Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d1a97e0-6886-39a7-b96c-b7debcee842c.roa
File:                     7d1a97e0-6886-39a7-b96c-b7debcee842c.roa (raw, json)
Hash identifier:          zgk2jgk6SFivGoc/VU8uLGSoTm0FWRr5zzAKlcGT50c=
Subject key identifier:   6B:DE:4D:D5:A1:45:63:38:8C:DB:53:0E:A7:15:0C:EA:BE:65:43:51
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285846169ECE7AB73717134431CA80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d1a97e0-6886-39a7-b96c-b7debcee842c.roa
Signing time:             Mon 03 Jun 2024 13:00:36 +0000
ROA not before:           Mon 03 Jun 2024 13:00:36 +0000
ROA not after:            Sun 01 Sep 2024 13:00:36 +0000
asID:                     8075
IP address blocks:        170.114.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:16:9e:ce:7a:b7:37:17:13:44:31:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun  3 13:00:36 2024 GMT
            Not After : Sep  1 13:00:36 2024 GMT
        Subject: CN=91685f29-345a-4c93-a16d-c1aece124988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:5f:2d:8e:95:19:a5:5e:06:a3:00:5a:ec:
                    85:cd:a7:61:d0:25:94:33:c6:41:69:24:e0:de:39:
                    bb:67:d8:45:3f:78:e6:1c:a7:86:d9:47:9c:01:f9:
                    f3:03:f9:80:6e:ac:9c:d2:f5:63:5b:9a:a5:20:d0:
                    ee:e3:0f:cd:b0:53:90:f9:5a:92:46:b1:ee:a5:8d:
                    3a:81:fc:5c:6a:c0:64:b1:8a:41:2e:ee:25:5d:98:
                    6d:28:6d:f6:15:94:88:d4:f9:3b:f3:f6:3d:d6:21:
                    d6:43:57:7f:06:93:77:14:aa:ed:bf:c4:85:5a:0c:
                    e7:d9:78:d6:2b:ae:bf:ea:1a:e7:e2:fc:9c:e4:fc:
                    c1:40:c6:be:cb:d9:dc:ec:0a:3e:ca:3b:02:7b:c8:
                    80:86:fd:f1:3b:7a:c0:1f:0c:ad:09:9e:61:a2:db:
                    24:71:fb:b6:0a:db:85:f5:5b:c4:0c:8b:79:6f:c7:
                    e1:68:ba:e1:73:67:8d:08:d8:ed:dc:61:aa:3f:f9:
                    8a:78:a8:5c:eb:2d:86:03:14:56:1a:19:bf:ae:6e:
                    40:48:a2:0f:d9:51:24:5e:b3:2b:ed:23:ea:ca:bf:
                    25:22:22:d4:62:68:cd:22:10:86:b7:86:42:da:9a:
                    f0:43:10:d4:1a:db:b8:f7:1a:23:ac:ff:5e:78:ba:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DE:4D:D5:A1:45:63:38:8C:DB:53:0E:A7:15:0C:EA:BE:65:43:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d1a97e0-6886-39a7-b96c-b7debcee842c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5d:cf:92:56:77:6b:e7:eb:f7:f8:e8:4f:66:e7:18:b0:5a:
         d7:1a:00:c1:75:33:79:d7:b6:ca:ce:56:bc:72:75:21:7e:58:
         f1:ea:7e:17:65:98:68:82:31:c9:3c:f6:7d:58:ad:82:b9:b1:
         b2:d0:eb:aa:f0:d3:83:17:8e:5d:64:53:2a:b6:84:bd:d1:8a:
         22:87:cf:82:0f:2f:f1:c6:35:a9:4c:08:aa:ac:67:c6:e0:b4:
         ef:eb:ac:8e:d3:bc:a8:64:cd:69:aa:eb:e2:9b:b9:30:d6:ec:
         23:ee:db:d5:a4:1f:2c:54:5a:55:73:a1:02:a0:71:5f:bd:28:
         9b:15:4e:d8:4d:3e:7d:0e:37:ec:c8:72:ee:3c:16:f7:10:05:
         02:51:72:50:d6:02:22:5c:e0:dc:ce:44:9f:ed:fb:db:e9:14:
         f3:8e:bc:8d:14:c7:87:05:f0:6f:17:a1:7a:8b:17:86:db:4a:
         8c:4b:39:de:92:26:57:61:57:ab:1c:d8:66:eb:de:19:19:fa:
         fd:45:c3:a8:af:b9:eb:bc:cd:8d:54:e8:71:6a:09:9b:f3:83:
         de:ad:e6:c7:65:e8:ab:e9:02:76:da:d4:76:bf:77:e8:58:45:
         0b:53:8d:e1:bc:85:e7:10:3b:85:15:7d:ff:b4:0c:38:b5:f5:
         e3:b0:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:30:17 2024 by rpki-client on console-ams.rpki-client.org