Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa
File:                     0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa (raw, json)
Hash identifier:          mLiAuwWv5FuPHFXssycKwHN/OTrjhYVHKdM8EJUJU8M=
Subject key identifier:   4D:9E:65:26:2B:88:5C:87:19:DB:BE:95:E5:29:49:4F:8B:9F:14:E6
Certificate issuer:       /CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Certificate serial:       010D0C9F43285844E23FDB09422C036D16014680
Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     400490
IP address blocks:        170.39.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:db:09:42:2c:03:6d:16:01:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=f3bf85a0-93c6-4007-a153-adc44e5c7dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:90:8f:a8:f1:9a:58:88:26:4d:8e:f3:eb:
                    c7:62:ed:4e:ee:da:b6:1a:4a:d3:03:c4:4e:7b:0a:
                    fe:ab:e7:fc:38:a7:7e:70:ff:e8:b9:6d:c6:1e:23:
                    ec:41:50:d6:9b:da:83:80:ea:e0:ae:c1:bd:0c:47:
                    e0:fd:52:58:49:f1:67:99:3b:e8:4d:38:41:d4:cb:
                    bb:6b:25:47:4a:28:43:ec:8e:84:ce:9a:66:96:f4:
                    01:2b:e5:0e:2c:36:d8:3c:fe:73:f5:0d:5c:4e:a3:
                    15:7b:af:4b:d9:2a:bb:0c:45:87:37:16:78:d8:9c:
                    65:00:9f:88:7f:c8:72:01:64:53:2d:fe:71:eb:ad:
                    e3:d4:15:17:80:b7:d6:31:ab:c0:99:4e:33:53:dc:
                    f1:46:7d:63:5f:27:6f:1d:5b:fe:74:6d:33:6b:15:
                    5a:9d:65:1b:f0:8d:53:7e:8d:46:a8:67:79:8c:24:
                    ea:d5:9f:99:40:48:95:50:64:2f:f1:6c:2f:7f:d8:
                    16:df:35:b2:fc:b3:8e:18:5e:41:9a:33:5f:9b:95:
                    9f:1f:e7:5a:46:eb:59:e8:3e:36:aa:60:bc:9b:3c:
                    93:9b:f1:10:32:2a:97:31:81:b8:0c:e4:bf:4c:46:
                    d1:09:9b:82:00:1a:b6:f1:a4:26:9c:78:a0:28:01:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9E:65:26:2B:88:5C:87:19:DB:BE:95:E5:29:49:4F:8B:9F:14:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:cd:f0:d3:d0:7e:a3:a0:90:44:af:f1:84:9a:b7:c0:20:83:
         3a:48:55:0e:5b:8f:4d:73:4a:45:49:de:99:20:73:24:c1:c0:
         4c:10:4b:a9:73:41:8d:60:e6:40:6e:34:26:aa:ab:10:bc:e7:
         d7:56:b0:6a:3a:03:22:83:ae:07:1f:b7:54:8e:7e:85:93:a1:
         28:72:db:1f:23:6e:0f:6b:c2:33:74:64:86:3d:b0:af:04:22:
         f6:2d:9f:31:06:fa:61:9c:d1:fd:3c:3a:18:b5:9d:5e:9c:4a:
         ab:f8:99:29:ca:e1:0a:ea:78:3f:80:77:8f:8f:2f:bc:21:a3:
         63:43:f2:4a:0a:76:24:a2:22:3c:0b:87:d1:21:5a:15:64:4c:
         40:3a:db:0f:0e:14:9d:c7:42:34:d3:f5:d2:0f:fc:f6:39:62:
         33:1d:a7:52:08:39:67:16:e3:83:50:f2:44:a1:a4:d3:f3:89:
         ba:aa:4e:c0:9c:1a:ee:04:40:ca:4a:ef:e5:b7:a9:bd:74:38:
         43:ab:70:6d:81:a0:18:e1:d6:bf:46:6b:21:c1:15:48:6e:9a:
         4f:88:1e:c3:b2:d8:f6:b8:f3:e2:04:72:4c:dc:99:df:c5:f5:
         4f:f0:c0:b7:58:41:22:41:05:ea:04:2c:d8:e5:47:75:cf:dd:
         98:62:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 06:23:31 2024 by rpki-client on console-fra.rpki-client.org