Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa
File:                     f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json)
Hash identifier:          hMbWYU6vAFBx64qvyizKD8hck+vn6xifNBvfKKuXKAc=
Subject key identifier:   E5:E0:95:F4:7E:D0:46:60:B8:5D:1A:83:49:6F:48:C4:DB:C2:26:0E
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F432858459D2DFC2F363DAE3D8A899A00
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        170.225.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:fc:2f:36:3d:ae:3d:8a:89:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=37eb87f6-1faa-4d99-aeb5-7b57c76269c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:69:28:46:09:5f:a8:b9:4b:ae:56:8f:45:
                    e2:38:5f:5b:9b:e1:fe:66:5a:a7:7c:b3:6f:69:6a:
                    8b:ed:79:16:86:23:1f:fa:7f:2a:19:ef:14:b0:d5:
                    88:58:e5:e1:bc:c8:af:bf:58:97:6b:ac:3c:d8:0a:
                    f7:06:ba:25:55:62:cd:f9:fe:2c:e3:e9:67:fd:82:
                    52:c6:30:c9:54:d8:b1:63:a6:4b:5c:80:55:d4:0a:
                    8f:f1:e8:a3:27:51:b3:3e:8b:5a:d5:0c:8a:b8:c5:
                    76:5d:29:fb:3f:0b:e6:f0:fd:fa:ec:f0:97:92:a5:
                    26:b8:cb:5c:bb:ae:5d:00:ae:c6:04:43:94:12:ea:
                    ba:f9:82:a0:c1:a3:05:a8:e9:5f:21:51:9f:c0:d6:
                    71:a3:f6:3e:31:05:11:1b:e4:9f:bc:42:ca:17:9b:
                    ed:d7:8d:d7:a6:c2:ab:f1:c2:63:38:54:24:8b:87:
                    d2:23:ab:a8:b5:8a:43:bf:cc:34:24:9d:54:c3:8e:
                    23:c0:64:fc:ed:8c:66:6f:40:18:de:6a:e0:10:da:
                    43:2f:7a:6c:fd:0d:9a:76:43:fa:74:3f:73:14:f3:
                    05:5c:b6:ca:ab:40:54:6d:57:c8:f7:da:c3:52:70:
                    71:e8:ae:57:26:96:f1:bf:5d:1e:48:fd:bf:c5:2e:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E0:95:F4:7E:D0:46:60:B8:5D:1A:83:49:6F:48:C4:DB:C2:26:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:04:26:74:15:36:8e:5e:54:16:a5:ee:62:ec:69:05:2d:
         1c:75:43:00:4e:24:cc:92:57:3b:b5:52:94:0b:9e:98:d0:68:
         8e:de:0a:cc:4a:14:91:b2:97:50:62:0f:32:e9:21:c3:ae:d3:
         2e:74:45:95:46:81:a4:00:da:fa:de:d4:04:2b:5a:3c:89:c3:
         4b:c3:fa:03:2f:52:b8:e7:54:50:c9:0f:37:79:b5:a3:f5:18:
         46:14:be:cd:0f:b8:ae:b9:b4:38:ca:8c:ec:9e:a4:71:5c:20:
         76:f7:b8:f5:1c:46:ef:56:2c:cd:65:5a:2e:df:18:99:db:db:
         5a:30:c7:8d:a7:1f:23:eb:a0:ef:63:ed:07:3b:38:e3:2c:b6:
         b8:0d:a4:29:c3:a5:36:a0:2a:be:53:0f:7f:6e:4e:e1:c4:3e:
         da:69:d5:24:fa:3c:fb:42:8d:8c:4f:23:e3:f0:74:12:d2:dd:
         58:eb:0e:a2:f5:90:5f:bd:97:4a:af:2a:83:ae:c1:12:62:14:
         a8:57:71:2d:d3:49:e3:06:54:8b:b2:c5:83:14:84:ed:ca:20:
         21:94:76:37:32:4e:10:04:fc:62:17:61:bb:25:25:d2:b9:62:
         2a:03:77:8b:a3:bc:f3:95:9e:a0:47:32:fc:a7:b9:ce:d5:4f:
         76:7f:71:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:24:27 2024 by rpki-client on console-fra.rpki-client.org