Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4b3334-5ce5-3760-b813-368f280fd540.roa
File:                     8f4b3334-5ce5-3760-b813-368f280fd540.roa (raw, json)
Hash identifier:          h6YSOrr6C6U6jb+Bukz/jHuhBxZ6CNLQKmo8yPxgJAc=
Subject key identifier:   D0:23:97:CA:93:33:4E:7D:CC:6A:02:C0:A0:D0:3B:2E:C3:A0:CA:15
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E113DEB8264678ABAD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4b3334-5ce5-3760-b813-368f280fd540.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        174.87.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e1:13:de:b8:26:46:78:ab:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=36f48698-998c-491e-ac84-d1e4e84c483c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:42:db:d9:39:dc:43:71:e4:dc:54:e5:0e:
                    8c:53:bb:c9:59:8e:43:1d:cd:14:7a:29:43:a9:31:
                    d5:c2:c7:f8:ac:ed:d6:35:54:0b:28:c7:20:4f:cd:
                    77:d5:da:12:b4:a6:f4:1a:e4:e7:f4:e2:53:64:2d:
                    b7:e9:9e:36:fd:97:51:ae:f3:50:33:d0:fd:35:50:
                    07:ba:69:e1:86:49:c4:cc:8a:40:0f:1f:57:3e:8a:
                    ff:d4:5f:a9:65:22:7d:32:c2:31:6f:cf:2f:0b:fc:
                    65:24:37:c4:fc:42:74:9c:39:a5:30:bb:8b:7b:7a:
                    cd:11:05:a3:30:43:f7:56:80:8c:b5:7d:4a:d5:f5:
                    6d:53:07:2b:8b:5b:f1:15:93:cd:69:e7:4a:27:6b:
                    67:59:a2:23:28:0b:5d:6e:c4:51:82:7e:27:44:f0:
                    03:37:be:0c:db:bf:82:eb:a5:48:39:1d:c9:be:af:
                    8c:69:44:81:27:dc:f0:9a:fd:38:a0:a8:8b:8c:7d:
                    c2:f6:82:ec:97:9d:44:b4:b2:45:81:0c:78:e3:1d:
                    13:d3:82:32:b0:67:c2:c9:75:a7:91:21:81:69:7f:
                    9e:f7:c8:e6:2f:90:32:08:0a:f7:ec:6a:d1:b9:5e:
                    73:0a:19:f1:cd:88:08:4c:d5:1a:e6:10:6f:2f:d6:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:23:97:CA:93:33:4E:7D:CC:6A:02:C0:A0:D0:3B:2E:C3:A0:CA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4b3334-5ce5-3760-b813-368f280fd540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.87.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:91:13:c2:6e:7e:e1:f8:d3:fe:7b:52:9b:e4:ce:e4:4f:
         d2:3f:0b:dd:40:52:f1:a7:f1:1f:ae:e1:4d:4f:bc:2d:2b:16:
         30:1e:2f:17:3b:05:a9:b1:07:f9:c2:bc:44:a6:51:50:0b:98:
         de:3e:0b:5d:87:74:5a:d2:45:95:3d:aa:dd:19:fb:f0:41:52:
         0c:33:03:1a:17:7c:99:8a:f8:a9:50:08:ca:3a:17:68:ec:b0:
         43:9e:a8:e0:c4:fc:52:9e:37:e5:37:13:89:8e:6d:dd:c8:c8:
         ce:6b:9c:a6:4c:6f:38:40:82:46:63:2a:cd:72:e6:7b:c9:28:
         4e:01:5f:ef:30:48:d6:6b:55:11:76:b6:9d:1e:d0:42:e6:17:
         3b:f1:e9:d0:12:d6:63:37:56:ad:e6:b3:24:38:60:4f:e7:a5:
         23:68:30:1c:ce:4c:86:fa:c7:50:6c:ed:c7:a3:1b:97:1e:a3:
         9b:7f:ab:fe:e3:42:8c:b8:96:36:c8:fc:fc:d2:d7:84:b9:df:
         b1:cc:a4:51:21:a0:f2:ef:cc:b6:90:4f:31:05:9f:0f:08:94:
         40:06:f2:e0:9b:7c:2b:b9:5c:96:ef:e4:9a:15:48:62:65:89:
         90:9a:eb:c1:d3:22:42:61:e0:be:21:30:a3:64:50:b6:90:ec:
         b5:6f:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:13:34 2024 by rpki-client on console-ams.rpki-client.org