Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
File:                     6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa (raw, json)
Hash identifier:          GY5t3cbzTqKyKudPkFoXjvkoHpq7fNUY2eCjqsApKFk=
Subject key identifier:   C3:09:AC:F8:7C:9B:0F:98:08:8E:AD:AD:C0:20:DF:51:2C:DF:F2:50
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F432858450EEACDDA42E2DD7FA5CB9180
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     33442
IP address blocks:        149.23.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:cd:da:42:e2:dd:7f:a5:cb:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=84d3160d-48bd-4f06-acc7-0fe31cd8f634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:d5:0a:c6:3e:2f:e2:1f:bf:01:26:5d:c5:
                    dc:3f:95:36:ee:fc:ae:ca:c8:7a:9e:57:80:bc:d3:
                    92:9c:6c:2b:54:72:73:a0:32:30:22:33:9b:77:49:
                    f3:ba:41:87:50:c5:b6:c7:e2:f7:e9:45:b0:fc:ab:
                    bb:0f:b1:43:01:a8:fd:84:81:8b:c7:44:30:90:7e:
                    9b:b2:af:92:52:86:b7:d0:91:7d:cc:3d:ba:78:c3:
                    d8:c3:df:f1:4c:a2:f2:75:f1:8e:69:93:d0:94:d4:
                    5c:f7:16:2e:44:32:21:26:03:12:bc:4d:b1:ac:a4:
                    e7:96:a9:a4:92:23:93:31:d8:78:de:11:c1:41:ca:
                    ba:f8:09:d0:08:ab:e8:ef:1f:d2:44:fd:4f:4e:a7:
                    2b:dc:c0:ed:00:08:28:37:29:ab:8a:16:58:a4:77:
                    50:d9:fa:a5:67:93:ad:07:07:1e:d0:f6:ea:23:f7:
                    70:e4:48:0d:ce:48:58:43:f6:b1:4d:45:50:2f:aa:
                    5c:57:70:96:2c:1a:f3:2c:07:90:89:75:8f:64:d3:
                    14:0f:a3:7c:04:8d:63:49:ec:4a:96:d3:f2:66:ca:
                    e0:8a:1a:3e:38:82:2a:37:f4:2f:eb:b9:ac:cd:e5:
                    dd:81:72:1a:e1:a4:ce:3f:df:cb:ad:7e:10:c4:42:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:AC:F8:7C:9B:0F:98:08:8E:AD:AD:C0:20:DF:51:2C:DF:F2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:07:63:0f:e9:bc:ec:a8:19:39:49:97:a1:77:a4:32:0e:88:
         42:bc:f7:22:3f:f9:7a:d6:1b:98:92:76:a2:b0:c2:6b:ea:64:
         ce:fa:19:f5:22:79:11:10:99:4f:80:58:7b:3d:17:70:ec:6b:
         98:98:38:51:d8:02:00:b3:93:fc:5f:4a:28:07:e8:7f:d4:93:
         98:b9:8e:59:01:24:27:fe:95:a8:af:ab:08:36:3c:67:9c:cd:
         60:06:57:c7:e8:c1:9c:15:7f:b4:d5:c2:fa:e4:a0:60:59:f9:
         c9:1c:00:bb:18:6d:48:5d:5f:53:48:d4:31:f0:00:3b:83:10:
         83:4a:cf:27:8d:52:66:3f:cb:2d:1d:81:90:9a:86:b8:8d:c9:
         15:c6:47:d9:b8:40:09:c0:c1:ae:ce:18:c3:36:f0:87:22:05:
         7e:3e:20:23:11:9e:c4:1b:cd:5c:d8:e9:71:d4:45:5f:ee:0c:
         ae:ab:e5:df:dc:7e:46:fd:15:13:b0:af:f8:1f:c9:34:2c:bc:
         bf:35:f5:c3:d4:20:db:40:95:6d:3d:46:93:78:6a:55:b1:2c:
         a0:cf:b1:9b:2e:97:ea:2f:e1:6f:e1:f2:3a:2a:6f:3f:f5:37:
         24:69:b5:9c:12:b7:b9:94:d5:dc:09:83:db:0d:35:a6:8b:10:
         5b:dd:ab:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 05:50:06 2024 by rpki-client on console-ams.rpki-client.org