Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/771f3ba5-e458-348e-a7f9-6e158a2c6e29.roa
File:                     771f3ba5-e458-348e-a7f9-6e158a2c6e29.roa (raw, json)
Hash identifier:          +3gl/H1O1OeoGqjVuekPcr0hpsyymSKbbLm2V+N6GFU=
Subject key identifier:   3B:91:55:4A:7B:9C:04:0C:7F:85:C1:7E:84:66:26:77:B6:9B:8F:6F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E0B8CC73157D13E50000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/771f3ba5-e458-348e-a7f9-6e158a2c6e29.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        174.84.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e0:b8:cc:73:15:7d:13:e5:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=8eed1120-28e0-40e1-aa6b-e8da3c43d2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:c9:da:43:9e:ef:11:01:52:0c:a8:01:1e:
                    56:11:35:d6:e4:d1:39:3c:32:95:c2:8d:11:61:99:
                    80:18:5f:31:e5:9b:0d:95:6f:93:42:18:5a:6f:b5:
                    65:d8:16:e9:5a:a5:d9:06:21:76:72:69:60:eb:bc:
                    0d:c3:9d:aa:18:a1:ed:3c:0c:2a:98:92:b3:43:54:
                    73:ac:fe:36:b3:94:cf:d7:40:f2:42:ba:c1:42:9b:
                    ec:2b:2a:12:60:93:3e:89:18:f4:3a:5d:ee:0c:dd:
                    4f:11:e9:e8:8b:af:39:78:36:00:9e:51:c8:74:3f:
                    ff:18:2d:2a:31:da:a9:f0:ee:1d:92:27:97:2a:4d:
                    22:a4:b6:fb:0e:d9:28:8f:49:fb:41:c6:e1:47:c4:
                    44:52:aa:11:f8:34:d3:a1:75:eb:5d:64:f4:14:35:
                    0e:ed:6f:62:4a:3e:61:73:7f:34:3a:5c:7b:b4:c4:
                    f7:a2:cf:9e:d6:af:e7:63:e7:5c:e0:82:66:31:7a:
                    7b:2c:5f:7a:66:f8:2e:de:d8:5d:c9:61:af:2e:c4:
                    1e:c1:1f:7b:0a:01:1d:70:d8:f9:b4:b6:d3:b3:f3:
                    fc:f2:c0:0d:cb:0b:6e:c4:46:29:af:6d:05:6c:f6:
                    96:ad:4c:4b:de:f7:a0:74:69:26:b7:0f:01:4e:f3:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:91:55:4A:7B:9C:04:0C:7F:85:C1:7E:84:66:26:77:B6:9B:8F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/771f3ba5-e458-348e-a7f9-6e158a2c6e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.84.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:19:f6:2b:5d:4e:33:36:e6:cd:6b:f7:8e:7e:88:0a:c8:63:
         fe:87:09:a9:7d:ac:aa:fb:ee:9c:43:ea:5b:91:ae:9b:15:ce:
         8e:4f:67:80:38:b6:34:10:b2:08:e2:df:3d:00:1d:39:b3:38:
         51:b5:27:bb:42:e4:f7:b4:fc:6f:e5:9d:eb:91:e4:b2:1c:20:
         21:4f:4c:9d:42:a3:07:80:48:d2:41:f3:15:5d:6b:c4:5d:d1:
         10:5c:04:d9:a0:9e:90:f1:be:ae:da:ea:1e:97:2c:05:74:25:
         5d:ea:0d:77:9e:3d:86:ea:8e:fb:0a:ef:3e:01:f2:7b:2e:f1:
         ce:9e:60:ff:39:62:f8:a6:e5:53:92:1f:9a:6a:f1:57:9c:0d:
         89:a1:a6:cc:ba:74:eb:41:ae:50:e0:27:73:75:74:57:58:8d:
         cf:66:7c:8c:28:19:c1:9c:92:52:ac:fe:e3:75:76:09:d6:4b:
         55:bf:bb:82:39:33:a0:20:8b:ea:8e:62:0e:54:ed:96:91:c4:
         31:51:32:6f:48:a5:1b:3f:87:2c:94:0d:ac:bd:da:68:da:5c:
         db:2f:2c:fc:75:19:5e:45:c8:9e:ce:b9:9f:36:28:3a:39:0d:
         d1:b5:98:31:dd:e4:3b:93:c4:67:46:8a:2d:5a:8f:90:2e:7d:
         f1:4a:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:33 2024 by rpki-client on console-ams.rpki-client.org