Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa
File:                     d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa (raw, json)
Hash identifier:          l+y2FYYCmqnp4Az5+z1j7SKrQ1+e+tAkRU0wtAFv17M=
Subject key identifier:   6A:2C:70:61:64:6F:39:CA:55:B7:E9:50:D9:3C:B5:41:77:E2:69:A3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845490071DE9E80856C6318E500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa
Signing time:             Thu 21 Mar 2024 21:20:59 +0000
ROA not before:           Thu 21 Mar 2024 21:20:59 +0000
ROA not after:            Wed 19 Jun 2024 21:20:59 +0000
asID:                     15169
IP address blocks:        74.125.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:71:de:9e:80:85:6c:63:18:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:20:59 2024 GMT
            Not After : Jun 19 21:20:59 2024 GMT
        Subject: CN=7a978f81-238e-42f0-b062-c6ee4f116906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:dc:9f:20:85:09:a6:01:54:09:9e:fa:f7:
                    52:11:97:b1:c2:1c:fa:9c:c8:85:b5:f1:35:ff:df:
                    ba:a9:0c:fc:13:96:a9:b3:40:82:69:7a:3b:20:a0:
                    1e:b4:5e:bb:cf:fb:36:fd:05:d4:42:ac:8e:ba:c1:
                    f6:c3:1f:55:aa:4f:99:89:ad:d0:16:0c:a2:0d:d1:
                    db:03:d6:fd:a6:08:63:a8:3f:54:0d:62:77:f5:83:
                    d9:cb:67:c4:59:2e:6e:f5:ff:95:0a:02:b8:5d:9e:
                    ac:6c:8c:21:77:32:12:08:83:70:ec:8b:bc:85:63:
                    6a:6c:9e:7c:be:18:4f:aa:47:c6:b8:5a:56:cc:fb:
                    80:66:b5:b0:03:30:7c:84:ba:d3:36:bc:77:f9:2a:
                    9e:c5:8f:d4:53:49:81:99:5c:1f:0a:29:f3:f5:c6:
                    d9:b8:3d:7a:c5:9c:e2:78:4d:ba:e6:f6:57:59:4b:
                    9e:a0:94:98:3f:bc:3d:3b:0b:64:0c:e9:74:86:31:
                    dc:e6:a7:0b:34:97:bb:3e:0d:27:ab:03:6e:7b:07:
                    f7:40:a3:50:33:14:0a:e6:93:1a:06:65:83:e2:59:
                    f8:32:2f:48:f5:4a:a8:cb:13:88:e9:da:a8:0f:d4:
                    5b:67:91:17:cd:c2:d1:c9:33:f4:3f:49:36:c6:06:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:70:61:64:6F:39:CA:55:B7:E9:50:D9:3C:B5:41:77:E2:69:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:62:72:ed:6e:99:23:09:22:30:86:77:00:f7:31:e2:d1:da:
         13:55:9d:c9:1f:ca:0e:27:cc:18:91:8e:98:a4:80:a6:cd:c4:
         96:c8:72:62:ba:1d:a2:2f:e1:9a:d0:69:9b:66:d9:69:f2:9c:
         72:43:f9:fe:ea:0b:4c:b5:df:69:25:6a:9d:9d:d0:ea:47:4e:
         a8:fe:d6:c4:2d:7c:69:fd:60:58:d5:d4:92:25:57:c9:40:d4:
         bc:90:65:e2:d5:5f:37:44:3f:53:e7:c0:f0:0a:b6:06:d6:fc:
         f8:8c:e6:dc:89:68:71:14:7e:0e:00:65:12:27:fe:f4:7c:de:
         50:9c:7a:53:9d:d4:c6:88:4d:50:ca:07:23:3e:eb:e2:69:67:
         5b:d0:8f:c1:10:18:be:72:87:11:b5:1d:14:97:d3:45:35:27:
         c8:1f:c5:de:e5:9d:2c:c5:6a:35:f8:f4:84:a3:a4:08:06:df:
         3b:e4:47:e5:f5:3f:0b:17:09:7c:a0:81:4e:a9:e4:e5:4d:99:
         f4:e1:e4:c9:21:e2:8b:37:84:ce:e5:ac:91:12:7b:54:5b:c0:
         b0:2e:19:a7:f2:8f:ed:df:89:3b:5c:c1:c4:23:82:9f:61:93:
         5d:44:1b:03:d4:46:a5:1d:52:13:2c:86:6c:b4:5f:96:a9:42:
         60:18:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:52 2024 by rpki-client on console-ams.rpki-client.org