Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
File:                     6c278590-b168-3097-9744-916cdc3a0492.roa (raw, json)
Hash identifier:          +AsJcyc73c12j5WGqWhyMSFlN9yAa/NxdnN36iuC3zo=
Subject key identifier:   DC:8B:6E:98:4F:37:D4:3D:A9:F9:2C:CE:B1:D8:B6:B1:AF:F8:3B:61
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285845CE0907A20B2DE586C69CD300
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     4181
IP address blocks:        146.174.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:07:a2:0b:2d:e5:86:c6:9c:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=b797d527-d7a8-4925-a209-b2996e6f8d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:f4:3d:c2:0e:9f:34:e3:5e:79:e5:d0:0a:
                    45:10:9a:be:fa:f2:b2:23:d3:e0:a8:7d:fa:6a:9e:
                    8e:6b:de:fa:6f:7a:ac:df:91:4e:64:7d:58:10:0c:
                    4c:ca:9c:3e:d6:bf:37:fb:80:cd:34:f1:56:d4:be:
                    ef:c1:9a:2b:42:b5:95:fe:18:e5:53:40:78:b8:f4:
                    96:e4:a7:a3:62:6d:82:f5:8b:c2:ce:16:cc:96:72:
                    37:33:20:d6:84:e3:a9:05:4d:fb:62:78:ee:68:17:
                    e3:e9:8f:ee:5e:71:7a:af:ac:1c:48:cb:3b:4f:18:
                    bb:16:8b:4e:ff:aa:19:a2:8c:22:2a:9c:1f:2a:56:
                    de:e0:71:11:49:23:8c:5e:ee:ed:5d:1b:0b:54:35:
                    db:20:50:f5:f7:d9:61:c3:aa:14:2b:84:ed:36:85:
                    4e:cb:f4:66:95:81:e1:5c:e9:45:ba:25:9b:a9:be:
                    ee:0d:21:9f:2c:82:eb:2b:05:25:6a:1e:4c:0a:36:
                    2f:5d:d6:e9:c6:25:80:40:0d:10:d1:b4:14:09:9b:
                    86:4c:5f:2c:56:2a:a3:00:16:36:fd:a2:c3:6a:1a:
                    f8:d2:97:b0:21:15:13:d4:6f:06:ee:0d:bb:6f:fc:
                    2e:e0:07:33:8b:68:ab:64:c3:fb:6b:65:09:f2:a6:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8B:6E:98:4F:37:D4:3D:A9:F9:2C:CE:B1:D8:B6:B1:AF:F8:3B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.174.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:9e:ff:7c:62:36:28:96:4b:dd:e5:a3:9e:52:11:57:96:
         6f:49:e5:65:c5:a7:f9:7c:01:ab:1f:93:31:e6:62:f1:94:f0:
         b0:6b:1f:67:db:48:b6:2e:eb:46:b5:18:6f:07:2b:88:48:fc:
         5c:40:c2:22:8d:46:17:da:a7:a6:b1:3d:ce:e1:c4:a4:eb:ce:
         27:15:af:bb:44:be:ac:53:ed:72:48:c1:98:7c:d0:7c:1f:32:
         f0:11:61:cc:22:3f:c1:4e:f2:b1:62:52:e8:35:33:04:f2:ec:
         6c:ab:0e:3c:ff:3a:f5:fa:e0:3d:fb:a6:d2:38:13:d1:e3:8e:
         f8:5b:81:74:85:40:51:12:7e:cd:fe:44:14:81:98:b2:3d:85:
         ce:c6:3f:1a:7e:2f:d7:0a:7c:a8:39:c6:4b:a8:d4:c8:88:9e:
         8d:96:b2:d5:72:45:77:6e:5a:bf:b0:8b:5f:ad:14:a5:48:1b:
         0b:30:bd:99:86:d8:c5:ef:14:31:8e:67:68:3b:5b:60:1b:05:
         98:6b:41:fa:19:40:5d:27:7c:e3:e4:3a:f0:c1:e3:86:3f:b8:
         c7:64:d3:6c:bc:3e:ea:d1:a6:8e:dc:2a:b8:6d:ec:86:e6:97:
         9b:ec:dc:85:ae:e4:f2:fe:df:d2:4a:8e:de:f8:9e:ad:01:0b:
         42:8d:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:14 2024 by rpki-client on console-ams.rpki-client.org