Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/445f94ce-d543-34fc-9ce7-4f3600c6d894.roa
File:                     445f94ce-d543-34fc-9ce7-4f3600c6d894.roa (raw, json)
Hash identifier:          FGJ1kE+8tsDL80TdiwUWY5ad077AGkZs/mquaMQ0rVc=
Subject key identifier:   35:1F:D9:C3:12:14:A0:F2:C5:96:FF:E8:ED:83:C0:18:60:7D:08:CA
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845C179144FE6C06517B369A580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/445f94ce-d543-34fc-9ce7-4f3600c6d894.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     852
IP address blocks:        161.184.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:14:4f:e6:c0:65:17:b3:69:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=39c4a683-fc76-4b0e-9d24-5dd5742b672e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:8c:ec:81:6e:99:34:35:61:bc:a6:38:76:
                    8b:90:a5:95:0a:f9:96:54:51:66:47:d9:05:7d:3d:
                    6d:ff:09:df:ba:39:38:e1:37:d3:3d:f9:d3:9c:52:
                    1b:1a:ec:05:28:49:38:42:96:eb:ee:d9:c7:93:f4:
                    47:10:af:e3:60:42:81:cb:ce:7c:a3:a0:34:a2:45:
                    5a:9a:7b:df:6e:b9:de:fd:4e:ee:06:3f:dd:26:c4:
                    2b:69:e9:c6:15:9c:48:fe:de:0f:e8:d1:fe:8e:78:
                    33:d9:86:b3:69:7d:8a:41:80:b2:35:c6:a5:81:87:
                    0c:27:72:31:4e:6b:3f:e1:73:51:74:54:7f:43:9d:
                    79:f8:68:3c:ce:a5:dc:62:07:3a:cd:a8:07:9e:92:
                    a3:ea:18:9a:e5:95:45:53:ac:3b:e8:4c:5b:fa:04:
                    ac:16:4c:81:1f:34:22:50:3e:eb:eb:bd:7c:6e:48:
                    46:7f:30:42:39:7a:fc:e2:0c:f5:21:73:cc:8c:d9:
                    8a:e3:1f:cd:75:c5:fc:a5:2a:3b:bd:32:15:63:b8:
                    54:86:84:db:59:26:b1:38:d5:7b:18:ea:32:87:d9:
                    f3:98:60:b2:21:9f:b3:f5:6f:0e:c6:41:29:b5:b1:
                    d1:69:a7:d3:8e:84:c0:f6:bb:26:fb:a7:86:35:d2:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1F:D9:C3:12:14:A0:F2:C5:96:FF:E8:ED:83:C0:18:60:7D:08:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/445f94ce-d543-34fc-9ce7-4f3600c6d894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.184.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7d:5e:57:52:3c:cd:b1:ee:5b:f0:da:a5:0b:d9:98:d5:95:
         ac:a8:1d:98:be:85:05:7e:04:13:04:84:c1:20:1d:32:49:3b:
         c4:6a:34:a8:d0:51:03:c2:4f:d2:dd:36:af:98:6d:b8:97:b1:
         4c:bb:ec:10:d8:d2:ce:ac:09:d6:f9:5f:e9:a2:96:e5:15:98:
         4b:b2:a3:94:5b:dd:b6:ad:9d:b3:01:15:c7:8d:f8:30:a3:f6:
         eb:65:e5:12:20:70:18:86:1b:d2:91:4c:1e:8e:e6:dc:5b:e5:
         22:67:67:eb:e2:96:09:d8:4a:b0:1d:c7:9a:23:09:0f:89:d2:
         8e:2c:93:43:8e:c9:21:b7:cf:42:37:2c:3d:a0:3f:71:88:1b:
         cb:e5:39:56:fc:e1:f1:9f:4b:b2:df:05:cd:1d:29:fd:3d:ee:
         07:35:3a:b5:6a:9d:48:88:4c:4d:f3:30:3c:83:9b:cc:12:09:
         3a:1b:89:8e:dc:28:91:18:52:8e:0b:c8:58:d1:0b:9d:98:fc:
         8f:40:43:ce:5d:0b:41:4a:69:d9:1c:ae:53:8e:c0:31:b8:94:
         ab:4d:1a:9e:a0:fa:ca:b5:e3:d5:7a:e6:93:8f:4b:7e:fd:78:
         66:06:e0:e6:16:a4:0e:8e:6d:02:b5:93:d0:78:31:07:07:98:
         a5:16:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:27 2024 by rpki-client on console-fra.rpki-client.org