Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa
File:                     4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa (raw, json)
Hash identifier:          dn/M+90WTEXgZBWs0apJephHx9j22fu6L2NoiNEhxKU=
Subject key identifier:   E1:02:19:FE:05:3F:43:97:10:1B:44:CF:10:68:82:59:A7:60:14:46
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F432858458B088BF2E0D5B6640FBFE200
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        168.100.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8b:f2:e0:d5:b6:64:0f:bf:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=dfae182f-b903-4b41-b7b4-62827914e990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:12:f7:b4:52:df:24:b3:67:9e:71:7b:4b:
                    3d:4c:e2:0c:85:0c:cb:01:83:a7:80:fa:dd:0c:2a:
                    c2:74:9f:db:5d:f1:af:fa:96:91:c7:45:0d:cc:ea:
                    8e:27:2a:24:3a:0a:a2:7a:e3:40:ae:76:dd:96:bd:
                    c5:b0:11:0f:61:24:ba:e2:8d:4a:d0:40:24:f7:3f:
                    4c:69:79:61:fa:69:47:a5:7b:35:82:6a:9a:23:25:
                    88:5e:87:cf:fc:fa:b7:14:cc:55:73:a1:96:66:6f:
                    a2:c9:79:9f:33:32:10:50:e2:11:a9:50:9b:fd:e5:
                    64:35:a8:f7:42:5e:da:a4:7d:6c:b6:aa:2e:cf:e0:
                    b0:64:a0:fa:80:7d:54:ed:2c:7b:21:b4:77:22:94:
                    c4:44:e3:a8:0b:87:9c:5b:67:63:13:c0:2e:80:b8:
                    6f:55:dc:79:35:49:13:3d:05:29:6a:3e:8f:65:00:
                    0c:01:4a:eb:de:c1:30:0b:68:ab:c3:d4:ff:74:c1:
                    09:3e:14:2d:75:3a:40:91:22:a9:7f:3b:38:9c:56:
                    63:7f:ff:12:32:a9:c6:bb:70:1d:90:91:93:75:0d:
                    35:c3:19:c4:c5:92:09:cb:22:e7:26:e0:95:c0:b3:
                    a1:25:5a:07:86:de:70:46:34:78:c8:a7:e1:bd:55:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:02:19:FE:05:3F:43:97:10:1B:44:CF:10:68:82:59:A7:60:14:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:92:fd:bd:ea:73:42:8b:ae:06:8f:9a:81:3e:72:41:f4:cf:
         95:14:7e:7e:1e:4d:fa:3f:9c:df:68:c8:24:96:35:d5:6e:1e:
         de:8a:d3:c2:81:9f:77:b5:77:46:2b:f8:b6:70:76:2a:57:44:
         5d:f1:84:42:9e:d2:7d:59:95:41:b9:e4:71:1e:c8:26:18:a9:
         06:80:a4:d6:93:40:54:e9:fb:02:d5:d1:f5:fc:47:85:05:0b:
         11:c0:1c:3f:f5:43:7f:ee:d3:b5:90:e0:8c:51:63:56:81:29:
         8f:e9:15:de:f4:b6:5c:47:bf:98:57:7b:fa:93:cd:d5:82:f4:
         f6:10:88:b4:a9:8c:4f:00:ed:f8:07:f1:d5:45:08:10:22:58:
         a5:1e:1c:11:a9:f6:b2:0b:78:e6:71:3d:3a:52:7b:a4:27:bd:
         fe:c8:3a:1c:ea:f1:81:ee:a5:71:44:0b:cf:bd:12:67:03:53:
         19:09:58:4a:59:66:e8:84:bc:20:83:9d:3f:50:c5:4c:3c:f6:
         b3:fc:d4:29:66:d0:3b:95:1c:6a:9b:be:03:b6:21:2f:ea:d6:
         6e:79:60:1e:89:b3:ab:a0:f3:c2:6b:6b:80:7f:4b:13:24:60:
         0f:14:63:3a:9a:ce:f6:46:3a:03:da:15:2c:87:61:53:1f:5f:
         5a:d8:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:59 2024 by rpki-client on console-ams.rpki-client.org