Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa
File:                     89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa (raw, json)
Hash identifier:          7O3R4/Tcn2t3VzCDezGkflEWMJOYfaL6RcoajbsExfg=
Subject key identifier:   AB:E1:32:E0:9C:F6:83:E2:9D:38:68:DA:43:B3:0F:73:8D:5E:56:6F
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F43285845ADEE13E790ADBE6C47381BC0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     396451
IP address blocks:        148.77.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:13:e7:90:ad:be:6c:47:38:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=02c17a43-1cfa-460b-8afb-fba9c0901da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:e5:35:ee:15:e5:f4:a4:d1:10:f5:2b:31:
                    3f:c1:65:2e:1e:32:93:62:6d:87:ba:16:03:d2:ca:
                    bc:30:50:3f:a7:a0:cb:05:ef:40:2a:39:89:d1:53:
                    32:e9:fe:6a:c3:06:c8:7d:40:c9:60:7c:8a:55:d4:
                    e0:e0:72:af:9d:e3:3f:e1:4c:bd:51:1d:2e:8f:a7:
                    6d:33:c6:1b:e5:31:06:04:71:09:1b:d0:da:50:a2:
                    f3:57:85:ae:b0:b2:28:63:cc:34:e6:b2:fb:98:9d:
                    f6:bf:b7:a8:a8:ea:83:3f:fd:cc:d5:6e:03:52:6d:
                    5c:a2:61:46:90:df:2d:47:ae:1c:c4:ea:17:b4:b5:
                    78:3e:f9:9e:2a:27:cf:17:ff:a9:e9:b1:1b:bc:ad:
                    3e:f8:2e:fc:28:9a:29:2a:21:b4:f0:7f:c2:bd:19:
                    c5:70:71:f7:9d:d5:fa:3a:76:ef:61:a7:de:9a:2f:
                    dd:5c:12:e1:ca:c1:9d:c6:bf:26:3c:98:ac:e7:1b:
                    87:7b:8a:ce:30:b6:4b:06:0d:33:59:70:a3:b1:6e:
                    91:1e:f3:40:2c:47:52:0d:99:30:09:e7:f4:94:71:
                    81:27:2e:c6:f4:28:ce:57:45:0e:c7:81:c3:f3:1f:
                    12:0b:b0:55:a4:2a:96:bc:fa:aa:9f:c4:32:f2:19:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:32:E0:9C:F6:83:E2:9D:38:68:DA:43:B3:0F:73:8D:5E:56:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:fe:80:43:c4:c8:a1:81:be:3d:39:03:88:62:f6:b4:ec:
         35:04:ee:67:65:4e:eb:3c:89:14:49:f9:1f:2c:70:52:36:f0:
         2f:9b:cf:f6:ca:23:d0:4a:20:27:f2:15:a4:86:ef:bd:3a:ac:
         df:9d:45:5e:4e:9d:f0:ea:07:83:fe:5c:a1:f8:82:72:c8:51:
         14:bd:af:26:43:63:2b:71:6b:4c:67:23:76:7f:0e:a3:a1:ef:
         34:8d:7c:4e:33:8f:0d:77:44:5b:44:96:f9:ed:67:df:47:ec:
         8e:c2:c4:68:0a:48:aa:98:45:89:49:86:cc:b6:61:49:85:e3:
         c3:ba:0f:10:34:9f:0e:8e:a8:6e:3d:00:b1:69:74:a0:8a:30:
         54:2f:b3:56:9a:6d:e4:61:91:50:f9:1c:0b:07:80:01:ba:6e:
         24:0d:ac:5d:db:5e:bb:15:29:c8:3f:59:f2:0e:5c:8d:8f:11:
         26:01:4c:c7:33:8b:4e:fe:ee:10:09:66:87:26:28:5c:ff:17:
         54:14:a0:ea:f6:d3:e3:57:e1:93:f5:b2:76:bb:4f:03:d3:fc:
         d8:c7:03:b7:f5:87:93:12:bc:d7:82:c6:60:96:8b:a8:bb:20:
         77:82:ff:0e:03:fa:96:76:c6:1b:07:0b:40:5f:6e:79:c8:b4:
         e6:fd:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:50:14 2024 by rpki-client on console-fra.rpki-client.org