Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa
File:                     4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa (raw, json)
Hash identifier:          D0UOH9viP3gVAalV6BU3qc2znBtQkgG8N5lbJrn3b9g=
Subject key identifier:   A7:D4:E8:1E:17:A5:D7:D7:14:97:3C:62:5F:F9:24:56:86:6A:F9:EC
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285845B7B37988ED903451B8D73680
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     36231
IP address blocks:        148.59.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:79:88:ed:90:34:51:b8:d7:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=65fd5f48-efd6-46c8-b064-a004eea046ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:4a:84:38:cd:68:c5:46:83:18:05:19:89:
                    b1:52:27:5e:66:88:08:b4:07:fb:ee:77:46:a3:c7:
                    ec:56:fa:7b:86:87:31:c7:01:74:f7:8d:25:4b:1f:
                    1b:90:84:5a:4c:0a:4f:62:b4:31:5e:1f:40:4e:ac:
                    8e:42:a6:80:64:6e:7b:de:d3:8c:55:fd:6e:4d:35:
                    a7:47:22:a1:a1:f3:51:58:50:70:7f:d5:45:85:68:
                    81:f6:14:29:64:50:98:56:91:7b:7d:7e:c4:34:d1:
                    35:b7:88:3b:23:d8:43:f5:71:ba:71:2c:23:d0:89:
                    e3:9f:a7:f3:0d:71:66:fd:15:76:0e:51:0d:ba:3b:
                    b2:dc:cf:71:26:b1:de:23:84:5b:33:c2:2f:3b:40:
                    14:d8:c7:0f:a3:20:0c:89:49:12:10:fa:e4:9d:81:
                    c4:21:db:6e:14:bc:3f:de:ee:9d:14:ce:f1:6b:5a:
                    b8:ea:91:d9:ee:ad:cd:ef:5c:6b:09:af:b3:53:33:
                    b1:49:22:aa:56:74:b8:db:dc:62:c8:d6:67:e9:5d:
                    2a:59:eb:ce:0a:04:66:70:e6:2e:40:73:f6:86:18:
                    ed:da:f1:b6:1c:8b:3c:0b:5c:8d:64:bc:57:57:08:
                    e7:17:a2:fc:38:b3:ef:c2:62:9e:c9:19:83:35:5f:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:E8:1E:17:A5:D7:D7:14:97:3C:62:5F:F9:24:56:86:6A:F9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:7f:5a:60:bd:62:e8:0e:c2:5b:cd:d6:8c:71:d8:18:c2:
         cb:5a:ca:a6:a0:c8:f1:0b:45:43:20:2c:e3:60:ea:4d:63:ce:
         c7:5d:bd:89:bb:20:dc:08:e7:a6:74:7f:ef:51:a1:66:ea:7a:
         47:4d:bf:1b:9a:ac:2a:64:6e:e9:38:4b:4a:b9:61:45:37:11:
         76:07:eb:06:a2:e2:af:f7:c5:67:93:84:3c:08:65:0e:77:1d:
         0a:65:74:d8:a6:50:85:fc:fa:6b:34:4e:1a:f3:b0:52:51:8a:
         9d:a1:a8:77:97:44:e2:b2:e5:6a:a4:79:3d:7b:d6:37:78:7c:
         c3:ec:12:5b:aa:12:f8:cd:4c:82:f8:1b:1e:f8:b8:14:4f:6e:
         eb:1c:74:d0:2a:61:db:7d:ba:0f:a5:60:c3:df:89:cf:29:c7:
         5e:11:a7:ad:b2:35:22:da:f1:39:1e:6b:a4:39:a5:2c:31:1d:
         b6:73:46:a1:fa:1a:ae:36:27:81:b2:86:94:41:9e:99:79:28:
         3c:96:67:0b:79:b5:5f:c0:8e:c3:f6:56:5d:4d:78:9c:b4:94:
         3e:97:6d:56:bc:ec:e1:bf:86:cf:7f:20:f3:0c:fe:4f:ef:d3:
         49:e5:bf:17:fc:2c:72:11:d5:42:93:d2:9f:05:d4:5c:3f:b0:
         8b:3b:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:44:52 2024 by rpki-client on console-fra.rpki-client.org