Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
File:                     c27db91c-abeb-3439-af15-3d4e2c35f941.roa (raw, json)
Hash identifier:          hupeo302qPBEsAjU5atWplPzJAtNMuRUiqS5Kfv2Iy8=
Subject key identifier:   F8:8D:16:EB:BF:0A:E0:3A:79:05:35:0A:D5:79:4C:82:C5:F7:85:17
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F43285845734DA9E2C2E2F3B0F0C3B2B0
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     33185
IP address blocks:        170.39.196.0/22 maxlen: 24
                          2602:fd23::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a9:e2:c2:e2:f3:b0:f0:c3:b2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=a8e4bea0-2f2c-4371-88b4-a5e50f52a7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:8f:c4:4c:82:17:16:f6:0a:e3:78:c0:a7:
                    df:e0:41:81:02:f8:3c:db:1c:fa:1f:81:b8:c9:0d:
                    ac:a8:0b:53:3e:34:19:5c:a2:bc:85:6e:d2:15:cc:
                    c1:29:c3:41:ba:34:3c:18:cf:00:56:20:f2:a5:e2:
                    e5:f3:9c:81:90:ff:ef:a6:b3:0c:8e:a4:e3:cb:b4:
                    46:32:e0:87:37:a6:93:50:0d:33:79:27:8e:96:c1:
                    80:66:6f:58:9c:21:7c:c7:78:1c:b2:2c:6e:74:9c:
                    5a:bc:fe:25:55:4d:1b:a3:47:96:e6:a0:04:5e:82:
                    4a:f4:43:1d:be:ce:65:05:0c:da:3d:6f:b0:31:cb:
                    f8:ac:d5:d9:ab:86:97:1d:c1:f2:a8:f9:c1:5e:7f:
                    65:a6:6e:1f:c9:ca:ac:0e:d2:6b:39:79:62:49:94:
                    13:92:c7:99:f8:29:13:03:d1:76:1a:ec:8a:dc:40:
                    1b:34:e6:b6:87:45:2b:13:4c:c7:60:18:d0:0a:4d:
                    9d:1a:29:63:df:22:73:c1:2c:a7:37:1d:1a:51:52:
                    1b:88:56:51:ed:22:4f:f8:65:b1:b1:7c:34:a6:64:
                    66:b7:90:44:82:dd:9d:08:85:d2:8d:46:04:5c:ac:
                    34:f0:ea:7f:52:37:3b:97:ec:94:e3:2e:26:1f:8b:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8D:16:EB:BF:0A:E0:3A:79:05:35:0A:D5:79:4C:82:C5:F7:85:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.196.0/22
                IPv6:
                  2602:fd23::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:4b:86:af:a1:71:ac:b5:54:a7:24:ff:c4:ef:3c:66:f7:
         77:22:02:b9:4f:db:85:ba:6a:70:f8:92:14:85:0a:36:9b:77:
         a6:1e:8c:89:01:eb:0d:2a:40:1e:4d:87:9b:ac:bc:05:d0:5e:
         92:40:c5:c3:11:fa:92:9d:b0:70:f6:3f:39:7d:8b:fd:46:65:
         63:c1:06:e1:65:49:b9:3a:2f:93:a2:bc:c9:17:31:8d:e3:b0:
         40:77:78:cd:43:21:1f:b9:ed:5b:d5:0c:94:df:89:ac:22:6d:
         02:02:80:b4:8a:bf:04:d7:bf:ca:55:6a:d8:5f:72:c9:1f:33:
         ce:58:c6:5b:7c:da:57:81:e7:55:41:3a:fd:fd:be:a0:96:58:
         9d:be:d0:ef:ce:7e:bb:16:1c:84:c1:75:c4:76:07:24:5d:26:
         86:c2:c2:f9:16:6d:4b:ea:93:0e:2f:5b:db:b6:22:19:43:a3:
         2c:30:8d:2d:8f:f6:41:1c:ce:32:0b:bd:f2:bf:42:15:34:8f:
         56:80:e4:45:3d:6d:06:1b:ff:ec:f6:dc:78:fb:55:b8:6c:fc:
         5d:4d:dc:ae:ba:06:65:ac:04:77:ce:fb:44:3d:52:0e:fa:59:
         1f:3d:f7:45:c7:04:a3:03:e9:63:be:6c:5e:70:ab:8a:9d:ac:
         f7:63:07:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:00:36 2024 by rpki-client on console-ams.rpki-client.org