Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
File:                     20885ce4-5a76-39c3-86d6-c90d2b265830.roa (raw, json)
Hash identifier:          Txdbt0ErLyXZIzWkVM7HiNiWaBjo9lJpg6IiWLbmsEg=
Subject key identifier:   CC:58:A9:36:A2:7A:9A:8E:01:96:38:63:B6:8F:D5:48:12:9F:97:FD
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F6AC52B079E5EB717C00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        174.137.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:ac:52:b0:79:e5:eb:71:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=c5a26610-8e9b-4c92-8d7b-9eabf37c918c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:07:38:fe:12:03:7e:dd:04:82:be:c8:c9:
                    ba:28:ec:e0:38:78:20:32:ca:1b:30:d0:d9:7c:a3:
                    eb:ba:a8:76:a6:58:49:14:1d:84:72:e1:70:4c:ae:
                    24:23:af:fe:73:cb:d2:7d:3e:8c:55:0c:a9:f0:55:
                    81:4e:e4:d1:48:2b:07:6d:a2:54:b7:52:04:be:aa:
                    cf:a0:d9:c8:23:a0:54:1a:f1:cb:4e:c8:b5:a4:1a:
                    87:09:c4:78:a0:41:1c:33:0a:41:1c:3c:15:c1:33:
                    29:03:56:a2:29:92:da:64:7a:49:62:fa:ef:6b:e7:
                    0b:0a:87:09:23:37:f6:8b:0d:50:5b:22:f2:a5:da:
                    84:03:ae:76:f9:c5:62:ad:99:73:3e:fa:bb:6d:62:
                    9c:95:53:44:79:3e:02:ba:05:dc:11:3c:87:ef:20:
                    3b:92:d4:2d:fc:28:4c:06:8d:21:5c:07:a0:d4:b8:
                    25:43:c7:ad:7d:b0:92:40:fd:38:5f:49:47:d9:6d:
                    ad:07:cf:cc:4a:5f:92:81:f5:ec:03:41:db:66:4f:
                    07:fd:c0:f2:bb:d8:a4:3f:7d:41:88:24:a5:9f:1f:
                    a4:70:00:11:48:10:68:ec:5a:94:3c:bb:e0:43:11:
                    0f:9c:e0:26:3f:3f:80:73:83:a5:96:bf:95:56:12:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:58:A9:36:A2:7A:9A:8E:01:96:38:63:B6:8F:D5:48:12:9F:97:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7f:5c:87:b3:98:bd:f1:35:16:27:56:9a:8f:e5:dc:0b:6f:
         97:fc:f6:81:d5:e0:95:df:52:2c:56:19:9b:db:e2:15:51:7f:
         25:d5:e4:fd:4c:10:ae:37:f2:59:cb:52:3d:a9:12:cb:c0:39:
         81:52:d3:91:1b:19:d8:0e:96:3b:db:fe:98:4b:54:5e:a4:87:
         56:45:8a:19:bc:5f:a0:e8:59:b7:73:30:e7:d1:d2:67:3e:f5:
         62:70:9e:29:4e:e0:1d:24:29:29:9e:9a:c3:43:8b:c4:20:e2:
         ec:ec:2b:55:95:be:b0:1b:e8:a0:41:ab:97:1b:f7:00:ce:0f:
         c2:22:ed:fd:ae:7e:28:1a:fe:e9:b0:d7:da:1a:16:46:c5:a5:
         17:9a:8c:41:64:45:e9:ab:7b:5d:3d:08:1c:0b:7e:d9:2b:48:
         df:71:47:c0:ad:ba:a4:1f:86:f9:22:70:3e:83:c8:25:fc:cb:
         94:08:57:9b:c6:fa:19:19:55:eb:f1:9c:39:3f:27:10:9f:85:
         f6:b3:8d:c9:5b:4a:88:9d:c2:49:36:5a:c4:fc:f2:97:44:2e:
         81:a7:00:41:f4:7a:c4:1d:97:99:5c:3f:29:1a:40:48:ce:4b:
         ff:25:4e:d1:b4:9c:54:82:09:d9:ac:f1:8f:7b:5f:ee:4e:d7:
         c7:da:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:36 2024 by rpki-client on console-fra.rpki-client.org