Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa
File:                     9ecee302-59db-3fe2-8434-966c474e0474.roa (raw, json)
Hash identifier:          tUzs5DDvRqVyhU0SnURZsfvtS40in7ZFrDGCX45L7Zc=
Subject key identifier:   0A:91:D2:E7:76:D0:F8:F1:92:C3:E9:19:A4:B5:D3:B8:31:35:89:69
Certificate issuer:       /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial:       010D0C9F43285844DB4532FE8009FFEF952EC780
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa
Signing time:             Sun 11 Feb 2024 14:00:30 +0000
ROA not before:           Sun 11 Feb 2024 14:00:30 +0000
ROA not after:            Sat 11 May 2024 13:00:30 +0000
asID:                     0
IP address blocks:        149.112.17.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:db:45:32:fe:80:09:ff:ef:95:2e:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
        Validity
            Not Before: Feb 11 14:00:30 2024 GMT
            Not After : May 11 13:00:30 2024 GMT
        Subject: CN=35ea82a7-a8d8-4d92-87da-aebd955358f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:1c:8d:00:9b:66:21:7d:e5:78:59:9e:5b:
                    ed:78:de:3b:13:a9:69:c4:f6:16:de:17:59:2b:43:
                    ff:cb:9f:26:ae:45:36:18:d7:ef:89:d2:51:78:ff:
                    93:c5:4b:ff:9f:1d:aa:7e:10:e9:c2:39:0f:f5:e1:
                    46:bd:c2:b7:eb:2d:43:3d:e2:9f:2d:46:79:e3:b8:
                    51:a4:69:b9:18:10:17:3c:0e:0e:48:4b:e0:09:5d:
                    4d:79:dd:58:ec:7a:64:ef:d2:4d:2b:12:32:13:ce:
                    79:ce:61:79:c5:07:8a:f5:e7:af:b6:18:06:6c:0d:
                    53:8f:33:50:73:46:24:90:d2:fa:72:1b:28:d5:ba:
                    f7:3a:73:cd:18:31:26:fe:d8:94:42:87:88:f5:84:
                    89:70:70:a1:3f:80:e4:cf:87:e7:f6:2e:11:04:b4:
                    d3:a0:78:0c:9b:2d:51:72:19:07:47:1d:ac:2b:5d:
                    59:25:08:1f:ed:83:a0:55:83:a2:e4:50:67:fd:c8:
                    db:db:6c:12:a9:95:42:96:1a:f5:ce:b4:f1:9b:e7:
                    b1:42:5f:c7:bd:b8:61:72:a3:8a:f0:98:67:db:99:
                    bd:71:27:9a:73:ad:1e:cd:33:06:85:41:a7:02:aa:
                    ba:dd:ec:c1:1e:cd:39:d9:0b:99:8e:62:e2:df:fe:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:91:D2:E7:76:D0:F8:F1:92:C3:E9:19:A4:B5:D3:B8:31:35:89:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:cd:55:2d:47:62:51:46:93:e4:58:84:25:17:32:18:6d:
         d6:c0:61:50:43:44:be:fc:cd:24:46:09:36:c4:60:14:d1:f0:
         b7:1f:6c:64:5f:28:44:e8:b6:e9:a7:3a:da:d6:cd:eb:67:c5:
         b6:b2:53:25:33:50:b2:38:49:20:fe:f0:f2:7e:90:14:6e:22:
         e9:3b:3b:23:0b:b6:85:9c:2e:01:ee:84:83:d5:be:65:6a:be:
         41:31:2a:07:52:dc:15:9a:c1:df:47:a7:91:1b:a2:ea:60:1b:
         3b:cb:13:c8:57:97:37:a8:43:0a:bd:5b:8b:bb:c8:a5:12:f2:
         16:32:c8:5e:84:83:af:6d:9b:f9:19:11:e0:4c:6a:81:54:cf:
         88:25:9f:16:cb:93:b5:5b:35:97:ee:b3:d5:55:4d:5e:88:49:
         5c:da:4a:99:f2:68:0d:e6:7f:8a:18:1d:37:31:00:44:85:34:
         19:68:ea:4a:c3:01:3f:8a:36:2a:37:cb:d1:f6:6e:4d:50:26:
         5f:36:09:1e:60:16:f1:a9:51:50:22:b7:08:11:cc:47:12:cd:
         0f:39:b9:0d:8c:35:27:2c:c5:b7:8c:f0:10:d1:8c:f5:2f:7d:
         aa:7e:02:2e:4d:da:a4:3a:1e:ec:b7:3b:6b:8a:ec:d0:ef:2d:
         73:9b:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:28:18 2024 by rpki-client on console-ams.rpki-client.org