Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0450e130-7341-3bb2-897b-1b8fb4a65167.roa
File:                     0450e130-7341-3bb2-897b-1b8fb4a65167.roa (raw, json)
Hash identifier:          O88iTRmdXPlQknmRrp/It9AjAmGuOOIkfA4SlOfrqro=
Subject key identifier:   B7:5D:99:D1:0B:0B:AF:BE:40:74:6C:AD:A0:EC:01:3C:4A:A4:13:8F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285845D461A2AE9B189FC892A6DB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0450e130-7341-3bb2-897b-1b8fb4a65167.roa
Signing time:             Fri 10 May 2024 19:34:10 +0000
ROA not before:           Fri 10 May 2024 19:34:10 +0000
ROA not after:            Thu 08 Aug 2024 19:34:10 +0000
asID:                     15083
IP address blocks:        170.62.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d4:61:a2:ae:9b:18:9f:c8:92:a6:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 10 19:34:10 2024 GMT
            Not After : Aug  8 19:34:10 2024 GMT
        Subject: CN=7114b049-f095-4896-a692-45546ca448b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:57:41:58:27:1a:08:b3:88:c3:e1:6b:99:7a:
                    1a:7a:bf:ab:ff:ce:f4:70:01:d2:8d:c0:b5:82:78:
                    0c:dd:55:5a:89:0c:fb:5f:a4:ca:31:57:6c:c0:ba:
                    ed:fe:ee:af:bb:08:0d:81:17:71:cb:b3:ef:c6:3f:
                    bc:46:04:86:79:05:a3:63:de:4f:42:a8:b8:5b:4b:
                    98:42:bf:ed:34:a5:5b:46:27:78:4c:cd:a2:2d:c4:
                    6c:4d:f7:05:5e:7d:cc:82:37:86:bd:a1:83:b0:5b:
                    fb:ee:cd:51:7e:81:1e:2e:74:1d:3b:49:27:15:74:
                    43:ef:ad:8a:43:34:c3:73:40:a0:5b:6a:69:2d:4c:
                    a8:4d:17:68:6a:f3:20:3e:dd:b7:02:b0:47:75:d9:
                    a5:ec:2b:0a:d5:f7:51:c5:f9:46:74:ed:96:90:b8:
                    e8:ca:20:83:12:1c:bd:f4:1e:d7:45:e2:ff:72:e7:
                    67:ce:c3:20:43:7d:b3:bd:31:32:e8:8e:52:1d:7f:
                    98:c1:4f:c2:d3:28:af:73:c0:4a:13:bc:64:63:dc:
                    19:5d:05:8c:cb:17:5a:62:4a:3c:79:6a:c8:e0:2f:
                    b1:2f:97:75:de:7e:a2:7a:e9:3f:4f:fb:58:56:55:
                    51:13:7f:89:a8:89:ed:ba:3a:72:0d:2e:07:fd:8c:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5D:99:D1:0B:0B:AF:BE:40:74:6C:AD:A0:EC:01:3C:4A:A4:13:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0450e130-7341-3bb2-897b-1b8fb4a65167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:27:d4:91:ae:f2:50:37:ef:15:09:64:19:28:be:f5:62:f8:
         8d:04:d5:ac:ab:bd:ac:1c:b6:cb:4a:e5:85:d8:b9:30:c8:52:
         bc:9e:ae:6d:c2:ba:51:e3:32:4d:05:1e:7b:33:ff:3f:17:ac:
         f0:55:a7:f7:53:e3:b7:10:e0:77:2c:fa:ca:88:69:ab:04:f8:
         41:df:2c:4a:96:be:9c:65:b7:1c:b3:fd:87:74:f2:db:46:90:
         16:29:a9:26:0c:e9:35:47:bc:71:d8:a2:dd:39:98:98:ac:9b:
         57:e0:62:7f:23:51:07:7f:97:7d:bf:57:c8:5c:88:db:a5:1a:
         72:67:cc:ba:a5:85:a0:ee:5d:f1:52:c0:9a:40:1e:78:df:65:
         31:ef:fe:d5:87:05:83:8f:8c:d8:24:ed:0f:d3:09:a0:ca:cc:
         71:5c:6d:8e:da:a0:e9:1f:a5:3c:7e:ce:a1:2e:b9:1d:d8:ed:
         a4:0c:17:c1:e3:61:d0:e5:48:04:f8:32:31:77:13:32:1d:a6:
         a4:0c:f6:e5:c4:26:d1:f5:e5:3a:a9:91:27:76:ac:3b:bf:48:
         46:fd:ad:23:a6:57:2e:9e:2c:ef:ce:2a:b2:f0:0f:30:20:a0:
         6c:5e:1c:67:a7:45:ce:c7:46:f4:6f:eb:02:02:95:fe:c3:79:
         01:9c:d5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:42 2024 by rpki-client on console-fra.rpki-client.org