:be:c6:
         b1:90:d9:a2:43:50:04:e3:56:f6:dc:2e:c9:a5:80:e7:08:15:
         fc:21:df:a4:b7:87:a6:c3:0e:04:0b:5b:e2:25:cd:f8:a2:95:
         0d:85:d7:25:9d:72:6d:3d:8e:c3:de:e2:02:62:ca:6e:19:a7:
         4d:2f:e7:6c:c4:f8:0c:91:b1:7c:cb:90:8f:43:1e:f3:3f:e0:
         7e:8f:4a:62:b0:a7:3e:26:74:37:e1:45:ff:f8:a7:c3:82:06:
         de:7a:ce:4d:d6:c9:35:2d:4c:ba:63:7f:66:b4:e7:f8:58:c5:
         7b:95:f1:7f:98:57:44:9d:9a:70:c3:98:30:e8:e0:8c:95:46:
         1f:54:bc:b2:a0:85:20:5b:62:7b:f5:50:80:8f:25:04:d3:a5:
         a3:e0:9c:d7:ab:66:de:0a:1c:83:d2:e9:64:3f:26:95:be:92:
         f7:fb:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:18 2024 by rpki-client on console-ams.rpki-client.org