Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa
File:                     57d011b5-4a71-3008-a3d6-d0bad3958667.roa (raw, json)
Hash identifier:          VWSZSWyoZCqBWsmoHI8qN4hdha71hIeswblPzpcdd7g=
Subject key identifier:   59:C4:65:24:5B:D2:73:72:11:D5:D5:75:AB:01:73:6F:2B:88:F7:C3
Certificate issuer:       /CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
Certificate serial:       010D0C9F432858459633668F9C0AA00D47A846D0
Authority key identifier: EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     398229
IP address blocks:        170.39.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:66:8f:9c:0a:a0:0d:47:a8:46:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=9958f08d-90fd-489a-aecc-5f10f6cb2a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:7e:8d:e4:94:57:63:a8:a5:6f:9b:ac:ca:
                    58:a1:e9:64:df:a7:a4:4f:3e:58:c7:e2:9e:c2:4c:
                    a5:73:e1:d5:fa:f7:3e:bb:91:d7:23:86:31:36:5c:
                    22:94:14:b4:74:a7:57:8f:b9:2e:dc:a7:2f:de:f5:
                    e3:67:17:a6:78:22:97:bc:2d:77:ee:a1:3a:8d:07:
                    da:0f:ca:38:6e:1a:34:55:42:98:f8:a6:1f:ea:ef:
                    43:0a:35:7d:7b:ed:43:76:f9:e1:1e:9a:e1:0f:4b:
                    b7:2a:f4:05:be:c1:a8:18:30:cb:39:df:43:42:ab:
                    58:05:fd:1a:d6:43:7d:a0:e9:34:9d:10:b6:7a:b3:
                    7d:24:9b:af:85:37:57:a9:3c:00:82:fd:dc:39:f1:
                    75:3f:36:00:1b:a1:17:ab:d0:67:35:30:18:7f:0b:
                    4b:5d:3f:59:45:9a:c2:c2:73:42:bf:b1:7b:78:42:
                    57:ff:da:cd:04:1d:01:88:e3:39:73:dd:1d:fc:90:
                    ea:04:9a:9a:cb:dd:43:31:e5:f9:d8:08:2d:1a:94:
                    e6:77:df:e0:22:ec:ee:22:ef:b1:cb:59:ea:47:95:
                    45:ed:93:0a:b3:8b:9a:50:b7:55:7e:e2:0e:92:98:
                    72:21:de:86:dd:4c:77:f7:9e:5b:74:0d:6f:f1:1d:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:65:24:5B:D2:73:72:11:D5:D5:75:AB:01:73:6F:2B:88:F7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl

            X509v3 Authority Key Identifier:
                keyid:EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:67:5c:8b:69:a6:74:d3:8e:22:ed:0a:cd:2f:eb:0a:de:
         6d:c1:76:47:c5:52:62:01:1b:e5:bb:32:9a:a9:e1:25:71:ca:
         4e:65:f5:8f:f7:7f:79:42:d6:84:03:6c:1f:00:c6:60:1b:37:
         8f:4d:80:b5:bd:0c:a1:6e:f7:ae:00:f8:a8:16:4d:4a:a3:62:
         42:f7:35:3b:e2:5b:46:a7:63:23:60:0e:4d:31:da:ab:1d:8a:
         6b:28:ee:e2:45:af:b1:a1:e7:1d:99:ee:47:3d:1f:72:64:d3:
         14:16:bb:18:fb:b5:22:a7:0f:1a:c0:26:49:5b:95:2b:47:29:
         54:50:2a:2e:fe:79:53:b1:a3:a5:13:30:7c:6b:bf:5f:11:94:
         b3:12:24:12:38:32:dc:a0:90:b4:7f:09:78:91:38:9a:4f:a3:
         da:94:43:0d:34:be:01:40:e0:3a:e9:35:8d:89:20:53:1b:24:
         a6:f3:63:02:01:36:2c:33:d9:ff:3b:cb:47:a4:18:3a:f3:69:
         7c:d3:5b:1d:da:5b:bd:1b:ba:56:f9:65:c5:ad:d7:e9:30:b8:
         ee:8a:24:19:13:29:5f:49:b7:42:20:3d:e0:b0:a6:ab:59:38:
         d6:b9:57:0b:c3:a4:0f:6c:5c:58:69:d3:51:e6:32:1d:9b:53:
         36:3f:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:51:22 2024 by rpki-client on console-fra.rpki-client.org