Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa
File:                     8c7110f4-9850-314d-a729-b9b9de4adc13.roa (raw, json)
Hash identifier:          TLe1pbXw73UeuOo8bFbnP+1HfGje3n4rbRGDjm+gwOc=
Subject key identifier:   00:55:EA:48:F1:1F:06:33:FE:5E:4D:D6:7E:83:C3:72:EC:2A:97:6C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E17BF26CAC22DC065400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        174.86.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e1:7b:f2:6c:ac:22:dc:06:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=2029e2af-31c6-4998-8ce9-781eef99a712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:5f:ed:69:97:41:5d:66:41:74:7d:21:76:
                    14:35:f2:77:ac:60:23:26:77:f7:4b:dc:01:c5:2d:
                    21:97:60:78:65:c3:2b:9c:cb:f3:f7:4c:ea:64:56:
                    f9:99:19:09:01:ea:f8:3c:23:63:76:7d:7c:1a:26:
                    e9:fe:6d:36:81:d4:6e:d0:25:e4:b6:d6:63:48:27:
                    5c:6e:ca:c7:e5:69:86:24:8a:93:51:fc:b8:bd:da:
                    c7:4f:2e:f5:0e:aa:86:ae:80:5e:e4:2e:07:c5:99:
                    c8:42:7d:61:da:7d:61:76:7c:62:96:8f:53:ab:4d:
                    80:52:64:42:ed:74:f0:12:2e:8d:4b:22:27:61:1f:
                    1e:d9:46:75:c9:39:1b:41:91:bc:bc:5c:8b:c2:9a:
                    e5:6e:c0:d3:de:36:cb:d7:11:35:44:64:24:d8:ad:
                    9f:55:b8:f3:9a:20:49:06:95:50:21:73:d3:7f:c5:
                    06:bb:9d:05:6b:68:3b:99:fc:02:cc:84:c2:61:05:
                    3d:a1:07:49:cd:ab:0e:fa:13:76:27:ae:59:ed:5e:
                    36:a3:1a:5a:ce:a0:51:31:e1:8f:85:01:78:d5:27:
                    a9:43:99:57:c3:1b:1d:7a:b1:d4:a0:5d:86:59:ad:
                    19:78:e7:e1:10:8f:d3:1e:38:79:2a:7a:14:f9:3d:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:EA:48:F1:1F:06:33:FE:5E:4D:D6:7E:83:C3:72:EC:2A:97:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:81:08:c2:cf:67:af:e4:e1:09:3b:2f:da:0c:23:f5:f4:
         32:91:e2:13:bb:01:fa:e8:6c:38:10:6b:be:42:99:bb:81:23:
         8e:57:c7:67:bd:0c:8e:8d:cf:0e:c2:b3:48:d7:41:6a:23:9a:
         64:1a:4d:23:b2:67:a1:5e:d7:ff:22:bf:51:83:36:39:d4:42:
         e0:4c:6b:04:74:4f:1f:9f:95:06:11:8c:99:18:5d:57:71:f2:
         cf:e1:0d:7e:48:42:15:97:11:00:df:ca:19:01:52:74:d7:3d:
         82:ee:1c:37:82:86:d8:8c:f0:b0:02:ef:b3:fb:0b:62:30:1d:
         4e:96:3d:02:c5:61:e0:c3:af:5f:32:a9:5b:27:e3:0b:56:0d:
         d4:13:2c:e6:01:10:c5:31:25:54:67:96:f2:d4:2f:20:e7:80:
         6b:d1:61:2e:45:90:b2:ad:32:ca:96:4e:a1:e1:79:54:99:f3:
         70:b0:3f:20:35:84:15:97:2e:14:a1:11:22:8c:e3:78:52:47:
         2d:4e:57:ac:e4:89:d2:63:dd:fb:cb:56:16:e3:97:1d:5a:9d:
         8d:28:bd:47:37:15:49:6b:ab:2f:12:3e:fa:fd:e5:7c:2f:ea:
         7b:a9:af:91:80:a7:3c:04:ce:a4:7e:aa:53:9d:e1:56:e7:b2:
         39:8f:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:33 2024 by rpki-client on console-ams.rpki-client.org