Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa
File:                     305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa (raw, json)
Hash identifier:          +SxUrPSYdMlsWH0ofozLwkolmu8Y4biwJPXrf9CHBPs=
Subject key identifier:   7D:B6:60:5B:4A:CD:C4:01:80:BD:8A:F7:D1:4B:74:37:47:9F:09:6B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E0FFC7D00729E6E6BEB0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        174.85.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e0:ff:c7:d0:07:29:e6:e6:be:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=ea5ac3c8-d009-4dfd-90f6-bbc5ec1a9766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:61:08:4e:6a:cd:79:ec:84:74:1a:35:6c:
                    f5:85:9c:0d:2b:64:bd:8b:9e:23:a4:78:7f:17:06:
                    17:e3:a3:6d:22:f1:24:89:5d:f9:63:8b:c9:c4:4d:
                    f1:3d:70:ec:11:2c:7d:d9:5d:3f:ae:c6:8e:84:bf:
                    c1:a1:89:35:e3:ef:65:89:f9:9f:cc:57:29:86:c0:
                    6c:84:7e:6f:4f:ff:7d:72:7c:05:a9:93:59:95:da:
                    5e:57:4a:c6:8d:7e:65:a8:27:71:b0:11:98:d0:03:
                    2d:1e:90:13:8c:d8:a8:24:81:11:54:19:9d:41:12:
                    db:5d:a8:7e:b3:f3:c9:0e:bb:db:5d:eb:d7:08:ee:
                    9d:72:47:23:62:cb:17:0c:b0:c7:c7:ee:06:53:a7:
                    0a:7c:92:56:58:af:4c:ad:cc:c3:78:b2:62:13:7a:
                    be:be:87:c9:b6:f1:fc:91:62:1d:94:43:8d:11:2f:
                    72:aa:7e:c7:7d:b8:19:0e:23:97:be:e0:29:17:00:
                    0b:39:59:5a:d6:83:49:bc:ce:00:6c:4c:8a:d7:de:
                    a8:c8:2e:13:ed:99:fb:75:12:85:61:55:ff:45:06:
                    a9:14:e6:0c:da:b5:3a:2a:9b:68:69:5e:bb:90:28:
                    59:5a:9b:a6:ed:79:4c:a4:b5:93:f2:c2:99:50:1b:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B6:60:5B:4A:CD:C4:01:80:BD:8A:F7:D1:4B:74:37:47:9F:09:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.85.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:20:47:a2:03:63:d2:5b:59:ea:e7:f4:da:00:46:05:a9:22:
         d5:12:a2:77:ea:96:6e:18:0b:bc:42:8f:80:f6:33:b0:6e:66:
         2c:35:2c:66:3e:ba:8b:60:b7:5d:f6:a8:a4:54:2c:90:6d:8d:
         6f:a6:73:87:b4:cf:75:68:dc:b4:8f:d7:53:3b:de:5b:2f:ea:
         e3:0e:9b:38:71:10:d6:c9:78:75:18:a6:06:bd:39:a0:83:40:
         34:be:db:cf:85:8a:1e:17:6b:81:22:00:de:c3:5c:0b:99:cd:
         2c:cd:e9:fc:d6:64:6c:ed:b4:21:89:70:c5:b9:14:a5:10:97:
         f7:10:12:23:62:a2:2f:6a:c6:e8:d0:d9:31:71:69:75:f8:49:
         0c:5a:30:3c:3f:43:9d:81:3d:02:b8:5d:72:8a:76:cf:f1:6e:
         80:1a:ef:22:3d:7c:c9:76:94:41:90:88:62:6a:75:71:76:86:
         3b:4a:e8:b8:71:21:2a:4d:2e:9b:8e:8e:44:e8:bc:cc:6a:32:
         9b:a2:bb:42:3b:61:8a:76:36:d7:c7:fd:3e:79:70:a8:c0:b2:
         2e:dc:cf:75:cb:da:cd:49:23:ca:23:88:13:ee:cb:c7:7a:80:
         10:e0:ab:1c:98:84:80:c4:61:00:a2:97:88:6b:f7:31:6b:1a:
         65:23:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:10 2024 by rpki-client on console-fra.rpki-client.org