Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa
File:                     f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa (raw, json)
Hash identifier:          Zya1Mzppy14AMYNEPE9RGad+NC+cwQ56RF7n/X1J+C4=
Subject key identifier:   A4:B1:1C:F2:4C:A1:05:9D:74:F8:F8:85:BB:99:F4:A4:40:E7:F5:48
Certificate issuer:       /CN=13dce77e-3ef0-4689-ad89-1c001e2f4252
Certificate serial:       010D0C9F4328584531B2995DDB2517E322889840
Authority key identifier: 7B:81:2C:D0:03:17:E8:78:93:6A:35:50:B3:A2:2A:77:B9:8F:81:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     14230
IP address blocks:        149.112.52.0/24 maxlen: 24
                          2001:504:129::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/13dce77e-3ef0-4689-ad89-1c001e2f4252.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/13dce77e-3ef0-4689-ad89-1c001e2f4252.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:99:5d:db:25:17:e3:22:88:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dce77e-3ef0-4689-ad89-1c001e2f4252
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=70bb3129-d75c-4b82-b50f-42e1082f4b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:dc:1e:dd:46:09:59:7d:17:f5:89:18:6d:
                    ff:39:62:56:20:43:db:ee:31:20:34:cf:49:e8:6a:
                    9f:cb:d8:48:4e:ac:f8:d7:24:ce:4f:69:87:1c:28:
                    e5:95:31:36:5f:d6:8a:03:ef:15:f8:71:c9:58:fd:
                    13:fb:8e:6f:99:e7:ba:fc:53:31:b0:f6:54:bb:29:
                    6c:5f:df:38:2b:6c:18:86:93:95:00:ea:d3:6b:f5:
                    cf:1f:7f:68:72:74:9c:11:51:8a:d0:b0:2d:b0:b0:
                    11:d0:da:f9:90:cf:9b:fa:53:35:ad:a7:62:02:4f:
                    e6:2f:e2:f7:ed:58:0d:dd:57:4b:5b:14:b7:cd:dc:
                    ae:c9:1c:9b:62:6e:33:b3:3b:e5:aa:9f:17:a8:ed:
                    85:9c:1e:8c:0a:4e:8c:e8:90:85:e7:76:3f:e9:42:
                    ea:9e:8e:a8:7e:e5:83:b6:79:f6:67:e8:b9:b9:13:
                    a7:9a:0c:65:3a:50:bc:dc:dd:e0:0c:c2:28:07:3f:
                    7a:4b:cd:ff:04:9f:44:2f:ef:a4:de:1e:7b:47:75:
                    19:2e:ba:1a:ac:48:97:05:0d:03:4f:87:d9:34:c7:
                    0d:df:dd:f7:6e:6f:c9:82:f5:f1:43:d4:11:e2:2a:
                    a1:58:2a:2d:84:11:c1:99:6d:55:92:97:59:dd:f6:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B1:1C:F2:4C:A1:05:9D:74:F8:F8:85:BB:99:F4:A4:40:E7:F5:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/13dce77e-3ef0-4689-ad89-1c001e2f4252.crl

            X509v3 Authority Key Identifier:
                keyid:7B:81:2C:D0:03:17:E8:78:93:6A:35:50:B3:A2:2A:77:B9:8F:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.52.0/24
                IPv6:
                  2001:504:129::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:70:c5:7d:51:b6:c8:0d:13:8f:bf:ca:00:4b:a2:c2:5a:
         bf:a0:ed:d4:e1:a9:2f:d8:ac:af:ff:fc:57:00:f0:82:c2:3d:
         d7:53:7c:06:bf:a6:c0:d1:bb:50:1f:be:4e:10:12:72:56:7c:
         a0:61:7d:ee:93:3b:ac:26:c9:98:7d:58:e7:90:21:c4:e4:fc:
         c6:c4:10:9c:27:76:27:99:9d:aa:76:c6:a9:a0:af:40:e5:6d:
         6a:e7:e2:c9:47:73:02:b2:99:83:37:b7:0e:a1:3d:4a:7c:a0:
         c6:c8:60:bb:24:7d:da:15:51:61:d6:ed:df:68:de:71:45:c8:
         d5:77:6d:df:7d:aa:8d:c2:d3:c3:57:4a:e1:19:3b:f9:fc:86:
         73:d9:4a:48:72:8f:f8:34:d4:c9:e8:b8:cb:33:42:6c:15:f7:
         50:f2:b2:a0:86:39:da:c9:d4:13:d5:b8:27:92:85:1f:0f:31:
         28:ab:c7:0f:9d:1d:30:f5:ae:57:c8:43:88:cd:4d:6a:21:f5:
         99:8d:6b:9b:64:35:c0:86:f0:dc:f8:72:b5:5f:9f:04:76:5b:
         3c:91:c7:3f:5e:c2:da:6e:d0:4d:0d:84:ef:0b:ae:1d:12:60:
         46:dd:ee:76:97:7b:53:5f:7a:0b:0b:0d:d2:51:b0:a1:da:9f:
         c3:7e:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:56:30 2024 by rpki-client on console-fra.rpki-client.org