Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d6f0b776-66b6-3059-992d-12b5f069f30f.roa
File:                     d6f0b776-66b6-3059-992d-12b5f069f30f.roa (raw, json)
Hash identifier:          2icp+BUt1UlnIvs0Le47WuEUWT4c5jMHCXyUdur6y9w=
Subject key identifier:   85:11:13:CD:A8:00:DA:F8:59:CE:59:E2:77:DA:23:8A:6B:8F:A5:AB
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285845CB3E494FDD5330F330384CC0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d6f0b776-66b6-3059-992d-12b5f069f30f.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     4181
IP address blocks:        159.112.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:49:4f:dd:53:30:f3:30:38:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=5f5b9b70-23eb-4f18-b84b-af2a40844a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:b0:f2:a7:7f:f0:dd:c7:0f:04:68:14:f1:
                    15:f5:6b:d9:a5:8f:a2:2b:aa:d6:cb:30:72:34:40:
                    94:65:19:2e:b4:2b:95:b3:3f:22:d4:05:c7:be:5d:
                    fe:41:e2:14:8e:70:6c:ba:c4:09:80:ad:b4:17:da:
                    7d:1e:34:35:48:e1:04:e0:78:03:28:20:e8:29:e2:
                    11:e3:93:3d:77:f4:59:07:db:36:bc:f7:95:e3:9d:
                    6f:02:1e:61:26:48:ce:ac:2e:87:a5:a7:1f:d4:ab:
                    7e:28:6e:fd:fb:17:40:83:84:6c:ab:1d:ad:61:4b:
                    80:8a:4c:f1:73:52:b1:b4:96:51:3c:30:58:9f:74:
                    a5:d3:c7:18:86:2c:4b:73:99:40:df:3e:a8:c8:07:
                    9e:81:82:6c:57:9e:c6:ce:4d:b7:55:14:01:d2:56:
                    77:01:48:d0:a2:87:73:71:fc:14:e4:ee:69:f5:62:
                    2b:bb:57:c6:67:2f:8d:04:f2:e6:c0:67:ca:c0:6c:
                    f2:b8:8c:a7:07:2b:65:59:97:28:a9:54:45:ee:fd:
                    b8:91:44:d6:2f:92:1b:e5:50:6a:f4:0d:f0:87:b2:
                    a4:77:84:5c:a0:11:bb:3a:e0:a3:77:2f:ef:bf:be:
                    a4:6e:51:f5:41:65:0d:9f:da:7b:95:d0:93:12:19:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:11:13:CD:A8:00:DA:F8:59:CE:59:E2:77:DA:23:8A:6B:8F:A5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d6f0b776-66b6-3059-992d-12b5f069f30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:25:30:7c:cf:42:13:e3:9d:a4:89:8b:2d:1f:5d:ed:de:96:
         11:59:a1:1b:41:24:5b:ec:5d:c4:78:a8:9d:c4:aa:b4:18:35:
         61:9b:eb:15:91:0c:3d:9a:ee:41:9f:98:40:17:e2:3c:78:7b:
         49:51:82:a5:e5:db:2a:31:36:2b:58:d3:ca:46:96:ad:cd:56:
         e3:32:74:e0:b5:9c:43:12:ef:e4:54:1a:03:a9:f5:29:9d:93:
         c5:eb:b3:76:fa:7a:e5:70:4c:11:d1:a5:61:5e:7d:b6:92:a9:
         3d:75:ac:3a:50:61:02:ae:e8:5a:53:b2:58:de:5e:a6:d1:22:
         6c:38:82:89:22:d2:9a:73:55:2f:9c:0f:13:b6:b5:cd:bf:77:
         10:a0:5b:2c:59:e3:c6:b3:9e:ac:43:86:2f:02:a3:90:e5:83:
         8e:19:91:0f:7b:88:75:6f:9e:fb:d0:a4:2a:35:05:27:75:37:
         9d:72:79:4e:78:95:e9:a0:8b:05:cd:f8:35:33:59:73:a1:d8:
         d2:2f:11:cf:06:2b:9d:b7:ff:e2:1d:27:ae:7d:91:da:04:a8:
         2a:65:80:d4:e4:87:4c:51:fa:73:8b:49:b4:55:be:7d:e7:ff:
         5a:a5:fe:0b:f2:cd:c9:76:31:bb:40:e5:07:b8:90:09:78:d1:
         66:7b:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:24:08 2024 by rpki-client on console-ams.rpki-client.org