Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/70082917-4d74-3930-a4b4-219b155f6b2e.roa
File:                     70082917-4d74-3930-a4b4-219b155f6b2e.roa (raw, json)
Hash identifier:          ETleYbdOjhLeNnnpuOSmx20c8rkjbWMNXok4yKjkGx4=
Subject key identifier:   C1:FF:A6:FF:C1:29:2C:1E:4D:81:59:35:6D:0B:BA:7B:2A:CD:AF:CE
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F43285844EC0549C148F7F92C6CF73340
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/70082917-4d74-3930-a4b4-219b155f6b2e.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     33600
IP address blocks:        149.149.0.0/16 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:49:c1:48:f7:f9:2c:6c:f7:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=d8f8541e-b00f-4c80-b0cd-09a34a2c0aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:ed:f5:fc:34:01:18:53:09:b4:ca:d3:52:
                    d7:c8:f7:03:62:30:8b:e3:1e:2a:cc:f5:f6:28:d0:
                    af:4b:64:6f:ea:b0:a8:ee:5d:b2:df:34:6a:e9:36:
                    0b:11:1b:cd:f5:5e:da:52:8b:16:1d:e1:41:f6:07:
                    e9:9a:49:ac:34:1b:be:0e:d1:3e:96:c4:13:50:46:
                    5a:d3:4c:cd:ac:cb:63:ac:b2:d4:2c:b1:b8:dc:61:
                    27:17:77:ca:c5:c9:6b:fc:31:e7:00:21:b8:23:15:
                    f9:89:68:d4:c3:43:1e:a6:8d:dd:74:ee:23:70:4b:
                    b1:62:5b:e9:18:8f:5b:c4:69:9d:ac:b2:60:83:90:
                    9c:31:0a:b0:6d:a4:36:14:ac:44:10:8a:e0:28:97:
                    60:36:7f:79:25:18:83:4b:93:e8:bd:ff:6a:d3:bf:
                    f7:83:a3:b4:16:0f:ea:eb:69:77:27:2b:22:8d:ca:
                    a7:20:43:6b:53:df:df:c2:ff:32:3b:ed:6f:cf:0d:
                    71:5a:31:88:3b:9a:e8:29:1f:56:47:d0:46:77:39:
                    7b:7d:f2:17:aa:98:15:61:c9:aa:3a:25:c5:de:7d:
                    69:8b:2d:67:8c:a8:5e:d0:af:62:9c:11:34:20:9b:
                    a6:7b:0f:ae:f5:b1:e5:d8:05:2d:4a:38:2b:78:ff:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:A6:FF:C1:29:2C:1E:4D:81:59:35:6D:0B:BA:7B:2A:CD:AF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/70082917-4d74-3930-a4b4-219b155f6b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:33:11:41:f9:23:89:99:9d:02:c2:07:dc:31:26:5d:0d:9c:
         41:1f:c4:60:ca:83:b0:46:bf:1b:b4:bc:9a:2a:26:b4:1c:fe:
         bc:1a:64:a5:78:f0:50:c5:cf:d1:8c:a6:bf:a9:32:9b:a1:08:
         1a:85:e4:3f:82:be:4a:f6:9c:b9:87:8a:31:fc:5b:d1:b9:7a:
         b9:90:f9:9e:87:1a:ec:a1:38:31:66:ef:af:6f:27:bd:6e:79:
         5a:81:8f:ef:13:d0:0d:f5:61:76:d9:31:e1:53:5b:7c:9c:34:
         58:1f:77:b9:d9:29:96:06:73:a1:9a:ad:de:e3:55:74:14:3a:
         8d:93:78:f8:81:53:d6:f6:a2:ab:34:7f:0d:51:cd:66:bb:ac:
         78:8f:4f:6a:89:d1:76:90:41:80:ab:bb:e9:96:5e:9a:ca:eb:
         51:ef:79:db:d6:f2:50:51:f5:7e:cd:60:3f:3b:24:28:ad:c6:
         8f:4a:d6:45:ff:2c:5c:da:7d:09:97:ef:1f:7b:7b:93:b4:f2:
         22:68:29:a8:ad:d7:8a:d8:af:2a:7b:d1:7e:f5:d8:05:5d:75:
         0f:50:23:30:6e:e0:77:c9:0a:86:df:e2:d8:47:15:c7:11:4e:
         59:a9:db:58:80:59:df:64:20:19:86:bf:6b:32:67:63:6d:43:
         86:5a:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:26:01 2024 by rpki-client on console-fra.rpki-client.org