Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa
File:                     6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa (raw, json)
Hash identifier:          XcBlBcVSFaWoLIyxi56kMZmbpbkE6VyE8T51YMEZaJ8=
Subject key identifier:   A3:F1:F9:D8:B8:77:43:24:A5:8A:C7:4F:B8:DE:1F:51:14:BA:8A:BA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285844F9FAB282D0286779EB74B820
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     21859
IP address blocks:        128.14.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:b2:82:d0:28:67:79:eb:74:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=4d2aa0a0-fc81-4511-94ba-4b620c98f26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:2f:cb:22:7e:e0:a7:96:00:cb:fb:fd:c9:
                    c0:e6:15:e8:d4:12:fe:22:51:da:16:cc:3b:89:62:
                    c8:ab:58:8d:b0:a7:f3:47:8e:bc:70:81:a3:8f:db:
                    b8:a0:cb:1c:80:1b:07:13:b0:2c:4f:e6:09:d1:dd:
                    d7:c0:3f:71:b8:3b:b5:5b:3d:b3:9e:27:d6:60:31:
                    11:73:b4:a7:b3:b4:36:75:ca:8a:d0:f4:32:0f:6a:
                    cf:07:ad:ba:ab:89:73:39:c3:99:9a:e7:17:b2:29:
                    b9:31:17:f1:d1:91:c5:e3:6e:23:f9:42:7b:20:76:
                    a9:e4:1e:57:60:3c:07:ef:f1:16:27:ec:14:02:05:
                    73:0a:f1:5a:d4:dd:a2:27:e3:d2:6c:69:d3:95:f4:
                    fc:ed:9d:10:7a:b8:2c:68:7c:11:10:f3:13:38:8c:
                    74:b6:3a:fc:40:3f:4a:41:a7:c2:48:5d:84:ad:3b:
                    74:43:9c:ca:d8:42:25:a0:20:95:e6:88:ee:88:f9:
                    f4:69:48:83:87:09:49:9e:be:2f:ce:67:ab:07:6f:
                    3d:61:88:b1:ae:b6:f1:9a:bc:a2:71:37:9f:58:e5:
                    52:64:75:2c:4b:ac:da:eb:78:6a:22:3d:8a:bf:65:
                    b4:6f:62:c3:a6:97:4e:95:f3:8b:2a:d1:fa:74:4a:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:F9:D8:B8:77:43:24:A5:8A:C7:4F:B8:DE:1F:51:14:BA:8A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:97:74:79:2a:af:46:a9:15:eb:ed:e0:88:db:7e:84:14:45:
         bf:ae:83:05:c3:dd:d0:67:35:63:c7:42:38:fb:b1:bd:e5:cd:
         5f:14:ca:a0:b5:0a:4d:df:6a:9f:2b:93:19:f1:0d:94:51:2b:
         bb:d5:12:24:78:87:e8:3d:4c:89:0b:af:15:1d:9f:fa:53:6f:
         d5:cc:ca:33:47:ce:12:a6:57:75:4c:b7:38:d5:da:fe:a3:fc:
         e3:46:12:62:20:76:f1:f5:db:0f:85:89:73:6e:77:a4:a4:14:
         f7:78:ca:2a:46:5d:fb:fd:bc:28:f0:85:ef:31:3c:0f:96:7a:
         36:ba:f7:6e:98:ec:f1:1e:05:39:b9:64:63:e4:ce:42:2c:03:
         5e:42:14:5a:da:b9:f3:7e:a8:d3:0f:e1:be:62:55:ee:74:f8:
         1c:af:eb:02:bf:68:7c:b0:ab:ef:c2:d3:d3:c7:40:1d:e3:4a:
         ea:ca:34:00:f8:94:41:cd:cd:4f:8b:38:73:91:9c:bc:ed:64:
         a1:1a:50:e0:36:9e:62:5c:ee:de:4b:63:96:20:9b:45:26:bf:
         74:0f:09:68:c6:ba:cb:6a:0c:7e:8a:ce:ef:ad:83:e5:b6:7a:
         d7:80:0e:02:c7:b8:fd:df:8b:7a:cf:c6:12:60:4d:01:92:23:
         47:4c:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 06:35:38 2024 by rpki-client on console-ams.rpki-client.org