Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12dc70bc-9f37-3d64-b35c-c9ff793f03e8.roa
File:                     12dc70bc-9f37-3d64-b35c-c9ff793f03e8.roa (raw, json)
Hash identifier:          XqLo6o2lbDdhv71puz4U606LucfgjvVQQQueL8ZOgy0=
Subject key identifier:   DC:C2:EA:62:17:51:5A:B1:89:B9:89:17:5B:4D:62:EE:C0:D7:B4:4A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584496DF6140C0FC6AE8EBD9EFC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12dc70bc-9f37-3d64-b35c-c9ff793f03e8.roa
Signing time:             Thu 18 Jan 2024 02:00:26 +0000
ROA not before:           Thu 18 Jan 2024 02:00:26 +0000
ROA not after:            Wed 17 Apr 2024 01:00:26 +0000
asID:                     31898
IP address blocks:        149.137.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:96:df:61:40:c0:fc:6a:e8:eb:d9:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan 18 02:00:26 2024 GMT
            Not After : Apr 17 01:00:26 2024 GMT
        Subject: CN=72a10fdb-51ca-4fd8-b28d-6846ccd2beec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:4f:19:9d:8d:d6:2d:bd:42:82:74:27:77:
                    e5:d1:d3:44:66:65:8e:9f:36:f1:7a:ad:9b:83:c6:
                    41:d6:3d:03:8d:86:28:52:f6:a0:bf:65:ed:10:d5:
                    55:7f:0c:5c:b4:54:99:be:06:f4:cb:d6:47:1c:9d:
                    3f:31:23:ad:14:38:28:38:1c:bd:db:32:c9:bf:4d:
                    0e:45:0f:f1:78:0f:4a:98:74:01:8a:ac:bf:86:ae:
                    28:69:bd:0a:a4:49:4b:a8:4f:01:a7:54:92:13:7f:
                    7a:51:cb:98:34:21:fd:a2:3e:df:3d:1a:0f:af:f1:
                    d9:fb:8c:25:5b:70:84:f7:2b:97:63:99:da:ef:a9:
                    85:c4:68:c5:ca:9b:70:a4:96:73:ad:09:c8:c3:e6:
                    fd:89:13:f7:90:d3:eb:2f:03:75:51:69:2f:1c:a2:
                    dc:1d:2a:26:f9:77:09:74:d1:ab:05:f0:be:d0:f8:
                    d6:46:b3:ec:fb:95:e7:8d:4f:ba:ab:de:0f:1e:09:
                    6d:0f:2a:ab:54:9f:e5:39:e8:0d:ae:3c:32:de:f2:
                    06:40:b3:c0:ac:e1:7e:37:bf:3d:af:a8:0a:8e:61:
                    28:64:49:aa:85:9c:52:83:2b:ca:65:14:35:b3:e7:
                    62:40:6e:56:5b:3f:20:54:76:37:01:a7:69:f8:48:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:EA:62:17:51:5A:B1:89:B9:89:17:5B:4D:62:EE:C0:D7:B4:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12dc70bc-9f37-3d64-b35c-c9ff793f03e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:55:58:42:b8:54:2f:e2:1a:1d:7b:82:b8:84:c8:b1:67:08:
         fd:08:b1:32:bc:ce:95:2c:19:b6:48:2f:44:9a:4c:6a:2c:89:
         f9:67:c4:a5:16:ae:ba:37:49:4a:81:19:77:65:6c:40:71:f7:
         c8:f7:cb:a2:b4:57:6f:7a:e4:5b:d7:b3:be:95:ca:2d:9a:48:
         5b:95:6c:cf:ed:77:3a:59:a0:66:49:6e:6e:5a:90:c8:dd:33:
         2a:e1:ae:78:d8:a2:1b:d4:ab:75:24:bc:56:1c:e9:69:d4:d6:
         ce:3a:5d:52:38:ed:d9:9a:37:08:86:55:28:8d:50:79:a2:0a:
         ce:f1:80:e2:2d:a3:fb:47:5b:4c:10:6d:2f:1f:ba:15:b3:16:
         ef:fe:3e:49:62:76:a8:d6:a6:f8:78:16:af:e4:84:8f:90:e9:
         4c:01:5f:8a:17:55:d5:6d:38:b0:d8:1e:f3:05:4a:a4:80:ee:
         51:d9:05:ee:41:bb:b6:ec:f1:54:ef:d7:5f:1e:00:77:02:2a:
         08:e4:23:26:ce:4c:21:9f:59:db:fa:6a:44:5f:9e:43:e0:90:
         8e:35:79:aa:c5:2a:8d:11:ec:66:d5:35:f9:55:db:77:52:5f:
         8a:47:e3:c2:88:e5:fe:84:9d:93:27:c3:ad:7d:30:3f:09:ce:
         a3:9f:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:34:23 2024 by rpki-client on console-ams.rpki-client.org