Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
File:                     d14790e7-dd79-381f-8bae-9db9eff096c1.roa (raw, json)
Hash identifier:          13f+H/KoJDh3ogHrWzZ7tDb5Od3QyodGFkoYOP4eWl4=
Subject key identifier:   76:81:4B:09:00:0A:48:5E:79:DF:9B:43:12:8E:99:8D:FC:71:60:35
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F43285845CE090894E70D5411FF0D2800
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     62494
IP address blocks:        198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24
                          2607:fa18:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:08:94:e7:0d:54:11:ff:0d:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=80f95c5f-2e4a-4c69-acbf-c3a066858719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:e4:15:7b:84:6b:58:a7:42:7d:89:bc:05:
                    58:86:53:13:37:e9:21:69:99:c2:00:e6:3d:95:d6:
                    ee:73:5d:20:e5:bf:bc:67:f0:01:8d:eb:02:d9:1a:
                    ba:ed:96:d9:06:c3:80:3e:bf:e4:6c:3e:9e:b1:15:
                    6e:cc:e5:e8:bc:16:c9:92:97:1f:99:d1:25:f0:00:
                    04:d3:c1:fa:c1:54:16:d0:de:be:8c:e1:33:57:83:
                    3b:ab:3a:8c:67:8f:61:bc:21:b4:3b:98:41:38:47:
                    26:60:6b:13:45:b4:72:36:1f:35:ea:54:01:df:31:
                    ff:2f:c9:ed:e3:41:f8:1c:71:db:21:a1:c9:54:b8:
                    16:9a:dc:f8:1a:85:f7:1b:f2:ad:6f:ad:f9:22:77:
                    50:7f:aa:2a:ce:d8:81:ae:10:a7:56:85:96:d1:de:
                    74:2a:af:ca:83:a1:3b:bb:3a:54:3a:f9:36:d4:24:
                    56:7b:18:b5:86:65:03:b2:54:79:e9:f1:53:1b:46:
                    d2:26:e3:ee:f5:11:de:41:a1:54:ad:88:4f:71:4a:
                    0d:6e:75:13:37:38:a2:13:05:ed:20:8d:ef:94:ca:
                    75:61:dc:b5:33:0c:20:df:64:38:06:d8:9c:58:c2:
                    ef:18:f6:c9:fa:28:f6:25:c3:d7:6d:e6:57:66:2c:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:4B:09:00:0A:48:5E:79:DF:9B:43:12:8E:99:8D:FC:71:60:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.113.0-198.60.114.255
                IPv6:
                  2607:fa18:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:9c:cb:3b:1b:83:b5:98:7c:ab:b1:b3:67:15:f6:e5:7f:
         cd:7f:0e:42:1a:67:4c:98:33:26:89:a7:64:ad:35:68:65:3f:
         91:fa:a4:88:5d:77:70:06:d9:eb:4e:38:8d:72:fe:85:d1:9c:
         a7:b6:b6:1b:fa:10:89:3d:ab:c0:89:a6:37:9c:f4:6a:58:72:
         37:c9:e3:4a:32:87:6d:a5:cd:08:45:88:cc:79:b2:05:b3:78:
         c2:d1:29:f9:68:dc:c6:0a:20:f5:78:8f:6a:43:5b:87:24:d7:
         ff:e1:bc:71:12:56:a0:e3:4e:45:44:18:cb:3c:ad:5f:0c:f7:
         35:0a:c7:d2:ba:3f:48:18:44:b4:8d:40:b5:c5:52:e6:9c:26:
         91:a9:10:38:0b:0d:e9:96:37:3a:24:97:de:98:dc:56:cf:4b:
         ae:e0:32:58:44:00:df:12:37:40:fa:02:40:2c:03:95:a6:aa:
         2f:19:c1:70:07:e2:23:1e:54:9b:53:24:14:69:fd:eb:a0:7e:
         41:53:43:4a:45:4d:e1:b7:09:ba:54:52:8f:66:dd:2c:84:9d:
         57:10:78:63:7e:4f:c4:d0:06:9c:61:71:cf:db:f5:71:bf:b5:
         f6:06:7f:fd:b3:bd:2c:e5:ff:83:53:5a:19:4d:f1:20:f4:76:
         38:db:06:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 17 20:57:31 2024 by rpki-client on console-fra.rpki-client.org