Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa
File:                     b7751a83-4d77-3534-a692-22c9f15e2c5e.roa (raw, json)
Hash identifier:          QL0DBb9GlbKrvXEoQhFpWytzCTtKMnZDc1zCOLmuaSg=
Subject key identifier:   6F:EF:83:D8:C9:38:D5:C9:42:6F:46:0F:69:E9:DA:CB:0E:9D:90:5D
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584500F568ADEFB85B1D84F7E320
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        199.187.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:68:ad:ef:b8:5b:1d:84:f7:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=69a1f2ee-7020-46e6-b272-ab6f790ba5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:f7:28:06:9f:e1:48:1f:e7:91:23:5f:5f:
                    aa:3b:f1:60:69:a6:0d:4a:a0:5b:07:7f:2c:14:e5:
                    f2:b1:8e:34:2d:a4:15:0c:30:a1:d4:87:10:ac:ca:
                    38:cc:c2:f2:2e:c1:ad:b7:40:f8:a4:30:e2:1c:60:
                    f2:85:0b:d3:d8:dc:00:3a:33:91:6e:f7:33:96:17:
                    56:d7:64:95:dc:3d:e6:8a:37:d0:0d:12:5c:00:a5:
                    4e:ed:e8:db:1f:d3:74:5e:19:c8:4b:b3:8f:10:14:
                    42:9f:e4:b2:ab:ea:d7:61:c5:e8:dc:47:7e:0c:57:
                    18:72:58:25:58:9c:b8:55:42:5f:05:95:83:c7:8c:
                    b6:3e:cb:b9:78:54:b5:2d:06:30:cd:c8:ef:1e:11:
                    d3:4e:d1:41:4a:bb:96:f7:1c:82:75:f1:f1:36:e2:
                    e9:fb:eb:30:5d:77:af:54:6f:85:ab:88:b1:4c:6c:
                    be:be:05:5a:94:f0:46:9c:01:53:84:04:f8:18:cb:
                    55:db:1f:9c:4b:47:5b:6d:c4:00:46:7c:7d:36:28:
                    87:af:fc:cc:13:cf:0b:bf:3b:f3:fa:0b:d5:b7:72:
                    62:e2:ee:d5:26:32:e7:6f:99:e0:4c:98:78:42:49:
                    d6:e2:34:14:fe:0c:61:34:a5:52:0d:6b:02:89:c6:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EF:83:D8:C9:38:D5:C9:42:6F:46:0F:69:E9:DA:CB:0E:9D:90:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:1a:f2:0e:9c:b3:f6:7c:21:50:58:a1:31:b5:90:6f:52:
         31:aa:99:67:54:6e:73:62:d3:1d:82:ab:02:88:81:a6:07:9e:
         67:36:da:3a:a4:88:2f:36:83:81:c1:d0:49:c4:f9:79:0d:67:
         48:bb:f2:4f:1e:fc:3a:8b:2f:ef:d2:73:a7:c2:2d:21:ac:84:
         79:c4:b8:84:25:e6:22:10:ee:1c:d2:60:64:ef:09:01:f6:23:
         1e:37:5c:de:f2:fb:8b:d0:c7:2b:1a:d4:23:d4:bc:03:9d:4d:
         e1:75:28:4c:55:33:2f:0c:44:04:dd:f8:65:f7:da:9f:c1:2a:
         0e:7a:f4:b2:f4:13:8a:23:0a:43:68:e2:e0:f3:ee:c2:70:35:
         0a:6d:4f:c5:9c:0d:00:d1:ed:7a:7a:8c:f7:09:da:29:1c:ce:
         7d:f8:4c:f3:a2:1c:94:f4:b8:d1:3b:fe:72:5b:2e:02:b9:52:
         64:e5:b7:40:b7:e7:7a:c0:2e:92:a1:ed:fa:87:ac:f5:77:a4:
         79:b1:29:38:fa:ef:10:94:b0:0b:7f:c7:dc:c2:ff:3e:2c:b5:
         0e:3b:0c:d5:59:d4:7e:1b:a3:70:50:6b:44:88:80:28:6a:0a:
         6f:19:f2:23:ac:a4:7b:13:e0:99:c9:ef:79:7e:a8:ee:fc:19:
         d2:3c:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:39 2024 by rpki-client on console-fra.rpki-client.org