Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa
File:                     74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (raw, json)
Hash identifier:          y4spxsKMuKjng0OY2bveYj1ObjM1A3UlGaa7zLK+W4M=
Subject key identifier:   9E:ED:58:17:B8:7B:62:6C:5D:7F:3C:0F:D6:88:C0:46:BC:52:5E:BE
Certificate issuer:       /CN=a3398dc1-de03-4844-957b-e882d7878ae2
Certificate serial:       010D0C9F43285845B21E290577E3539FBD99F1C0
Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        162.218.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:29:05:77:e3:53:9f:bd:99:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=8b896055-2cf8-4a0c-8ff9-f57f7c786b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:9a:83:7a:d3:5e:a6:db:60:fb:de:38:52:
                    58:bc:1d:c1:79:b8:f8:5e:c4:c3:e2:39:e1:db:35:
                    4b:08:6c:1d:69:f9:11:92:d7:f6:53:05:3d:4f:92:
                    17:c6:cb:12:8f:05:54:bf:58:38:bd:b0:9b:c8:3b:
                    4f:2e:31:e1:ee:89:ff:d3:97:3f:a9:f7:79:19:e3:
                    84:49:3a:e3:fb:8d:15:e9:9b:47:1e:ac:a2:87:25:
                    35:96:c3:17:1e:4b:cf:ae:4a:1e:e8:88:1f:b7:1a:
                    93:ad:c3:c5:f4:eb:41:10:dc:ff:55:1e:94:95:c9:
                    57:d3:27:cb:44:58:4b:81:e9:05:35:3c:51:eb:62:
                    2b:60:c8:6c:b2:3b:c4:d0:ac:43:96:0a:db:ed:4c:
                    52:10:90:0d:fd:a1:71:12:c5:e7:28:11:81:0c:44:
                    f4:88:98:77:54:a5:da:13:be:ad:83:a4:07:fa:27:
                    18:f4:7d:64:e9:4b:1f:23:ec:f9:15:ae:b3:e6:b9:
                    4b:3a:20:17:97:60:eb:80:99:a0:ea:9b:f8:b2:da:
                    bd:46:81:74:db:34:11:68:48:4d:68:94:61:15:5d:
                    4e:41:1a:70:b0:b5:b0:83:d6:1a:5d:86:f1:56:18:
                    c1:26:d9:17:db:d8:d0:6c:ad:45:33:cd:b0:52:26:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:ED:58:17:B8:7B:62:6C:5D:7F:3C:0F:D6:88:C0:46:BC:52:5E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl

            X509v3 Authority Key Identifier:
                keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:10:60:2e:01:a7:36:a2:16:1b:26:7f:56:37:21:82:24:
         f0:75:a8:97:54:46:eb:66:bc:1b:b9:b7:a5:54:a7:06:28:46:
         d9:f6:3d:f0:d8:96:01:f3:ce:3f:e9:67:cb:83:20:21:a6:bd:
         27:74:c1:41:9f:86:88:e6:ac:24:a2:31:de:14:c3:f9:47:47:
         11:09:29:62:3b:60:2a:51:52:bf:1c:1c:01:e1:2c:86:fd:18:
         e3:73:3d:b2:b4:04:87:2f:1d:4e:d3:24:e1:22:59:43:9b:de:
         6b:7c:59:45:75:cd:b6:89:94:f0:e7:ab:64:76:8a:51:dd:56:
         df:6a:ee:11:a9:87:37:1c:7c:a6:41:c2:4a:83:c5:4f:97:7a:
         fd:d5:0a:64:28:7d:12:a6:8f:bb:9f:d6:73:2c:4d:8e:5c:8b:
         ba:30:1f:1d:9d:29:4e:78:83:6e:f7:6a:55:76:51:02:a8:7e:
         46:c0:a4:07:3c:e8:0b:cf:5b:66:ed:12:6a:4f:fd:9e:d7:26:
         2f:39:d1:8d:c8:9d:2b:49:a4:ad:a4:e1:17:4c:d6:5b:12:e6:
         0d:45:1d:4b:c6:b9:81:9e:ff:f1:ff:0b:b0:f3:b5:a7:55:7f:
         ac:bd:a9:a8:06:03:69:57:35:3c:6f:fc:4f:9a:61:93:b9:a5:
         3b:8e:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:54 2024 by rpki-client on console-ams.rpki-client.org