Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa
File:                     7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa (raw, json)
Hash identifier:          WqbF73SluWUNOykWwCFKNPr1XFVFNfT584u4noJFDKU=
Subject key identifier:   90:D5:A8:40:39:80:5C:0A:53:CE:22:F8:19:2A:C0:75:D2:D9:BB:6C
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F4328584507F01F9F76E13BB097F9BDA8
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     271787
IP address blocks:        149.234.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:1f:9f:76:e1:3b:b0:97:f9:bd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=0e90d9a8-7ab9-406b-aba8-2fdde076e6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:33:dc:e1:87:e1:7e:09:7e:1e:42:22:97:
                    5f:b7:5b:e7:59:ae:b3:95:6f:4e:ff:50:95:c3:33:
                    59:32:40:6c:d1:3c:30:4f:55:e0:9c:84:e2:fb:38:
                    0b:bf:78:27:16:10:94:da:95:b0:44:9d:71:db:83:
                    92:ea:f8:27:17:44:1e:3b:7f:9c:c1:a1:ae:f1:39:
                    07:40:43:8e:d7:6f:c1:61:da:0a:00:1f:92:6d:b1:
                    d2:e1:56:c1:53:b7:38:79:1d:a6:e8:7b:b3:2a:af:
                    a6:08:5a:d8:2f:35:e3:70:1f:e8:28:e7:61:97:c6:
                    5b:27:e0:fc:5a:98:06:83:4d:14:7d:74:fa:75:1d:
                    b1:ac:64:82:cb:40:70:6a:d2:20:c2:23:8f:24:6c:
                    5a:0a:38:4f:c9:46:9c:ab:21:60:c7:08:1c:10:a5:
                    7b:82:aa:bd:bf:ab:6a:03:bd:6c:4e:9b:08:26:d1:
                    06:5b:91:f8:f5:7d:53:72:3b:ff:2e:a7:47:e9:af:
                    22:62:e4:e0:fa:58:6f:6a:bd:b0:80:ab:1b:ca:7d:
                    1e:77:1c:15:4a:69:b5:33:52:af:c0:da:c1:8f:87:
                    ca:c1:b9:26:bd:60:c5:e0:f5:19:7e:59:58:8d:ed:
                    19:76:66:8f:d1:60:c2:45:18:1c:cc:45:fe:1e:19:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D5:A8:40:39:80:5C:0A:53:CE:22:F8:19:2A:C0:75:D2:D9:BB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:69:57:ee:28:6a:22:53:07:a9:57:8b:42:58:4c:01:93:72:
         2e:e2:d7:c7:5c:79:cf:de:e6:e3:2b:b3:47:dc:2d:f3:e2:da:
         ef:c9:c2:5a:58:f4:ca:96:cb:54:96:31:dc:bf:40:79:07:ec:
         b4:84:30:f6:05:1b:4a:28:8a:1f:88:7e:ef:cf:fa:20:73:29:
         99:6f:af:70:d7:e6:33:7c:63:13:d9:ff:60:22:fc:ec:f6:46:
         fe:86:fd:ee:b0:16:89:e7:3a:3b:d3:6e:ca:80:98:3c:eb:8f:
         76:8f:e9:23:0b:40:3a:f0:97:95:95:79:7c:1c:64:01:0f:27:
         da:8c:df:88:73:fb:1b:06:9d:f1:99:14:74:47:6c:e7:4d:e2:
         88:9e:7f:9f:73:10:8e:c6:29:38:04:c8:cc:7d:e6:66:d2:af:
         f9:96:60:01:a7:e6:b4:52:ae:45:34:b9:66:86:7d:26:36:82:
         ec:48:b4:68:73:34:1d:61:ec:71:89:8e:2b:38:58:da:f4:fc:
         55:27:7c:49:f0:c4:fc:c0:a2:51:05:85:83:e0:92:e1:3c:dd:
         37:a3:fa:4e:54:68:b3:05:ab:41:25:43:0b:e2:e4:34:12:e4:
         62:e3:3a:f4:34:b8:aa:8e:ed:2d:63:e5:1e:d5:88:4f:49:bc:
         29:4b:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:32:51 2024 by rpki-client on console-fra.rpki-client.org