Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa
File:                     ce0befbe-67ad-31e1-a53f-d68c86dda911.roa (raw, json)
Hash identifier:          RnuEM8V6MFKsbVc5MJf3mZd6s4h7l0Uax62/sC4nsXA=
Subject key identifier:   27:DF:85:67:0A:60:AC:FD:52:AD:E5:A9:8A:A3:DC:7C:15:C4:04:55
Certificate issuer:       /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
Certificate serial:       010D0C9F432858452AB7E15163666321CEDCA200
Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        174.34.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e1:51:63:66:63:21:ce:dc:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=d00a6c1a-6c4b-41a3-af51-38ec7373f2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:61:69:c9:a2:dc:22:c8:b5:e4:db:a2:13:
                    5a:37:97:e3:5b:b5:bb:cb:90:73:59:ab:6a:9e:82:
                    ca:5a:51:48:73:80:f5:b6:8f:81:bc:0d:9f:18:23:
                    3f:0c:e2:46:12:1b:c3:80:00:0c:0a:2b:fb:d9:3e:
                    59:48:5b:7c:4b:26:e5:6d:cc:b8:ce:9f:14:e0:1b:
                    13:d7:e4:a4:e0:6c:bc:8c:57:41:79:74:82:db:6b:
                    1c:55:8a:bf:d5:ba:45:94:35:6f:eb:19:54:b6:a1:
                    d6:5b:3d:05:fb:c4:4a:6b:e1:41:77:ae:13:ef:0f:
                    48:73:1e:7d:fe:f2:8b:ec:93:12:ee:58:d9:2c:66:
                    d2:8a:a5:1d:29:93:a6:5a:0b:ad:5a:5d:16:d3:fb:
                    c9:3f:e1:49:a1:62:1a:9d:3b:d6:20:a9:69:0a:f5:
                    61:27:29:f7:8d:80:f7:0d:97:f9:21:80:e4:26:78:
                    0b:77:c2:37:08:23:fb:aa:e5:c7:d6:b3:9f:00:3d:
                    32:a7:aa:43:dc:24:22:4d:d2:19:70:a6:38:c9:1b:
                    07:81:ea:19:27:9c:d2:33:52:73:ba:8d:2e:c7:57:
                    37:d9:20:a3:1f:b9:52:2d:f6:7c:a8:f8:d2:67:29:
                    fe:51:ae:6b:5f:b6:a3:a0:88:ee:d3:b2:7d:a2:a9:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DF:85:67:0A:60:AC:FD:52:AD:E5:A9:8A:A3:DC:7C:15:C4:04:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl

            X509v3 Authority Key Identifier:
                keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:6d:0b:e1:8a:9a:50:3c:82:15:67:f3:04:ec:ea:70:52:
         45:f3:7a:20:5c:14:4d:09:60:bd:a1:1b:71:85:7e:bd:a5:6c:
         56:fd:0f:01:f6:85:1c:cb:2d:3f:28:f9:6e:59:4b:1f:9a:9e:
         dc:06:a1:89:22:33:0f:24:c3:89:83:a4:24:cc:82:44:e1:e7:
         f6:93:ff:3f:14:a6:96:5f:2f:5d:91:b8:8d:d9:d5:8b:05:0d:
         4f:84:7e:69:88:6e:11:8c:c0:f5:06:86:5f:4b:72:3e:ff:af:
         bb:8c:84:3e:60:47:5c:15:90:26:69:7c:ab:ac:78:22:53:0b:
         e9:9d:6e:d0:44:84:bb:84:2a:80:3a:14:1b:c0:06:3e:ce:ab:
         fc:a7:4d:ca:7c:4a:a2:ea:11:31:43:73:71:1b:e7:9c:f1:27:
         55:a2:22:79:26:f3:53:b6:2e:e6:7c:80:0f:87:a3:0e:4c:1c:
         f4:20:3e:d3:93:d6:c5:23:c4:1c:59:c8:41:4a:e0:d3:63:be:
         ac:58:29:41:81:f1:6f:63:0a:44:cf:26:69:76:95:85:48:83:
         f5:87:cf:58:77:66:b6:06:95:27:d3:52:a4:6c:d7:fb:75:13:
         fb:cb:f4:24:75:0c:d7:13:bc:6d:a9:c5:38:b7:50:8d:c3:ff:
         6c:68:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:05 2024 by rpki-client on console-fra.rpki-client.org