Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa
File:                     4ee5944c-2578-327e-8b6d-d50b04da84cd.roa (raw, json)
Hash identifier:          ZZHfQP3poP1pDcpwzCWa5S7GQR3xWG44K4QrQ3FPYrE=
Subject key identifier:   63:2A:3A:CB:E5:E2:FA:25:1B:AB:C2:7F:25:01:6C:38:94:7F:C7:92
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F43285845B7B37CA05F0D253F33C8CF40
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        173.241.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7c:a0:5f:0d:25:3f:33:c8:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=73e2969c-29ff-4723-9903-5b164d162e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:f7:cf:47:f3:ec:06:76:a9:1c:66:d8:12:
                    07:db:1c:76:17:0c:70:39:94:c4:a5:a8:52:c9:18:
                    bd:f4:9c:fc:c8:5a:80:09:aa:ff:43:2a:c0:c6:3d:
                    c3:cc:45:69:16:c5:a3:1a:20:f1:6a:a3:8a:44:d7:
                    50:de:48:bc:a4:9a:76:04:f6:ae:95:52:2e:62:c1:
                    27:76:78:5f:02:69:e0:2a:b1:af:fe:6e:8f:b4:0a:
                    00:3d:93:94:fe:60:db:82:0a:53:b3:99:db:74:14:
                    39:7f:2d:63:d9:f2:37:f3:ed:4c:fc:e0:15:1f:d8:
                    1d:fb:bf:76:e1:af:d0:15:8e:c4:ce:4b:dc:1c:b6:
                    72:de:f6:82:63:d2:b3:1d:65:7d:1a:b7:1b:a8:6f:
                    21:b6:43:b3:a3:7b:b7:92:30:11:2d:f2:c2:b8:5c:
                    5b:6e:6a:85:88:3c:7d:8f:0b:37:f2:a2:0d:6a:0b:
                    a8:06:99:33:b9:b4:cb:91:61:aa:c8:5b:ab:95:6a:
                    35:f3:11:14:fb:b7:04:0e:3b:60:9a:be:3c:be:c9:
                    d7:3d:16:3b:82:dc:f4:09:f4:da:93:29:31:21:31:
                    08:f6:a3:09:2e:22:34:33:e2:45:bc:04:a6:bd:12:
                    07:b7:b2:2f:42:d6:5a:96:01:f0:8b:62:18:ab:43:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2A:3A:CB:E5:E2:FA:25:1B:AB:C2:7F:25:01:6C:38:94:7F:C7:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3a:5a:6e:69:64:ec:06:28:4a:94:91:29:24:b1:43:96:b2:
         b3:57:6e:9c:16:62:5a:1e:c4:2e:b9:a9:1d:d4:08:02:02:37:
         49:7a:3a:3b:f0:08:aa:83:45:8d:d1:f8:30:6e:ef:ff:24:bd:
         4e:68:21:1c:f5:5a:e1:55:b3:b6:39:b8:c7:35:02:b4:57:fb:
         e8:23:9b:c8:2c:f8:78:76:59:6a:fc:bd:ea:1c:20:29:49:d3:
         0a:7c:c3:80:5c:b9:c2:96:f0:b2:52:2e:fd:c8:33:ae:4d:b3:
         9f:04:b8:d9:fc:84:85:96:33:74:ec:fe:a1:df:ea:48:d0:91:
         ec:2c:a4:bf:63:01:c0:d4:03:bd:73:e9:a6:ac:b0:f1:c5:e2:
         ce:d3:2f:0c:8c:4f:9e:c6:3d:ad:47:df:b1:2f:89:8d:a6:7c:
         3a:0b:04:e9:09:73:8d:a4:75:3f:68:92:90:87:e0:c6:50:b2:
         c0:dd:e0:8d:c7:1f:3d:b2:47:94:22:8d:06:d0:ca:25:79:a3:
         5f:ac:0a:b8:44:50:7c:0a:01:c8:3d:55:b6:a2:80:c9:83:80:
         69:b2:14:16:4e:87:c5:44:22:12:cc:e3:84:c9:95:9c:17:bc:
         19:11:4d:08:68:80:d8:ed:cf:f5:4d:3b:63:4a:5f:87:8d:fd:
         79:a2:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:53 2024 by rpki-client on console-fra.rpki-client.org