Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa
File:                     7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa (raw, json)
Hash identifier:          b117oHq4cjA6FY8MmZ/eGt6opzYS+1/XP5ZtqRtBd9U=
Subject key identifier:   62:C7:D6:95:FE:B6:C6:A7:76:69:51:68:40:77:6C:D5:2F:39:DE:BB
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285845803583CB8E2E9A7BF0312760
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa
Signing time:             Wed 10 Apr 2024 15:57:22 +0000
ROA not before:           Wed 10 Apr 2024 15:57:22 +0000
ROA not after:            Tue 09 Jul 2024 15:57:22 +0000
asID:                     0
IP address blocks:        149.112.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:80:35:83:cb:8e:2e:9a:7b:f0:31:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr 10 15:57:22 2024 GMT
            Not After : Jul  9 15:57:22 2024 GMT
        Subject: CN=94530338-d7cd-4e26-9ba5-f7da617325a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:d5:f7:66:e4:18:5f:05:20:f6:d0:f1:09:
                    b0:cf:06:37:96:22:64:00:c8:31:77:15:11:5f:5e:
                    60:10:1b:c8:aa:86:ba:6d:f6:c9:a6:7f:97:e5:8a:
                    e2:48:a0:4d:b6:7b:3c:fb:1f:e0:24:06:c0:a2:5e:
                    3a:b7:ff:b5:0f:d8:a5:06:2c:5f:dc:9b:d9:1f:d4:
                    ec:7d:b3:3c:6f:54:da:01:96:67:aa:d2:3e:cf:17:
                    e9:ba:55:3a:6e:1c:e4:ee:fa:98:a8:76:7a:72:64:
                    0d:39:45:d6:43:9f:98:da:3d:35:e9:e5:70:7f:a1:
                    01:1d:82:8d:6e:13:3d:5a:5c:5f:f2:7f:15:ae:4e:
                    2c:4b:42:b0:a5:9b:f7:e0:12:2f:8b:b1:ae:1d:c2:
                    44:3c:16:ba:eb:91:c5:15:f7:83:34:dc:8c:36:b4:
                    dd:06:f8:80:7b:9b:d5:63:bf:e2:54:0c:b2:24:57:
                    55:ab:81:c4:7e:06:eb:20:fd:42:49:e9:c1:c4:98:
                    97:5c:b8:c2:5f:75:f7:d1:4c:70:30:16:7b:79:3b:
                    17:b2:b4:a4:44:2c:06:75:3d:f5:f5:e4:ef:05:05:
                    f1:b6:bb:7f:b2:81:a5:ca:b4:52:d7:d9:4e:36:6a:
                    e2:95:91:d7:eb:40:82:0c:be:cf:b7:f9:a2:75:7b:
                    c2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:D6:95:FE:B6:C6:A7:76:69:51:68:40:77:6C:D5:2F:39:DE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:38:3c:71:dd:02:90:1c:a4:3a:65:84:3c:05:57:d2:05:
         ff:a3:71:5e:35:50:cf:ea:d9:16:99:e0:45:15:70:ef:a5:82:
         d0:0e:00:51:69:a7:ee:75:8b:35:ff:30:9b:47:8f:ca:c3:58:
         90:27:9d:35:8a:94:61:d3:f5:9a:c3:ba:b5:60:d2:39:b0:e6:
         a2:29:4d:ce:52:47:dd:3e:96:70:ad:8e:bc:36:3d:cf:16:5f:
         03:b7:5a:ab:10:96:9c:6a:a7:68:e0:e0:35:63:db:6b:f4:11:
         87:b1:88:65:ed:6b:d7:78:44:dc:55:8b:11:d4:cb:9c:5f:1c:
         fd:47:7c:ae:bd:b5:ae:de:3c:b1:5f:07:79:dd:b9:00:1d:f1:
         95:23:73:bf:df:7c:cc:08:61:c8:c0:4b:3f:0a:b6:2a:d8:57:
         58:4d:a3:75:c4:8a:a3:d0:e0:6b:18:df:05:67:a8:03:57:3d:
         33:9b:73:19:33:c2:a1:ae:ce:83:b1:a0:9b:b3:cf:ac:25:a6:
         94:27:26:a4:89:42:5c:3a:1c:27:a0:ea:13:e7:27:64:be:1f:
         c8:33:73:f8:e6:aa:72:85:13:cc:e9:2d:87:4b:29:8e:60:66:
         26:68:d7:ab:39:b4:ac:6d:df:b3:08:68:85:15:90:4b:60:4c:
         fb:24:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:01:23 2024 by rpki-client on console-fra.rpki-client.org