Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0677af62-a65b-322a-8ad5-f2130edae6bf.roa
File:                     0677af62-a65b-322a-8ad5-f2130edae6bf.roa (raw, json)
Hash identifier:          HNdZllQL0mN+nALubLNFJ5kn8OSIrU/d1GivCrHSetc=
Subject key identifier:   D4:7D:62:44:57:0E:89:CE:49:98:11:B3:F3:49:9B:2F:D1:35:71:EE
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F43285845304D359B5F889DD3B730A680
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0677af62-a65b-322a-8ad5-f2130edae6bf.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     400232
IP address blocks:        128.254.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:35:9b:5f:88:9d:d3:b7:30:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=f5b59336-2318-4d1a-aa94-b666a213d8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:e4:53:6e:10:3b:f7:c6:10:a5:38:d7:75:
                    19:57:12:41:e7:5d:39:18:bc:dd:83:da:7c:66:76:
                    88:76:72:a9:f4:50:a1:db:92:6f:83:85:62:a6:b0:
                    a7:1d:85:5a:46:d4:86:49:41:de:ca:01:a0:b1:87:
                    b8:06:7c:5d:c4:64:17:e6:33:34:ff:90:93:e1:8b:
                    52:a8:7b:9b:77:bc:a0:19:57:ab:24:5b:85:d0:84:
                    33:13:88:d0:40:be:89:ce:99:52:97:be:3c:3b:08:
                    5e:b9:0b:34:6e:bb:e1:a7:e2:db:e4:1f:e0:73:bb:
                    65:fc:40:44:44:e5:14:af:c4:30:e2:ea:3b:b9:eb:
                    1f:a1:0e:84:41:08:6b:f3:37:74:25:35:5a:c3:ab:
                    77:d4:f9:d2:1e:7a:11:a4:ac:32:5e:b3:b9:0a:f5:
                    9c:62:7d:f4:f7:61:a9:81:1b:38:c1:29:27:8f:64:
                    29:05:7a:67:ac:a9:14:86:98:25:ec:c5:b4:31:ed:
                    59:0b:7e:1c:45:1b:41:32:b2:cf:bc:1c:ed:6d:40:
                    57:5a:07:48:15:62:f6:96:67:43:1c:d2:a3:3b:ca:
                    19:ab:87:90:0f:8f:c2:0f:7f:4f:06:5d:bb:22:a9:
                    53:28:10:d7:55:3c:f2:8e:03:13:6d:61:c4:3e:41:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7D:62:44:57:0E:89:CE:49:98:11:B3:F3:49:9B:2F:D1:35:71:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0677af62-a65b-322a-8ad5-f2130edae6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:50:90:0a:5e:20:56:d2:c0:f3:6b:c7:6f:63:e8:98:63:00:
         10:87:66:5c:fd:5f:1c:97:d1:1c:7a:8c:c7:6d:7a:5c:63:6d:
         73:79:fe:3f:ef:6f:3b:fa:24:e1:1e:98:95:31:bc:08:d6:84:
         39:81:2d:e1:06:1c:32:95:f5:a5:c8:4c:47:68:30:e9:e1:d7:
         dd:76:73:26:4b:f5:8a:38:35:d2:23:b9:47:8d:cf:e4:9b:ea:
         fb:bd:78:e2:12:1d:c6:2a:6b:ff:8d:a3:88:28:d4:21:6e:1e:
         2e:00:55:5f:37:58:5d:e3:97:91:b2:da:3b:44:2e:7e:d8:20:
         77:68:26:b0:25:34:31:25:f0:47:3b:27:9e:a2:1b:d0:bb:eb:
         6f:ee:f3:34:1f:ed:6e:48:ac:81:25:b0:da:ed:87:63:ce:c9:
         96:40:c1:83:a0:0c:e0:9e:c4:3a:a9:28:65:0b:97:b1:58:f1:
         dd:f8:a6:ee:47:98:44:05:d5:82:fb:33:8a:1b:32:d0:a3:99:
         17:42:33:89:04:89:7a:5f:8c:0a:b1:c6:b0:74:97:c4:cd:91:
         b3:d5:29:b1:53:61:bd:eb:4f:d7:98:48:21:79:2a:a3:ed:4e:
         d0:5d:65:a0:95:ec:64:de:63:7c:6f:b0:e1:94:2e:68:02:6c:
         27:ec:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:36:44 2024 by rpki-client on console-fra.rpki-client.org