Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa
File:                     0c6f1e55-adb4-339c-a85f-5c7779443c43.roa (raw, json)
Hash identifier:          /TQtbse2jeYCHqsDO63+7HthgW4PPf9YsdzV+dPu9Jk=
Subject key identifier:   8B:CC:1A:C0:C5:B7:2D:B5:13:F9:7F:1F:CB:51:5A:E2:B2:2F:DD:45
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584582FB0EB62AB88B7420B32300
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa
Signing time:             Thu 11 Apr 2024 15:47:01 +0000
ROA not before:           Thu 11 Apr 2024 15:47:01 +0000
ROA not after:            Wed 10 Jul 2024 15:47:01 +0000
asID:                     16696
IP address blocks:        174.34.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:fb:0e:b6:2a:b8:8b:74:20:b3:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr 11 15:47:01 2024 GMT
            Not After : Jul 10 15:47:01 2024 GMT
        Subject: CN=c3233a31-1df7-41cf-b60a-215b1e3c617f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:7a:00:d6:cd:70:65:12:33:f0:d9:6b:a3:
                    ab:37:60:20:e0:85:53:8e:b2:90:f9:42:9b:c2:65:
                    e5:6c:c5:47:90:ef:f1:fe:21:07:8e:3c:c7:62:0a:
                    47:d1:0b:8d:58:89:11:3d:5e:ac:0d:15:2e:a8:13:
                    41:2d:32:1e:e4:96:81:67:f7:eb:2c:7c:c6:78:b0:
                    6e:26:24:2a:cd:fe:cb:fe:ce:f9:12:e0:97:0a:67:
                    e2:6b:0b:56:a7:e1:bc:d3:e7:78:8c:56:8f:eb:d8:
                    b5:df:f5:e8:bb:5a:40:ea:ef:bc:98:d7:ff:45:9c:
                    19:ae:a3:2d:37:04:7f:2d:b7:ff:5f:cd:a1:91:44:
                    1d:9a:f6:76:49:a6:1e:3e:95:e4:d8:5d:0d:35:bc:
                    3c:cb:ef:2b:98:8d:f8:6b:d6:35:f8:8a:39:bb:9c:
                    af:b3:1c:f7:18:d3:37:23:00:a9:0f:fa:2b:7d:3c:
                    bc:a0:96:35:35:c2:96:26:55:88:b2:a6:3f:a8:00:
                    c4:c1:bd:0a:95:d7:6b:e4:b8:45:0e:79:a8:3e:18:
                    0f:1a:2e:9b:84:5f:3a:57:fd:44:6a:d7:cd:2e:95:
                    66:21:8f:85:a3:54:5d:aa:87:b3:15:4f:0c:ce:0e:
                    86:43:6e:54:a6:fb:de:f6:76:9e:e8:9d:97:86:51:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CC:1A:C0:C5:B7:2D:B5:13:F9:7F:1F:CB:51:5A:E2:B2:2F:DD:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0e:78:87:0b:05:07:ea:69:5a:4b:2e:fe:39:cb:28:60:1d:
         0e:6a:ec:b4:26:f0:a0:c4:63:8c:f1:0f:f0:9b:7d:8d:a4:db:
         39:97:0d:e1:e9:1d:fe:d2:8f:93:eb:19:af:97:b5:13:48:73:
         65:54:8b:a1:8f:7a:94:e8:77:26:32:68:c8:86:7d:bc:f1:50:
         7a:7b:cf:5f:87:10:34:9e:31:c0:7d:65:45:6c:6d:70:ae:38:
         e8:d3:41:6e:b2:6e:1f:22:4d:d2:2a:02:6a:9f:5b:21:17:9d:
         bb:76:fb:42:af:ab:2a:4d:30:2c:de:77:c8:e3:a6:5d:02:72:
         5f:c9:21:8c:26:eb:54:e8:ee:a7:b0:12:0e:85:2d:62:af:13:
         dd:b0:bd:f1:ea:61:93:00:02:88:cf:bd:4a:9b:a5:ca:09:86:
         b2:15:04:46:2c:37:42:39:dd:d3:4e:33:b9:ca:1c:46:a2:62:
         14:b9:76:b3:8f:11:71:14:84:16:81:dc:d8:7c:64:cf:bb:63:
         de:d5:a2:8f:20:06:5d:02:c5:11:40:60:bd:61:4f:00:2b:19:
         95:a2:b2:5e:a9:75:1e:0e:41:0d:0a:c9:f1:a9:8d:3c:48:de:
         3b:93:6a:a6:6e:fa:dc:5a:19:1b:bb:17:35:44:2a:f3:7c:70:
         74:ee:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:15:47 2024 by rpki-client on console-ams.rpki-client.org