Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/566f4c80-5dd4-38aa-b96e-376252dcf1cd.roa
File:                     566f4c80-5dd4-38aa-b96e-376252dcf1cd.roa (raw, json)
Hash identifier:          1yvQVcb6sT5FmSHxNt2uKfNuSSxQbKksdqj7eJSIXzE=
Subject key identifier:   22:25:79:26:4B:CA:69:59:31:1F:54:4E:80:BB:36:AF:7A:D3:0A:4C
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285844D87A814071F63DC42422FB80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/566f4c80-5dd4-38aa-b96e-376252dcf1cd.roa
Signing time:             Sat 10 Feb 2024 14:00:32 +0000
ROA not before:           Sat 10 Feb 2024 14:00:32 +0000
ROA not after:            Fri 10 May 2024 13:00:32 +0000
asID:                     36351
IP address blocks:        173.255.132.0/22 maxlen: 24
                          173.255.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d8:7a:81:40:71:f6:3d:c4:24:22:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Feb 10 14:00:32 2024 GMT
            Not After : May 10 13:00:32 2024 GMT
        Subject: CN=46cc2134-0fc4-4d3a-9699-9f8fe74b1908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:50:61:04:ed:79:bf:51:18:68:bf:9f:b0:
                    2c:ea:b2:88:98:1f:06:5f:9f:17:94:1b:ae:6a:be:
                    65:55:ee:ec:11:b2:d1:61:4a:87:2c:2b:92:d3:39:
                    a1:a1:6c:0e:bd:40:94:34:53:60:c9:9a:9f:1b:bd:
                    0b:3d:51:51:98:e8:ef:79:3d:85:54:5f:e2:69:4c:
                    2e:fc:97:81:f1:63:33:de:09:65:ef:36:b5:f2:1e:
                    73:34:56:68:a7:36:7c:e7:a3:c6:ef:f7:02:0c:b1:
                    36:79:9b:06:f3:da:ad:8a:33:f4:0f:65:4f:2a:e4:
                    a6:9a:d5:8e:ae:6e:ad:f2:ca:b2:0d:ba:f7:f3:cf:
                    38:32:4f:3f:5b:36:73:12:b8:06:98:78:c5:41:36:
                    28:5b:b3:86:31:6b:4d:f7:2f:bb:7b:87:a6:c6:b8:
                    d5:4a:6c:9f:68:dc:3c:ee:f2:a9:20:5e:9d:d4:e1:
                    fe:ca:d6:26:9e:3d:a7:7b:0f:ed:b8:a2:24:14:cb:
                    67:dc:0e:d1:18:16:c2:19:df:d9:c2:9b:45:7c:a5:
                    d9:21:ea:a9:7d:04:98:5b:61:98:fe:64:2f:61:be:
                    08:53:5c:f1:b1:0b:06:b3:30:88:6b:18:b1:1b:94:
                    ca:73:b3:1b:ce:57:dd:41:93:d1:56:b9:0f:10:d3:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:79:26:4B:CA:69:59:31:1F:54:4E:80:BB:36:AF:7A:D3:0A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/566f4c80-5dd4-38aa-b96e-376252dcf1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.132.0-173.255.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:08:3a:36:7a:67:e6:d7:ad:83:1a:e7:0a:c8:13:1a:c5:fa:
         ac:04:47:f5:e2:10:bf:fc:54:2c:23:ad:74:5a:fc:2f:1c:f1:
         18:91:a8:9f:b1:05:fb:27:b4:34:ce:7e:88:75:21:60:e2:9f:
         0e:c9:b1:01:c4:7b:5d:c3:e6:01:f7:44:32:76:f4:cc:54:d9:
         34:56:f0:2a:86:df:f7:7c:1b:97:7a:32:ab:8e:64:cc:11:be:
         b8:ec:ee:de:eb:69:d2:dc:27:fe:11:34:47:8b:90:43:9f:62:
         d6:fc:1e:60:5f:95:be:b4:a9:ec:78:c5:a2:96:95:db:21:7a:
         70:a4:f2:3b:c9:fe:6d:f1:e3:61:5b:7d:6b:cd:60:6a:ef:fe:
         f5:30:96:fb:72:b0:37:41:db:54:ea:4d:71:26:0d:f0:fe:fc:
         b6:ab:42:de:12:60:1b:6b:95:15:1a:c8:5d:2f:cd:9e:21:26:
         44:40:03:37:20:1b:2a:15:b9:08:d9:3d:01:cb:dc:f7:8c:e9:
         7b:b6:fd:f5:52:5c:cc:fc:cc:3d:83:35:b6:94:04:9a:36:f5:
         8b:a5:c7:e6:18:67:0c:cd:5b:6c:20:48:b0:b3:22:c0:a2:ce:
         46:43:73:08:23:2e:c5:05:eb:d6:2e:95:83:da:14:d2:c3:66:
         5c:d4:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:10 2024 by rpki-client on console-ams.rpki-client.org