Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa
File:                     061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa (raw, json)
Hash identifier:          pU3X4bQH0mNR12r/cjKEDP+e0skE7JLssjXpgFgkdmc=
Subject key identifier:   09:90:16:56:90:B5:C3:C7:A0:FE:F9:D8:16:30:07:96:50:86:8D:97
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D2BFD73AB97211346F95A76
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa
Signing time:             Tue 09 Apr 2024 13:50:45 +0000
ROA not before:           Tue 09 Apr 2024 13:50:45 +0000
ROA not after:            Mon 08 Jul 2024 13:50:45 +0000
asID:                     16696
IP address blocks:        147.129.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:2b:fd:73:ab:97:21:13:46:f9:5a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 13:50:45 2024 GMT
            Not After : Jul  8 13:50:45 2024 GMT
        Subject: CN=7ce9e682-4b9c-4af3-9cab-3204b1a10d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:99:3f:db:ed:09:c6:c7:27:85:5a:5e:d4:bd:
                    ec:5d:8a:64:76:22:35:0f:80:6b:4a:02:11:64:3f:
                    6c:57:b4:d7:5e:5b:28:42:9a:84:93:94:17:b4:06:
                    a1:66:3d:df:94:c6:66:25:fb:2b:d2:e9:72:83:18:
                    6e:48:06:d4:97:e3:b7:9e:fe:76:f3:0e:23:55:0b:
                    c0:ea:fc:52:6f:00:95:e6:05:3a:7c:49:fd:44:b5:
                    8d:88:ee:15:da:0d:ed:9e:23:13:6c:e7:51:61:bd:
                    09:6c:2b:a7:41:9e:e2:6f:cb:3f:70:1a:a5:bd:b5:
                    cc:cf:f0:b2:fb:94:9d:80:50:0a:8f:4b:69:fe:d8:
                    ee:c2:d8:cf:b2:30:c1:0d:eb:9b:83:5b:d3:3b:53:
                    cf:fe:c7:ad:69:c6:a5:91:69:b8:5b:91:9c:7d:ba:
                    66:dc:5b:d0:12:11:50:e4:50:47:ca:61:46:f5:cc:
                    19:91:ee:bf:03:ea:c5:0b:9d:ee:30:a8:1f:96:3d:
                    a9:39:e1:5b:9f:c0:43:58:33:d0:58:2f:b2:70:76:
                    20:78:2e:cf:19:c2:e5:c0:b9:e2:1e:06:b8:e5:f3:
                    1c:7e:67:b1:d4:48:a2:2b:bd:f1:a0:6e:11:5a:3e:
                    1b:d4:0c:de:cd:28:15:16:19:85:bc:df:27:2d:94:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:90:16:56:90:B5:C3:C7:A0:FE:F9:D8:16:30:07:96:50:86:8D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.129.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:32:65:22:ac:bd:85:33:2d:ea:85:e5:85:2f:cd:97:0f:
         da:4a:48:b1:2e:42:91:f1:05:02:45:98:28:ef:db:83:9e:a5:
         11:1c:67:65:72:25:45:13:92:1c:a0:0d:f2:fe:eb:27:36:94:
         9d:27:64:fe:6a:66:74:d7:7c:de:d6:74:41:e3:ee:68:14:74:
         dd:46:93:e1:2e:f7:1a:86:37:6b:33:86:79:25:18:81:1a:8b:
         c5:14:fb:b8:a9:8e:69:68:bc:88:c9:25:db:f3:78:ab:aa:41:
         dc:13:5b:36:37:1a:ef:4d:82:75:39:24:ec:c7:52:09:5d:69:
         b3:33:db:91:4b:4a:92:1d:b7:d2:7b:f7:f8:e9:11:f7:a4:24:
         96:cf:8d:9c:e6:ad:d5:2e:e4:15:3b:66:00:70:d3:7c:83:76:
         4f:ed:94:71:c9:c6:6a:f1:9c:ec:e2:8c:73:59:59:a0:cd:0a:
         d4:08:e6:b5:52:a7:8d:6c:25:eb:72:75:70:53:8a:6f:e5:63:
         e8:f9:a3:47:a3:e8:9c:07:80:b0:a6:67:60:8d:82:d4:df:e7:
         d4:1e:b5:f0:f7:3e:7c:3a:c4:9b:77:f3:c4:bd:ca:fa:53:e5:
         27:c4:f8:2f:94:4a:fe:21:94:8e:4d:e8:28:04:df:28:8a:4f:
         b3:55:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:54:54 2024 by rpki-client on console-fra.rpki-client.org