Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa
File:                     30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa (raw, json)
Hash identifier:          zOig1xf1yfniEyR+//g1aViHrFBLV3Nq2UU7JFziBOs=
Subject key identifier:   A0:D8:95:04:34:C0:95:4A:DE:87:C0:63:8E:A6:D8:F5:4E:44:53:65
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F677B9B1224FC25426A0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        174.137.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:77:b9:b1:22:4f:c2:54:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=ec7a49d4-902a-45d4-a682-a2a488f7106e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:64:11:c0:49:11:a3:41:ee:d2:da:5b:90:
                    f2:ac:68:94:8e:b3:26:27:26:26:71:1c:ff:27:08:
                    ba:37:6d:9f:5f:5a:72:58:0b:c8:1b:b3:0c:e3:34:
                    54:a9:9c:11:8b:9a:44:d3:18:00:07:cf:2a:81:29:
                    0d:78:80:a8:08:fb:01:2d:f0:98:0b:32:61:df:3d:
                    b9:cd:90:58:91:09:58:1d:d6:41:59:90:43:84:c2:
                    6b:b5:c6:dd:39:35:34:37:29:a2:1c:0e:06:33:68:
                    7d:a8:97:ef:c8:c4:9a:63:cf:c3:1a:f5:4b:e4:c2:
                    bd:26:68:df:2d:88:a2:42:d7:1a:cd:a6:55:68:e4:
                    c0:01:b7:9f:d4:58:2e:14:eb:1f:20:ab:84:64:24:
                    88:43:4f:77:bc:87:12:ae:21:c4:7b:14:24:7d:ee:
                    16:4a:20:eb:ab:5b:a7:fd:44:b1:ea:89:b2:17:7a:
                    64:fd:7e:4f:bb:56:c4:af:41:30:93:85:72:40:46:
                    6d:32:b7:e2:a1:62:9a:a6:eb:36:51:97:40:1a:04:
                    7e:d1:1b:cc:1e:df:04:59:03:34:17:1f:0c:23:db:
                    f8:f6:0a:fd:ed:c8:fa:ae:aa:de:af:91:e3:ba:bb:
                    b4:56:15:3b:f8:f9:ff:9b:61:5a:3a:c3:12:ff:9f:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D8:95:04:34:C0:95:4A:DE:87:C0:63:8E:A6:D8:F5:4E:44:53:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:22:e3:51:15:d0:8a:6b:71:fc:67:1c:68:83:f3:42:f2:
         b9:dd:7e:e5:68:7d:74:5c:c4:19:80:2f:e6:99:8c:c1:f1:2e:
         88:78:49:20:11:74:68:45:49:cb:74:35:28:cb:c7:2c:4a:68:
         63:82:7a:48:91:1f:a6:aa:72:b1:6d:48:43:28:bb:38:b4:48:
         ed:71:d6:1f:15:bd:42:fe:82:67:84:e5:c9:89:49:40:da:d2:
         f6:6d:f8:8a:92:dc:64:3e:88:a3:a2:e4:52:24:3d:ca:7d:0d:
         e3:48:51:3d:26:28:61:8d:54:56:dc:31:4e:44:97:3f:3e:59:
         87:fd:e3:0b:91:18:99:a4:d7:71:2b:4e:f6:a5:e8:ae:ee:d4:
         63:51:e2:17:f1:27:12:52:0a:59:32:e5:e9:a5:9f:ba:b7:71:
         34:a1:d4:3e:43:c5:f0:63:58:cd:83:bf:6c:fb:4b:37:5a:aa:
         7b:bf:0e:f2:ab:9c:71:61:b5:38:20:fe:6b:d3:d3:27:9f:40:
         c1:74:db:f4:c0:ac:76:97:0e:77:9f:3f:78:00:3c:30:cb:f6:
         cb:1c:c6:39:e1:d7:c6:94:f2:5f:b3:d4:a3:ec:26:67:8f:e1:
         46:5b:33:ff:d8:34:ea:d7:d5:f4:9a:9a:b5:44:b4:f2:1a:75:
         ec:5e:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:20 2024 by rpki-client on console-ams.rpki-client.org