Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4423e700-aaba-3620-b9fd-09f5af6368a6.roa
File:                     4423e700-aaba-3620-b9fd-09f5af6368a6.roa (raw, json)
Hash identifier:          L6iTQPOcVBhfgpAB5fFIChW0wsdXxn+dU2ZhJdpDlpg=
Subject key identifier:   6E:5E:45:EC:29:32:2D:BF:8E:0E:67:E8:A6:B0:30:F2:93:97:A9:65
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845C179145CEDFC0747BB23D900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4423e700-aaba-3620-b9fd-09f5af6368a6.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     852
IP address blocks:        161.184.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:14:5c:ed:fc:07:47:bb:23:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=9b2c724b-4bd3-4c90-aab5-a6a7a9ad3d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6e:75:cf:63:03:ab:be:c3:3b:ff:9c:80:57:
                    0b:06:bc:af:fe:11:ab:cf:04:24:51:b7:90:a3:2f:
                    c8:cc:84:ae:d7:ad:fa:5b:a7:45:f9:b1:d7:5c:40:
                    a3:d7:95:8d:4a:ca:18:b8:96:7e:48:e1:8d:0a:d1:
                    fb:aa:af:06:de:16:69:33:78:3e:cb:a8:88:92:68:
                    e3:d5:9a:91:7c:d0:97:1b:60:12:17:aa:1f:31:26:
                    5f:9c:28:73:bb:71:2b:e7:f4:ac:8a:83:9d:ec:48:
                    91:8c:e1:0c:7e:14:f1:b9:e5:57:f7:df:ea:2c:8c:
                    ab:60:c4:a9:ea:c5:9b:69:01:4f:de:08:d5:2c:0e:
                    be:37:de:d9:1a:b0:8f:8a:ac:e8:f3:b6:a5:8c:96:
                    12:ec:4f:5e:96:91:06:8b:51:29:bc:8d:e4:f0:66:
                    35:6b:99:05:71:ec:6b:95:8e:36:45:64:b2:55:55:
                    3e:6f:49:f6:f2:e3:6a:33:cd:de:27:6f:5a:c3:77:
                    1c:72:8b:3c:2b:82:df:24:b5:18:1a:54:ff:a9:ca:
                    e4:aa:8a:09:70:a6:87:db:03:9d:49:d9:fd:46:d7:
                    95:bf:79:33:aa:2a:a4:07:28:9c:d3:b9:c6:73:97:
                    1d:e9:72:1a:d1:db:46:77:18:f4:0f:00:67:24:ff:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:45:EC:29:32:2D:BF:8E:0E:67:E8:A6:B0:30:F2:93:97:A9:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4423e700-aaba-3620-b9fd-09f5af6368a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.184.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:d3:81:54:11:47:50:5a:9c:1e:ee:2c:21:3f:6d:f5:eb:c4:
         29:be:42:1c:62:e0:8e:74:05:a5:81:cd:37:0d:8d:f8:54:f8:
         8a:85:8f:56:16:b4:a2:70:ab:fe:4c:25:5e:aa:59:0d:bc:c8:
         24:70:be:3d:57:95:6c:d3:05:a8:ad:f5:b3:c4:09:b0:b4:9b:
         32:aa:af:b2:f9:a4:06:5d:bc:4b:7c:04:8f:f7:a8:79:05:7d:
         47:98:1f:9a:f6:7b:68:0e:6d:84:74:f9:03:56:5d:02:6c:a7:
         22:5c:dd:94:dd:3a:6a:6a:e1:80:e3:15:65:b5:13:1a:ec:1b:
         c1:c2:51:91:c0:73:c2:67:fb:fe:e8:ee:77:af:e3:b3:f4:b6:
         11:f8:63:58:fa:90:aa:c4:5b:b6:0e:ea:cb:73:4c:77:30:27:
         b3:a2:a8:42:58:a3:88:4e:cf:84:0a:f7:58:f8:14:97:71:b7:
         47:ef:82:f1:e2:9b:94:b9:f9:fd:1f:cd:5f:e0:f2:e9:51:e3:
         b6:45:3a:1b:30:e6:d8:5a:90:a5:f2:dc:1e:6a:49:56:12:35:
         c2:df:e6:e4:5a:81:9c:3b:9b:20:9c:e8:2c:32:75:6d:98:94:
         7c:ad:fc:65:b6:c7:99:39:74:f1:d1:de:64:04:7b:ed:a7:4c:
         62:a9:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:03 2024 by rpki-client on console-fra.rpki-client.org