Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/717ef7a3-36a2-3cbc-9d46-6f3d2ef89dcb.roa
File:                     717ef7a3-36a2-3cbc-9d46-6f3d2ef89dcb.roa (raw, json)
Hash identifier:          rb1PUzX6dSayuipr76bh7Nw9UtvOigu4/9eZGCxoQ4U=
Subject key identifier:   91:77:18:0B:F3:4F:5F:27:64:F5:FC:B0:FE:DB:74:BC:86:72:A8:56
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858454623576483089C2B787B5C80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/717ef7a3-36a2-3cbc-9d46-6f3d2ef89dcb.roa
Signing time:             Wed 20 Mar 2024 20:43:52 +0000
ROA not before:           Wed 20 Mar 2024 20:43:52 +0000
ROA not after:            Tue 18 Jun 2024 20:43:52 +0000
asID:                     36492
IP address blocks:        172.102.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:57:64:83:08:9c:2b:78:7b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:43:52 2024 GMT
            Not After : Jun 18 20:43:52 2024 GMT
        Subject: CN=314e0ce8-90f3-4991-964d-9bb7a81f5a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:f6:0a:28:18:82:6f:26:17:0e:60:05:fa:
                    68:10:9d:e6:b5:7d:20:c0:a4:f4:7b:fd:c2:86:08:
                    d5:88:88:cd:90:94:27:d3:c4:b8:d2:2c:07:be:21:
                    f6:eb:37:6c:77:c9:26:35:be:3d:cf:0f:0e:ac:b3:
                    08:f9:08:7e:b1:04:63:35:27:23:d5:4e:19:61:e9:
                    d3:c4:dd:10:13:46:f2:2d:a6:b1:f2:00:c5:b8:a9:
                    f8:0d:f9:47:f7:f6:99:a6:29:3c:fe:68:60:d0:c4:
                    bb:bf:9a:14:74:e7:8c:0e:ca:85:c5:c3:fa:d5:3f:
                    dd:82:58:c1:a5:b9:0a:ed:aa:60:2d:13:73:ef:dc:
                    ab:e5:f4:96:0a:8c:6e:7c:fa:1d:1f:bc:ff:a1:53:
                    b8:32:69:46:30:1b:f6:d5:85:39:fb:5c:d4:34:b8:
                    7b:cb:72:74:07:4d:11:41:52:cf:8b:4e:f7:c5:4d:
                    ca:75:1a:0c:fb:83:c7:6c:fe:5a:50:00:0a:e0:e6:
                    ab:66:3c:7f:fb:50:91:4e:1c:4f:ad:2b:c8:c6:71:
                    c6:bc:f0:5f:0d:83:b1:80:75:6a:26:e8:68:72:69:
                    fc:23:a2:9a:4e:7c:da:85:2a:a6:43:1c:cd:87:27:
                    3b:31:cb:78:e0:35:c3:4d:5d:47:7c:18:51:50:18:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:77:18:0B:F3:4F:5F:27:64:F5:FC:B0:FE:DB:74:BC:86:72:A8:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/717ef7a3-36a2-3cbc-9d46-6f3d2ef89dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6c:52:16:8c:b7:1f:5b:99:45:4e:28:54:56:92:b6:c0:31:
         a8:7e:f3:c3:c8:53:97:a4:8d:d2:28:4e:33:d1:64:90:7b:fb:
         25:c7:c9:24:58:13:94:a6:7a:e2:f0:12:90:4e:df:df:0e:76:
         42:26:3a:f9:cc:02:63:17:8b:da:1d:11:82:5b:93:1c:09:25:
         c1:e1:76:45:a1:50:bf:38:5a:41:43:db:05:53:72:13:b9:47:
         92:d5:a7:07:c9:c3:b6:04:8c:e1:81:b5:31:c8:72:c1:d7:7d:
         d4:3b:cf:8e:e4:6e:95:b7:6e:ed:cc:b5:51:5d:dc:d0:c4:b4:
         58:9f:3a:3e:25:6a:87:ce:b1:93:cf:1d:9e:2b:84:c0:d5:8c:
         6a:8c:28:49:14:d8:8a:4f:d7:5c:e2:da:3f:45:7d:f9:0f:d5:
         9f:4d:4d:fc:1e:58:b6:66:19:39:71:0d:e4:39:8e:b4:a1:68:
         31:7c:66:6c:f2:ae:24:6b:79:cf:78:a9:63:af:69:e7:21:0c:
         35:be:2d:0c:6c:fd:eb:91:22:eb:9f:07:8b:e1:be:31:8f:68:
         bb:04:00:92:c0:bf:83:22:4e:34:9e:ec:a0:95:6d:d3:d3:1a:
         3e:21:32:d2:91:74:bd:7f:75:c7:1d:5d:cd:3b:f8:dd:f9:ee:
         a1:99:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:20 2024 by rpki-client on console-fra.rpki-client.org