Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/98dcbbfa-7862-3a49-9bd7-02a381bc0819.roa
File:                     98dcbbfa-7862-3a49-9bd7-02a381bc0819.roa (raw, json)
Hash identifier:          oUwpcpIUNePugrXXnHE7eHsu+NwqueIAJ28a3sOk/QI=
Subject key identifier:   04:00:1E:90:32:9F:43:DD:22:1F:01:28:A1:CA:8D:30:57:BD:5C:4D
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845A428D16B7E5F252EAC95E400
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/98dcbbfa-7862-3a49-9bd7-02a381bc0819.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     13213
IP address blocks:        174.127.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d1:6b:7e:5f:25:2e:ac:95:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=2a2ea554-3e7f-4857-981e-3a058fe496ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:13:ac:ff:eb:a7:75:1b:c4:d2:4e:84:5c:
                    e7:22:61:4a:70:03:c9:21:ba:63:3c:d3:20:77:b3:
                    56:2c:05:b7:44:79:43:7d:0a:f9:fd:b6:a7:b5:fe:
                    19:1f:82:ee:0b:1c:bb:7e:df:09:fc:e0:ef:44:50:
                    ef:c9:11:02:e0:ec:1f:a4:3b:ed:f0:5f:38:2f:a5:
                    b8:0c:61:4b:78:25:bd:c8:8d:a5:0c:1d:bb:c6:79:
                    f9:a8:99:5a:5c:8e:ec:66:10:ff:83:fc:3a:a7:6f:
                    e2:e9:e8:8a:59:f1:e3:ab:91:75:0c:96:98:36:9d:
                    2f:43:0e:e4:0e:34:2f:cf:62:3e:f4:1a:3e:18:5b:
                    b4:88:25:72:60:d5:12:0b:6a:df:43:11:e9:2d:b4:
                    64:4a:93:d9:4b:04:39:00:15:68:3f:bc:58:07:1a:
                    73:5d:1f:1f:96:a2:15:d4:97:c4:41:43:b0:34:e7:
                    01:25:b3:99:ed:e6:eb:40:aa:51:51:d3:56:8b:e6:
                    a1:8e:57:ab:08:3c:8d:9c:92:4e:79:db:2b:6f:aa:
                    7f:81:83:bd:fc:dd:25:c3:39:d0:cc:ce:3e:1b:f0:
                    25:07:a2:f6:d2:75:5a:e6:c4:1e:1f:f7:e9:d7:a8:
                    8a:ae:cc:2d:a2:fe:fc:94:4d:ff:5c:7d:b3:2f:b9:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:1E:90:32:9F:43:DD:22:1F:01:28:A1:CA:8D:30:57:BD:5C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/98dcbbfa-7862-3a49-9bd7-02a381bc0819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:14:7a:db:66:32:e4:02:09:1e:41:83:ba:18:5d:64:8d:8e:
         36:17:5d:5f:6e:c2:2c:da:70:14:44:98:d0:57:08:9a:4a:f1:
         a7:7a:11:93:d1:e9:37:11:8a:fa:ab:d0:6a:65:b7:69:b9:27:
         5a:dd:d2:05:e4:1e:2a:97:f4:3d:96:72:69:bb:d4:b8:17:c4:
         cc:dc:7e:dc:b1:e4:df:df:8d:b7:cf:3a:4c:58:41:51:8d:fd:
         ec:19:2a:a4:81:08:cd:bc:96:b3:e4:43:d9:2e:f3:57:5c:f1:
         ff:1f:b1:8d:26:e4:5a:0e:07:ad:14:27:17:67:d8:0a:e7:e2:
         e6:1f:88:86:18:a6:0c:c0:90:b9:77:d1:73:8e:91:13:cc:ee:
         f5:19:96:0c:51:3a:7e:a4:cc:d0:18:f0:b0:ba:fd:a2:d1:13:
         53:d5:2d:55:0a:2b:42:93:96:a5:c7:c8:e2:df:32:d5:cb:37:
         6d:1b:14:bd:d7:77:f5:6f:e3:c7:4c:8a:6d:67:5e:d3:5a:f4:
         3c:84:54:a0:de:20:ad:1c:94:c0:7c:f3:db:a8:1e:22:cb:69:
         cf:87:68:b6:c5:53:a1:34:6e:1c:1e:58:2b:57:7f:df:b9:53:
         fc:79:bc:46:a7:35:80:2b:f6:56:77:81:73:a1:81:d7:2b:fe:
         54:4a:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:24 2024 by rpki-client on console-fra.rpki-client.org