Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa
File:                     4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa (raw, json)
Hash identifier:          J+ovCk4HEb0IEyln7ZZ9qvnzfHdpgBf45YboClsY5h0=
Subject key identifier:   70:C7:A8:4D:43:29:4D:38:5B:21:6C:04:25:A5:F6:D4:4B:C3:0E:FB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F8AE9CDE34F327CF24C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        174.134.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f8:ae:9c:de:34:f3:27:cf:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=9759a77d-64ec-4a47-b136-7adc384d0dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:db:01:cf:85:c9:60:7d:6c:20:92:4e:b7:
                    07:8a:bb:70:00:90:33:01:5a:d7:fe:ce:09:fc:24:
                    37:44:24:80:85:02:2f:47:6d:0d:2a:9e:c6:08:62:
                    e2:31:4a:7e:35:95:7d:69:af:6d:93:6c:8d:0b:40:
                    fa:d9:69:97:c1:19:ad:5a:4e:7c:92:b8:31:35:e6:
                    7d:97:b3:1e:82:50:32:42:0c:69:d3:b4:56:33:e8:
                    3d:cd:9c:5a:6c:e6:fc:d2:3a:5a:de:8c:1b:12:60:
                    8e:04:24:19:58:a1:3d:6b:bd:ad:18:18:fd:2d:4f:
                    2c:89:d1:f5:76:bf:6a:ea:da:2e:70:51:f1:7d:63:
                    ff:84:be:bc:f9:9d:55:dc:27:ac:d2:dd:d4:8c:26:
                    2a:3e:d9:e9:c2:1b:63:e2:b2:b7:48:a0:b5:a0:a5:
                    63:2d:91:bf:70:3f:74:74:e3:7d:0c:d5:49:71:c2:
                    8c:88:b3:6a:f9:ef:79:6a:d2:fa:74:63:0d:fa:02:
                    f0:8f:a9:ad:e8:4a:8e:79:cf:67:87:70:83:7a:a7:
                    56:54:d1:5d:e9:a3:d1:f8:5a:d2:7c:e9:dc:0b:a9:
                    fb:88:e0:62:2a:0c:35:de:60:80:51:82:d8:84:bb:
                    08:bf:0d:9c:c1:74:b3:d7:a0:a2:60:82:db:a1:c2:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C7:A8:4D:43:29:4D:38:5B:21:6C:04:25:A5:F6:D4:4B:C3:0E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:e6:d5:6d:97:e1:03:a5:90:67:d4:e0:cc:85:35:70:f1:
         18:75:86:0b:8a:d5:46:94:aa:06:14:05:cc:7d:9f:61:35:ec:
         f4:33:91:c0:93:0c:ca:a5:2a:af:32:6e:7b:6e:bd:5c:5f:ed:
         42:75:d8:aa:72:a1:4d:b4:92:34:d8:14:91:48:0b:23:47:ae:
         9d:e1:b8:b8:98:6e:96:c4:ff:17:d5:e2:ad:43:3a:64:f1:80:
         e5:4a:ba:5f:b3:e2:da:05:55:be:c6:d8:b4:2f:f0:19:69:c7:
         7b:a9:a3:72:05:4b:ba:c3:fb:6a:ea:54:7d:49:89:ba:d0:12:
         60:25:0c:a9:84:5c:d5:6a:e7:34:35:e8:a2:87:c6:a5:0d:39:
         06:03:2e:ef:d3:08:a3:05:c6:e1:98:05:7e:80:39:ff:26:1f:
         03:16:d3:d5:7d:d5:7e:5f:9c:c4:cc:79:65:e3:3c:a0:0f:3d:
         b0:5a:8e:93:4f:75:dc:0b:49:38:64:e8:33:e6:fa:2b:3c:40:
         e0:0f:fd:44:9e:11:be:36:c2:b0:a2:17:c4:64:4c:a7:4c:6a:
         c1:b5:c6:1f:12:72:97:65:d4:80:db:02:8a:2f:6e:82:bc:47:
         a0:53:44:c4:bc:c5:3f:d1:11:93:f6:a8:48:f1:f9:67:95:0c:
         53:fb:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org