Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa
File:                     01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa (raw, json)
Hash identifier:          VTgf0+N/MVrv3x9sv5p42u0sbiQpZlWZCOkkb/Wrz5k=
Subject key identifier:   40:C9:82:19:0A:1C:44:F5:7C:0D:B0:A3:CF:57:FB:24:2F:DE:70:88
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F432858459D2DE9E73AD430E31DCC6780
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     23158
IP address blocks:        74.221.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e9:e7:3a:d4:30:e3:1d:cc:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=f582dab2-9183-43d1-afb0-54788458258a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:b7:a0:c5:71:2e:16:9e:dc:60:50:75:bc:
                    a3:23:f6:2a:f9:fd:72:f8:1d:6a:27:58:f7:b3:b6:
                    a3:24:66:3e:53:3f:e1:56:1b:37:a5:a7:25:66:4a:
                    8a:34:d5:d7:c8:29:58:a9:bf:05:d0:91:29:98:ab:
                    d5:35:76:57:5a:5c:45:a5:27:b2:ec:f7:3a:43:d0:
                    8b:74:ca:53:f8:5b:56:6d:4c:e5:c6:23:89:d6:f8:
                    6b:b4:56:43:f2:b3:a6:ed:5e:23:da:bb:ac:89:a6:
                    c2:01:45:7d:ce:0e:86:ad:9a:6d:f1:c6:1a:f3:c3:
                    1f:fc:74:58:b5:39:15:64:cb:0b:8a:83:0b:46:b1:
                    c5:0f:35:5f:11:96:8d:89:c9:4b:f6:01:af:9b:c6:
                    bd:23:5b:b6:c0:22:4e:80:53:7f:83:3c:f4:f5:f7:
                    13:b6:3d:4e:5a:83:cc:34:68:38:1c:8c:8d:09:89:
                    9e:30:c3:9a:fb:1b:fc:1e:90:b7:93:d0:7e:ad:1f:
                    6f:e7:20:64:6d:e6:67:4c:80:60:e5:1d:6b:ee:7a:
                    f6:db:67:b6:b7:4b:60:46:30:26:36:7d:b3:8d:47:
                    07:c6:6f:c0:4b:e4:88:7a:41:cb:d9:6c:a7:6b:91:
                    d7:07:95:62:0a:23:77:9b:26:e9:0f:d0:09:2a:eb:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:82:19:0A:1C:44:F5:7C:0D:B0:A3:CF:57:FB:24:2F:DE:70:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:58:be:1f:9f:7e:88:7d:17:35:e8:ac:00:2b:c3:13:76:3e:
         a7:a7:5b:a1:b7:1a:66:6f:2a:2d:34:51:35:93:b1:a5:22:a8:
         66:a0:32:59:c6:7c:15:9a:35:bf:41:69:e5:b6:9f:f7:b7:09:
         f0:c0:47:0d:fe:d9:32:ef:9f:1f:97:a6:7c:ca:cd:8f:e3:0a:
         63:69:b4:ee:54:ca:23:cf:38:73:28:02:d1:1f:02:25:98:04:
         6d:b4:fc:ae:86:97:72:82:05:5a:ad:dd:02:05:51:f3:1a:24:
         bb:df:28:94:89:8c:ea:bb:21:3c:80:b6:c8:c3:b4:e1:3a:71:
         06:32:6c:6c:05:c2:f9:4f:ec:87:47:aa:8d:83:70:c1:7e:4f:
         b9:05:cd:5c:28:64:37:73:3e:ae:0f:4a:d2:04:1c:d0:3f:52:
         b1:6d:8d:11:40:12:a1:17:ac:42:02:c7:49:ac:79:37:d6:cf:
         b9:d6:2c:5b:17:fb:11:28:f3:d4:81:b1:54:76:ca:10:45:6b:
         fa:ed:8f:d2:77:a5:46:fc:06:34:96:6e:93:48:03:a7:81:4b:
         85:66:7f:83:62:d4:82:a1:38:7a:e5:6e:33:21:84:a5:22:12:
         98:ed:4e:62:46:26:88:65:99:52:17:23:ab:d8:02:31:a6:a6:
         39:02:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 18:38:34 2024 by rpki-client on console-fra.rpki-client.org