Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/eca49d17-8607-3a72-84dd-d7b54b07edc6.roa
File:                     eca49d17-8607-3a72-84dd-d7b54b07edc6.roa (raw, json)
Hash identifier:          Rf1gvvkWgta2qbmCV9kqGR25aNzC4nQFAtXjbcXBy1o=
Subject key identifier:   16:26:86:A8:7C:7C:87:DD:12:35:0F:C2:A5:44:80:76:D2:DA:50:47
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F432858452EE7ECC158BD32FA23427180
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/eca49d17-8607-3a72-84dd-d7b54b07edc6.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     11427
IP address blocks:        144.168.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ec:c1:58:bd:32:fa:23:42:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=33eab9d4-a5bc-4c43-8b32-009d68723242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:4f:68:b7:bf:c5:92:50:cb:ed:a2:c8:2b:
                    a4:db:7d:07:63:c8:2e:80:00:ca:67:65:ac:33:6f:
                    56:e5:1e:0f:77:4e:a4:3a:4c:f4:26:d8:f1:fd:14:
                    8e:78:8f:61:60:c5:c0:7a:c9:1d:67:73:77:5d:12:
                    aa:97:59:22:fa:c6:92:e3:cb:21:58:dd:18:cd:0a:
                    80:ed:48:c9:0c:07:a4:9b:70:71:9a:00:2b:44:bf:
                    d5:17:3b:90:8d:90:a2:da:67:89:b0:27:07:07:f1:
                    66:b9:d0:71:6d:ab:b5:b6:8b:a9:f3:81:aa:ae:9e:
                    b0:1f:39:d9:bb:43:72:ac:7d:c6:95:30:92:cf:4f:
                    b9:7f:66:60:a2:13:4b:2a:cb:ed:93:6a:0d:32:1d:
                    19:61:7b:0d:ff:20:73:5e:12:e0:25:69:47:49:de:
                    c5:e3:be:3a:0f:4a:a0:f0:db:01:ac:2a:f1:b2:19:
                    f3:e5:08:0d:e7:c0:a2:5d:9b:a0:4d:f1:2b:e8:33:
                    f5:95:88:3b:03:60:e2:9c:bc:9d:ec:9d:ec:c8:62:
                    8b:49:26:e3:5b:df:66:d8:9c:16:f1:e1:6b:4a:62:
                    e4:1d:94:da:af:d1:ac:40:1a:5d:c2:38:04:ee:c2:
                    56:41:6c:17:6b:fc:43:2e:61:dc:f4:d6:e4:29:b5:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:26:86:A8:7C:7C:87:DD:12:35:0F:C2:A5:44:80:76:D2:DA:50:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/eca49d17-8607-3a72-84dd-d7b54b07edc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:2c:20:c4:54:b6:b6:14:8d:23:e8:75:7e:f1:f5:f8:c5:
         37:01:d2:d8:a8:32:06:af:3e:b7:30:34:e1:80:08:da:b2:4b:
         33:f4:2f:64:b8:b0:0a:61:71:bf:21:32:3f:23:7f:15:cd:61:
         03:b5:5b:b1:58:9e:b0:26:bf:88:3e:a8:e5:81:d3:77:d2:1d:
         7c:2f:34:8f:f4:ef:bc:f0:26:24:22:05:c3:10:52:74:82:a4:
         dd:60:04:59:31:c6:c5:12:47:25:0e:bc:ac:03:0b:50:66:63:
         40:33:77:61:90:b7:37:68:75:c4:25:c5:8b:5f:9d:43:80:6b:
         c6:7e:d3:07:f1:2b:c9:81:c4:56:38:18:69:38:e9:aa:8a:29:
         b1:53:34:ed:a4:c3:cb:11:88:9b:83:a0:35:b5:7f:5b:d6:04:
         32:9f:f6:16:50:a1:dc:f1:31:59:db:05:e1:9c:4f:27:e5:96:
         a4:5c:a2:92:07:f4:6c:ac:84:ea:8d:cb:03:0d:63:0c:2e:59:
         e1:ae:42:02:5e:ab:b4:64:79:bc:71:51:1b:7b:4b:a7:0f:54:
         07:42:01:28:1b:36:fa:12:ae:2f:f9:57:3b:2c:69:b0:91:ec:
         3b:67:6e:d7:d2:00:75:15:38:0d:3a:47:cd:e9:cd:ac:66:e5:
         47:7a:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:07 2024 by rpki-client on console-ams.rpki-client.org