Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa
File:                     1f24da68-4901-3e47-aaf8-489871d7814d.roa (raw, json)
Hash identifier:          Fj3pQvkSREWpkarRPXlKx14Ce8S/yjzfgcxSZl6avGo=
Subject key identifier:   AF:48:B4:2B:C8:3D:54:8E:67:E0:FE:EA:C4:2F:BF:0F:29:FE:85:54
Certificate issuer:       /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial:       010D0C9F4328584510502DB411B6A4173CC82180
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     15038
IP address blocks:        135.84.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:2d:b4:11:b6:a4:17:3c:c8:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=7863b391-4960-4491-9e8d-247d1672a999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:65:6a:bf:9b:95:39:6e:7e:02:da:3f:c9:
                    46:6e:e4:5b:46:78:f9:b9:2f:1e:4c:ba:c2:7c:01:
                    8e:8e:ab:b0:a0:da:9c:cf:f3:7d:4b:7a:1e:ea:ae:
                    93:48:a1:95:a7:62:f5:f2:4a:cd:27:33:c3:2e:dc:
                    c0:ff:1c:f7:21:60:d5:1e:e1:dc:87:1f:3d:a8:d6:
                    1d:79:ab:e1:88:70:1d:01:32:fa:28:40:11:3c:83:
                    1d:21:ef:ef:86:ea:4b:a8:ee:58:a4:93:12:30:1b:
                    86:fd:9d:a4:1d:c7:b4:93:55:28:00:62:9c:9c:77:
                    02:10:cd:51:85:3c:e5:e9:98:b8:9a:23:b8:9f:26:
                    a0:98:32:44:de:da:11:c0:db:bf:53:2d:0f:78:39:
                    b1:20:33:ff:ec:ae:d9:59:15:9c:84:ac:3f:42:95:
                    3f:c0:91:47:87:b8:1f:ec:32:b7:96:f8:27:8e:ba:
                    27:8b:0c:dd:7c:37:1e:6c:5b:65:9f:47:6a:ec:e5:
                    82:44:16:a0:06:dc:54:d6:a0:8b:e5:f7:70:2e:c6:
                    e1:ff:7d:34:ac:02:10:a0:c3:c3:fd:67:97:18:f9:
                    d0:b4:fc:14:cc:8e:3b:91:59:b3:6d:c9:5e:18:37:
                    86:8b:02:57:24:b0:9a:fb:32:85:09:5d:26:e7:34:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:48:B4:2B:C8:3D:54:8E:67:E0:FE:EA:C4:2F:BF:0F:29:FE:85:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl

            X509v3 Authority Key Identifier:
                keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:95:6b:c9:39:c3:a1:44:31:51:9f:bc:1b:bb:57:b9:4a:
         87:45:be:63:1c:d5:94:bb:73:5f:43:a8:2c:dc:c3:a2:a4:87:
         80:a5:34:e4:e2:76:8b:26:97:f0:c7:13:b0:68:03:2e:49:8f:
         3e:b2:81:b3:a2:1a:2d:2f:08:b6:ef:39:18:2c:fe:fa:4f:12:
         a8:5e:bf:c1:9a:72:b6:58:f9:df:21:13:de:4e:d4:f8:41:97:
         73:13:40:43:ad:f7:c7:4c:87:be:d2:c1:0b:83:6a:83:26:e6:
         fb:88:12:08:a6:cb:2c:78:27:b0:98:63:fd:81:d6:e5:76:71:
         a3:94:ee:65:6a:5c:f1:47:2c:b0:b6:0a:9d:7b:87:29:e5:88:
         ca:08:73:1f:f1:db:65:44:46:4c:b5:c7:ba:f0:9a:13:e1:7d:
         90:1b:94:fa:fe:7c:2c:75:7b:c8:bf:56:8b:bd:f4:1c:c2:94:
         95:4e:19:d5:11:23:88:75:12:54:23:6d:2b:77:c7:06:0a:69:
         a8:e1:23:86:fa:11:86:bb:af:77:36:44:66:62:83:ae:96:9a:
         f7:0f:b2:d7:ed:14:83:2f:07:ab:74:2b:25:58:67:30:19:01:
         89:75:fa:06:fa:02:41:21:e3:25:63:9f:f7:29:4b:1e:0d:4b:
         ba:e5:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:11:42 2024 by rpki-client on console-fra.rpki-client.org