Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa
File:                     53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa (raw, json)
Hash identifier:          LIf86y//YBUwwNfXznk9xdwxGePiT3YIw/5jjG6FAPU=
Subject key identifier:   03:0D:06:E0:7D:74:52:0F:3F:90:CE:76:37:33:AF:B2:8A:A8:DA:C0
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584592F01E3B1047AC0BACFE8580
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa
Signing time:             Wed 17 Apr 2024 08:57:54 +0000
ROA not before:           Wed 17 Apr 2024 08:57:54 +0000
ROA not after:            Tue 16 Jul 2024 08:57:54 +0000
asID:                     54994
IP address blocks:        138.113.15.0/24 maxlen: 24
                          138.113.74.0/24 maxlen: 24
                          138.113.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:92:f0:1e:3b:10:47:ac:0b:ac:fe:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr 17 08:57:54 2024 GMT
            Not After : Jul 16 08:57:54 2024 GMT
        Subject: CN=c99f735d-f157-4f10-8676-7d103fc95097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:4b:0c:e9:23:d2:68:3d:33:d0:a2:b1:ec:
                    38:a4:bc:ed:1f:c3:5c:a8:02:ae:c9:c9:df:64:29:
                    31:3c:44:e3:07:1e:29:30:8c:e7:f9:42:90:24:48:
                    b7:39:a8:0d:d0:7c:f1:b6:f5:2d:f7:f7:1a:9d:f0:
                    66:41:51:ad:fd:5f:08:c4:7f:cf:74:79:98:0c:f3:
                    de:45:83:06:b2:0b:fd:f2:5e:7d:79:6a:31:21:14:
                    b5:23:65:24:7d:8e:37:6e:e1:8c:66:41:aa:77:42:
                    23:94:3f:43:f4:5e:ab:e1:6b:ef:1e:9d:25:3e:46:
                    6c:44:9d:4f:75:d7:0c:98:e5:2b:6d:83:57:41:d3:
                    aa:b6:fa:58:17:e8:74:d4:41:1a:ec:41:b1:f2:e1:
                    17:15:5b:47:a2:f8:a2:86:fe:e6:92:79:00:89:2a:
                    4a:bf:8d:f5:c5:54:de:32:86:af:80:fc:7d:d8:5d:
                    eb:7c:45:13:53:c2:3d:8f:fa:34:bd:84:31:e4:9f:
                    f3:3a:0d:b6:3d:dd:f8:87:8e:f1:c7:62:17:8e:36:
                    e2:7e:59:99:6c:a2:89:a6:e4:de:65:f3:2b:77:7f:
                    36:52:b4:7b:c1:62:16:70:96:53:cb:b8:e8:6c:93:
                    df:33:7c:95:9c:93:b3:af:5a:e4:84:b4:6f:03:8a:
                    4f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:06:E0:7D:74:52:0F:3F:90:CE:76:37:33:AF:B2:8A:A8:DA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.15.0/24
                  138.113.74.0/24
                  138.113.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7c:92:52:c9:b4:46:6b:b7:54:bd:8a:8e:e0:b3:c7:43:25:
         33:46:02:4b:70:82:a9:cc:57:cc:8b:eb:a1:a8:61:26:13:a7:
         cd:95:c3:83:17:c4:e3:15:25:62:f6:14:1f:9f:30:cd:79:bc:
         1f:79:12:81:8b:23:72:cd:a5:37:ef:b1:8a:55:79:e6:63:48:
         17:4b:73:be:d3:51:57:71:5a:84:85:38:ca:e7:a5:be:fd:30:
         77:9c:e1:4c:ea:9f:ec:ce:56:a8:7c:9e:b4:24:da:01:e3:35:
         56:c1:ea:4a:27:b7:d9:18:26:b4:31:df:3f:8a:82:05:0d:a5:
         e3:df:d8:61:87:cd:c9:ec:11:63:bf:65:44:18:5e:37:a7:f5:
         5d:b8:d0:52:8d:c0:f6:f0:18:fc:33:a3:32:31:85:1c:f6:ac:
         7b:f4:cf:8a:ce:f8:a7:83:41:1c:a7:f7:6c:c2:85:f5:7c:1c:
         ad:a7:8e:cb:b0:04:1a:8f:a2:ff:11:d4:27:ea:71:90:18:2a:
         01:5e:e7:b9:6b:98:d6:c9:81:4f:3b:bb:2a:b4:96:66:bf:b6:
         1e:21:42:a8:c1:da:51:a7:96:b7:64:2e:3a:9e:b7:95:c8:eb:
         95:94:b3:e7:d2:87:02:f8:a1:94:a5:de:c5:85:c2:3a:2c:54:
         29:28:bb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org