Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa
File:                     b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa (raw, json)
Hash identifier:          LsSbdOc2SqSq6vysniNxL/PM+vq3XpN37l0nbkb+dsI=
Subject key identifier:   B6:7F:95:65:4C:9C:39:DE:39:35:87:E3:50:5C:48:82:E1:08:92:4F
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F4328584596E2CBF3855FE62D72792980
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa
Signing time:             Thu 18 Apr 2024 18:54:18 +0000
ROA not before:           Thu 18 Apr 2024 18:54:18 +0000
ROA not after:            Wed 17 Jul 2024 18:54:18 +0000
asID:                     16509
IP address blocks:        170.200.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:e2:cb:f3:85:5f:e6:2d:72:79:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Apr 18 18:54:18 2024 GMT
            Not After : Jul 17 18:54:18 2024 GMT
        Subject: CN=23a39309-a495-477c-9e8d-fee492d60422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:4a:00:f6:ac:ed:d9:c6:fe:58:f7:36:31:
                    9c:09:83:7c:86:4a:ce:6c:44:99:96:44:53:fd:0f:
                    a7:c7:c4:20:87:a4:f3:62:92:ea:5d:ef:de:48:42:
                    2d:d3:a0:0d:2b:55:70:44:9e:dd:1e:6b:a4:6f:56:
                    57:59:e1:fe:de:b2:94:01:88:a0:92:3b:41:ee:45:
                    99:a3:0f:9c:96:1c:26:04:f0:25:03:b5:dd:c3:25:
                    ba:28:73:c2:f7:61:51:a8:fc:d4:3f:3a:7f:b3:6d:
                    28:c6:a3:f0:51:07:87:1f:55:2f:3b:1e:71:d1:d4:
                    90:94:0a:09:5c:23:15:ce:9a:a9:06:18:53:65:36:
                    41:1d:ef:b5:f5:89:3d:10:31:b3:e7:cf:42:01:b4:
                    10:cd:03:2b:b2:e4:fa:3d:40:20:2d:5f:de:f4:78:
                    f0:f2:91:32:85:bb:3d:6d:d6:9a:b4:35:67:33:c3:
                    c2:9f:d9:1c:11:a3:e0:e3:63:64:d8:57:21:cc:64:
                    1d:09:5a:55:ef:02:f3:bd:ff:fa:f0:d5:24:b9:7c:
                    9c:aa:c0:73:f6:e0:b1:09:57:f6:23:87:4b:2b:33:
                    ba:d3:9d:db:10:7b:9b:1f:06:31:7f:d7:27:07:1b:
                    7b:92:bb:b4:0e:ef:32:e0:27:d6:d8:0c:52:5a:11:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7F:95:65:4C:9C:39:DE:39:35:87:E3:50:5C:48:82:E1:08:92:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:59:fd:5c:d7:2c:5e:6b:b7:6a:11:94:ca:19:80:50:e3:
         ee:ed:7b:12:9f:8c:a7:aa:b8:af:9e:d3:a6:39:16:85:83:8a:
         c1:10:b6:ea:e3:9c:09:fd:bd:f6:da:70:4d:e8:5d:4d:3d:46:
         d9:f7:11:74:df:7b:5c:23:49:5e:a5:45:26:72:c1:4a:a5:76:
         9e:57:15:da:a1:88:3c:f5:cb:8f:37:f3:71:15:e5:6e:65:f3:
         49:80:df:a0:d3:3b:f6:af:94:28:43:00:56:69:fa:cd:dc:11:
         e8:e9:6d:dd:f8:28:30:47:78:40:1d:a7:7f:8c:40:2e:73:ac:
         63:ce:97:e0:43:8f:e7:80:a6:28:54:46:f3:41:d2:ff:db:a0:
         a5:ee:20:de:32:c3:8f:f6:c0:46:92:08:40:22:40:b2:fb:c6:
         f4:2a:6a:4e:e1:e4:97:e9:55:9f:52:b7:97:14:e2:21:88:90:
         e4:57:52:b6:b0:3f:a8:c1:ce:b1:8d:2a:c4:2c:b3:67:ee:4c:
         5e:da:c4:63:2d:2b:36:56:c3:95:d0:3e:7c:09:1e:7d:96:0f:
         dc:74:3b:29:a5:12:a8:97:3f:40:3a:99:8f:dc:bd:61:5f:d2:
         c0:cc:98:e6:cd:8d:aa:3f:62:f1:26:cf:fa:1b:cc:f2:d8:64:
         8f:63:f2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:37 2024 by rpki-client on console-fra.rpki-client.org