Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a5365f80-f54d-36a5-9718-451dd2936f74.roa
File:                     a5365f80-f54d-36a5-9718-451dd2936f74.roa (raw, json)
Hash identifier:          dM616d9VUSMTEG2X78cpwThNN9uQpU73Tf/xzYzlfvI=
Subject key identifier:   73:00:8D:23:E6:AA:A8:FF:EA:34:AF:A2:B3:77:A4:9F:3A:E3:94:CA
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845B7B3871B42956D91D8D28600
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a5365f80-f54d-36a5-9718-451dd2936f74.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     13213
IP address blocks:        173.255.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:87:1b:42:95:6d:91:d8:d2:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=e16295ec-6c1b-4694-bedb-339a68ab9601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:d0:30:fb:a0:cb:5d:18:56:9a:67:e1:4b:
                    38:bc:e6:2a:e2:ef:c7:3a:ae:00:e2:6c:41:ab:77:
                    2f:24:4d:34:fb:05:56:44:e9:30:0c:6a:7a:f2:52:
                    c8:06:57:25:03:d2:c1:77:2d:8c:e0:dc:8e:b6:87:
                    c9:72:4a:a0:92:51:5e:bf:85:53:7c:46:ca:87:42:
                    fc:9e:af:04:b3:30:f9:19:4a:b5:40:46:e7:93:de:
                    75:69:f4:58:cc:c5:c1:2e:2c:ce:a8:ba:f0:16:61:
                    4a:17:47:13:24:1e:5f:9d:ec:9b:e0:3a:f4:14:b4:
                    77:d4:62:56:b6:0a:25:e8:d1:32:a6:91:25:3f:ee:
                    f7:d8:50:10:98:35:d6:50:95:08:db:7f:af:e9:68:
                    60:d7:79:ea:01:6a:86:f7:fd:bb:02:ac:eb:4a:24:
                    be:e3:b2:1d:ac:b3:32:6e:7a:5e:fd:48:d7:3d:aa:
                    e7:d2:dd:5f:eb:5e:ed:02:23:f9:a1:78:c6:65:be:
                    e1:3a:fa:be:95:5c:c9:5c:7d:9f:53:d6:92:cc:08:
                    ff:7f:a4:c9:7b:23:01:0a:3d:37:6b:ab:53:d0:5f:
                    45:19:c7:ff:fd:1f:4e:b9:49:d9:f8:49:c1:94:90:
                    50:ef:38:dc:52:cb:9e:68:d5:60:fe:81:f9:1d:7a:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:00:8D:23:E6:AA:A8:FF:EA:34:AF:A2:B3:77:A4:9F:3A:E3:94:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a5365f80-f54d-36a5-9718-451dd2936f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:c6:2d:99:7f:56:6f:e5:64:a5:50:1a:4d:a7:30:d8:be:
         24:c8:40:cf:d3:a1:34:ad:fc:38:44:d0:86:01:eb:0e:de:70:
         a6:67:71:d5:08:a6:c0:79:5b:84:f4:fd:4d:5f:4d:69:70:9b:
         e7:82:8e:a9:fd:d6:da:6f:07:39:dd:10:98:89:2d:15:03:db:
         3d:ab:0f:58:47:d1:56:e4:bf:55:0d:0e:de:ab:28:94:e8:56:
         66:70:ff:25:51:a0:65:76:db:f5:b5:68:79:25:93:16:b0:7d:
         c0:f8:d5:8b:9a:98:ae:16:e0:ad:71:cd:18:32:19:c5:7f:06:
         28:f1:85:0f:55:06:f4:b5:4d:7c:0e:b4:28:6a:20:d7:35:90:
         36:d2:62:41:1e:29:8f:a2:0b:ab:57:79:ba:ee:e8:81:ca:b7:
         ff:e2:41:c1:16:fd:76:35:00:d0:e8:a4:ca:c6:9d:20:6c:c8:
         38:fc:42:28:d2:89:a9:16:7d:b8:33:67:de:d8:6c:aa:b4:99:
         c3:9d:0a:52:65:2a:f6:37:a6:f4:4d:a9:93:86:80:a2:18:a6:
         fc:58:84:da:92:df:1f:8a:8e:3f:a3:30:05:a9:c4:aa:76:e1:
         69:19:dd:49:66:fe:3b:3c:db:46:cc:d7:d4:b6:b5:fd:07:c3:
         96:1f:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:20 2024 by rpki-client on console-fra.rpki-client.org