Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/39634e50-2277-36ae-987a-5889869f1bb1.roa
File:                     39634e50-2277-36ae-987a-5889869f1bb1.roa (raw, json)
Hash identifier:          wzORhliYPRa6dPRpX2qcJe9a3eJZJmR9NO5yOjzNGkU=
Subject key identifier:   8D:DF:1A:4E:B4:20:09:27:EA:85:F5:5B:F0:BE:A9:9C:33:7E:7D:0C
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F432858451A1592A058B52F3E880FADC0
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/39634e50-2277-36ae-987a-5889869f1bb1.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     398415
IP address blocks:        128.254.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:92:a0:58:b5:2f:3e:88:0f:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=e2943fb9-62bb-417a-8dd3-69c3b3ce66af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:1e:51:9b:bb:cb:b3:62:1a:da:e0:b4:ff:
                    26:dc:a1:5d:01:93:de:60:2c:e4:f7:32:65:f2:fe:
                    6d:c9:db:68:39:07:7c:5c:e0:db:87:6b:4a:86:9f:
                    b7:5d:be:92:2a:ae:11:32:06:90:19:b5:10:ff:27:
                    ed:b0:1f:cb:15:f8:46:e0:67:b6:cc:9a:46:23:46:
                    c6:70:a6:85:ea:c0:1a:6e:76:82:34:51:39:ed:83:
                    b6:ca:6f:be:ac:7b:0b:a2:6b:22:7b:22:e3:40:38:
                    b1:4f:46:8a:95:82:68:d0:26:61:a6:19:a4:31:b8:
                    7a:7e:e8:ed:25:4c:de:a0:75:3b:aa:81:55:00:fd:
                    f5:8b:5e:c2:b4:3e:62:d1:8b:53:75:25:4d:ed:73:
                    38:98:da:b7:2b:e1:b4:ae:28:8a:44:75:a6:ce:d0:
                    40:97:1a:9f:52:dc:0f:1f:e3:75:21:6d:06:37:f7:
                    01:3a:04:4f:af:c1:65:24:4c:df:61:a4:fd:0b:1a:
                    62:a2:97:27:51:08:94:b5:29:07:50:b7:f7:87:36:
                    a8:f9:f2:40:21:73:74:2d:ee:d3:64:5f:da:da:fd:
                    cf:36:bd:ed:f6:72:41:bf:1d:53:8e:0f:e7:31:3a:
                    c7:bd:61:68:27:64:08:d3:66:a1:69:4a:2f:2f:4e:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:1A:4E:B4:20:09:27:EA:85:F5:5B:F0:BE:A9:9C:33:7E:7D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/39634e50-2277-36ae-987a-5889869f1bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:1a:b3:55:28:0a:fe:10:a0:93:82:3c:f0:68:9f:af:2e:
         12:12:d0:0f:f7:03:f7:b1:39:cc:e6:3f:ca:c4:cb:3d:97:0f:
         4a:4c:7d:b2:e6:48:08:3e:0b:df:de:9d:08:31:6e:3a:10:0b:
         a8:5d:30:5d:4f:a7:69:68:2f:03:55:46:23:a5:83:bc:37:e8:
         93:c3:60:12:46:e2:03:34:84:4b:4a:51:54:48:fd:42:57:27:
         04:0d:ce:ab:af:24:4a:3f:eb:94:3e:0d:7e:9e:de:27:e1:90:
         23:e3:a5:03:08:43:2c:81:2d:9f:77:1e:14:df:40:c1:f5:24:
         f2:23:c0:54:84:4c:ed:65:a8:9d:53:da:bf:4f:60:3e:78:d6:
         f2:17:6f:ba:d2:90:69:19:b4:23:ad:74:9d:e2:fa:ec:29:76:
         40:26:37:88:b8:a1:3f:8c:d1:e7:fe:59:78:e1:de:9a:1b:07:
         cf:d5:7e:b9:c5:97:98:15:e0:c8:17:ea:f4:26:e2:25:66:81:
         23:5e:d7:e2:7e:74:1c:f8:62:b2:c0:83:08:af:0d:f2:70:f6:
         6c:31:60:2f:88:2c:2c:5a:65:c9:d4:48:84:76:27:5c:06:9c:
         45:42:e7:ee:1f:82:a1:f3:79:fa:32:f3:55:d8:f1:92:8a:7c:
         7e:93:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:26:29 2024 by rpki-client on console-ams.rpki-client.org