Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4f34dfd9-97c6-3b67-b698-79f5afcfdde4.roa
File:                     4f34dfd9-97c6-3b67-b698-79f5afcfdde4.roa (raw, json)
Hash identifier:          VMsM4cdK1xOoBqbYh6Hx39E2+j2JwKIOYLnBstUfJx8=
Subject key identifier:   F5:BA:BB:75:FD:E6:6D:16:68:06:59:F6:44:34:32:C1:CB:36:A7:0D
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584511B593A0A1043A6D2B219080
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4f34dfd9-97c6-3b67-b698-79f5afcfdde4.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     21433
IP address blocks:        170.251.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:93:a0:a1:04:3a:6d:2b:21:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=ba1e4440-442d-42dc-b4b4-79a6f193879a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:3d:ad:50:8b:fc:8d:78:55:aa:3b:05:bd:
                    0c:75:45:65:93:43:44:3e:0e:5c:5c:96:68:cf:b0:
                    7b:6d:ff:5d:ea:96:96:8a:a6:c1:82:cd:c8:3c:9d:
                    d9:46:4c:c4:a4:fc:20:d8:ac:3a:23:6d:26:d6:90:
                    48:bf:f5:69:e7:f3:58:d4:c1:c2:29:7a:54:8a:d9:
                    2a:2d:2b:12:47:d6:d8:0d:d2:f4:e2:f6:9c:c6:09:
                    ed:9b:9e:6a:6f:25:01:2a:1d:ce:9c:02:11:e0:6d:
                    62:e6:04:08:5f:5a:54:d6:e2:50:80:4a:89:89:3d:
                    8e:13:db:1b:15:75:a4:5e:22:a4:ec:c5:33:a9:31:
                    e1:ee:4a:6c:d0:4c:98:7a:45:8e:00:d0:23:07:27:
                    f5:cd:8d:d4:b5:aa:d2:53:72:e2:ec:e3:20:5f:3d:
                    4a:35:2d:94:a5:ce:11:77:92:4d:7c:1b:52:12:34:
                    ac:2b:32:47:e2:f2:63:80:c7:25:9b:a2:e8:29:51:
                    9c:e9:16:a7:49:13:c1:af:ad:4d:ff:b6:5f:92:47:
                    0c:68:c2:d4:1e:64:bf:ae:58:ba:67:75:52:18:d1:
                    6e:e3:f2:3f:66:ae:85:2b:50:ad:69:2f:e2:b8:d4:
                    d2:ea:44:5b:4c:9f:20:51:c9:eb:6a:ba:e1:4b:b1:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:BB:75:FD:E6:6D:16:68:06:59:F6:44:34:32:C1:CB:36:A7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4f34dfd9-97c6-3b67-b698-79f5afcfdde4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:51:02:5b:71:71:40:72:dc:b8:d1:c5:5f:23:97:e9:98:64:
         f4:fa:16:c5:3e:ed:8f:84:cc:f1:c0:c9:5f:a4:b1:d7:32:92:
         74:e2:1a:c6:f2:ac:11:d0:f3:86:c3:cd:41:65:66:fa:89:05:
         44:29:ff:1a:2f:c2:34:68:ad:ed:b8:9b:5e:da:45:a9:4b:2a:
         f9:0b:82:be:9e:30:ea:cf:52:3b:18:2c:81:48:db:cd:ad:15:
         31:a6:2f:0c:09:e3:88:7c:c3:09:d1:86:92:cf:7a:1a:73:6b:
         56:06:e9:49:e3:d5:53:0b:84:1f:8b:1e:2e:82:24:f3:08:35:
         34:23:b8:6a:f3:1b:ff:3e:ea:5b:df:06:2a:90:56:30:7b:4e:
         13:dc:73:3b:e1:5d:fe:99:d9:d1:64:dc:7e:e1:ad:15:c3:ea:
         9b:98:c1:c5:ff:fd:55:1c:63:82:b6:25:62:4d:ee:c2:c0:f7:
         03:8c:72:68:8c:c1:30:8a:f6:f6:00:fc:c2:f0:ba:95:17:43:
         aa:b2:38:08:69:33:8f:0c:bd:b5:82:fb:68:0c:90:8b:94:76:
         7f:71:2a:70:97:66:ed:83:0c:6c:52:fb:d8:11:cd:37:50:04:
         0d:e5:3b:fa:88:38:09:4b:80:18:c2:b1:aa:9f:82:7e:bd:f7:
         64:c8:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:10:24 2024 by rpki-client on console-ams.rpki-client.org