Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa
File:                     1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (raw, json)
Hash identifier:          YOqWEIKEM735mbbxDRul92y+xd9xq1nh4gNZN0Y6+3I=
Subject key identifier:   EE:FB:C1:67:01:A5:C2:21:13:00:C6:1C:BF:E6:BE:AD:4B:58:55:DD
Certificate issuer:       /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48
Certificate serial:       010D0C9F43285844EA9FF4003CA0E9F87E123380
Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     0
IP address blocks:        149.112.0.0/24 maxlen: 32
                          2001:504:104::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:f4:00:3c:a0:e9:f8:7e:12:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=029f57d1-614b-44ae-9a32-7a036acac13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:62:d2:4f:f2:61:7f:74:72:68:f1:cb:08:
                    97:9d:f2:0d:1f:2f:fc:31:92:e9:8a:be:f0:08:4d:
                    16:87:00:6c:93:97:be:a0:02:2d:05:b1:3d:e3:0a:
                    c9:ca:d4:d9:06:eb:8e:e8:21:40:43:ab:6a:a2:ef:
                    1d:59:29:a8:37:88:3d:48:87:fc:00:d7:9a:f4:e7:
                    8c:d3:a0:d6:80:e4:07:5a:2a:5f:32:5b:7f:cc:ab:
                    92:4c:c6:2c:76:db:0e:73:d3:a7:4e:6e:c8:4f:f4:
                    a1:ed:59:59:16:1c:84:f8:fd:19:c0:8c:de:06:90:
                    1b:2a:87:26:68:81:6b:7f:df:82:89:47:ab:19:4b:
                    69:c8:9b:0f:37:76:5f:25:be:6f:6b:5a:04:60:e3:
                    b6:ad:cc:48:c1:ae:96:82:f2:28:66:7f:bb:fe:f6:
                    71:23:54:3c:74:7b:ba:a1:0f:8e:1e:cf:0f:94:c2:
                    aa:8c:e0:5b:07:3f:a7:8d:f2:7a:d1:47:8d:ba:e5:
                    1d:1d:54:5b:dd:61:79:30:bd:cb:14:fe:06:c7:7c:
                    69:de:84:44:0b:c3:83:3e:e7:95:d1:45:04:a1:19:
                    1d:1d:42:fd:1a:fb:98:f2:aa:ff:87:dc:e3:32:63:
                    49:93:73:bf:6d:c9:ee:60:49:06:89:fb:d4:d7:e3:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FB:C1:67:01:A5:C2:21:13:00:C6:1C:BF:E6:BE:AD:4B:58:55:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl

            X509v3 Authority Key Identifier:
                keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.0.0/24
                IPv6:
                  2001:504:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2e:e1:1d:f3:8a:f0:d8:63:ed:28:6c:46:4f:f3:60:ab:0c:
         57:40:bf:6a:16:bd:1f:1a:e1:3f:56:b5:10:88:32:53:fa:d7:
         8b:2a:cc:f5:73:d3:51:0c:6d:ee:d7:66:5d:be:f9:24:be:f1:
         7d:7a:ef:1c:5f:bc:85:b8:f3:ee:8e:bc:0c:9d:b5:a0:46:cf:
         5a:67:c2:30:65:88:70:e4:08:9b:cd:28:6c:b3:6d:15:91:60:
         f0:ca:52:84:9d:45:5c:1d:c6:bb:35:54:9d:d3:8b:0e:cd:2f:
         14:91:27:6a:5a:7d:d1:b0:db:fb:df:f6:a0:0c:66:2f:0d:09:
         42:ac:55:47:10:f2:56:27:5d:ca:82:cf:48:fd:64:9d:7c:b5:
         16:ce:9f:c5:75:d0:22:80:2b:36:af:11:78:11:d8:a6:40:98:
         e4:f4:fd:d5:6a:55:65:41:05:80:60:6e:e3:ea:d1:d7:89:28:
         83:6f:a2:71:69:ad:90:a6:3d:63:61:93:c8:56:38:57:b7:c7:
         a3:c3:20:80:8e:2f:ac:33:42:5d:e4:e2:e2:ca:7d:7e:bf:41:
         3b:b7:2e:bc:bc:0c:29:4a:86:2e:33:30:f8:c6:8f:c3:4a:5f:
         a6:61:5f:20:c6:2a:73:4b:6d:0a:10:0a:ad:0b:8e:4d:44:0c:
         af:29:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:32 2024 by rpki-client on console-fra.rpki-client.org