Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/92a67273-afa4-3462-aac7-5f16166e9cc1.roa
File:                     92a67273-afa4-3462-aac7-5f16166e9cc1.roa (raw, json)
Hash identifier:          1IFQiylgc3XOt/3cZZurnYEHitFB+oaH5XcT8tL/LEs=
Subject key identifier:   1C:5E:F5:DF:14:16:0B:2C:0A:88:10:1C:4F:15:1C:14:65:F6:BE:29
Certificate issuer:       /CN=78f2a37d-9624-4031-908c-08f70f9830f9
Certificate serial:       010D0C9F432858457D132A4DB13F256A0C63C480
Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/92a67273-afa4-3462-aac7-5f16166e9cc1.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     0
IP address blocks:        149.112.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2a:4d:b1:3f:25:6a:0c:63:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=9a99d768-395c-4c97-adfe-a5e22d56569f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:24:d4:d8:5f:72:60:9b:7f:70:13:20:10:
                    8d:00:d0:3c:d5:3d:d4:bf:a6:61:41:cd:04:24:5b:
                    2e:a0:d1:37:f2:9f:49:a3:86:e8:88:61:5a:cd:7b:
                    43:bd:01:f6:72:d0:61:7c:1b:e3:35:80:e9:6e:b7:
                    69:01:0a:c9:82:bd:8e:c6:49:cf:58:9a:1d:60:4d:
                    4c:a2:c1:29:6c:b2:47:5a:c5:cc:e9:32:1e:96:bc:
                    88:71:09:43:ac:65:f3:b9:61:b0:00:1d:5e:a7:47:
                    55:1e:62:dd:0b:ba:b8:5e:c4:20:14:d0:7e:6e:a5:
                    4f:73:c3:93:94:49:80:fc:f5:0d:e3:71:6a:2c:76:
                    79:72:27:0e:6e:4d:23:5f:4a:a5:e7:77:f0:b6:4e:
                    ae:05:7a:a7:fe:8c:eb:d3:8f:c4:7b:4f:81:10:65:
                    29:f5:f1:94:0c:a1:9d:e3:e5:a3:28:a0:78:ea:99:
                    5f:ef:94:89:0f:dd:3d:47:9e:0c:52:d3:20:bc:8d:
                    aa:a4:1f:49:83:df:8f:6e:06:2a:73:01:2e:c3:52:
                    b1:b9:fd:26:b7:11:77:aa:f6:bb:30:b9:07:d8:50:
                    59:10:6f:90:67:68:b9:2f:1b:42:3b:14:9d:bc:4a:
                    bc:41:67:a0:69:8c:06:6a:60:26:da:4e:7c:31:bf:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5E:F5:DF:14:16:0B:2C:0A:88:10:1C:4F:15:1C:14:65:F6:BE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/92a67273-afa4-3462-aac7-5f16166e9cc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl

            X509v3 Authority Key Identifier:
                keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:29:89:e2:cc:36:de:62:99:ee:8d:8c:f8:e4:83:88:00:2e:
         09:e7:b9:e7:07:c2:49:47:ce:11:19:7d:29:1c:40:9c:16:76:
         3c:3c:76:bf:63:dd:00:e7:a2:09:72:5c:9e:42:b5:7f:09:e3:
         81:6d:e1:4b:e0:c3:59:d8:cf:e5:e7:26:b4:82:37:7f:54:2e:
         4d:3b:c8:d3:87:e9:34:c8:a1:d6:da:34:a8:3b:d6:88:24:d0:
         6e:c7:f0:90:50:83:7c:59:c2:b9:c6:b3:bf:7d:01:f5:65:7e:
         61:97:1a:de:d1:b0:ff:b7:6e:a8:86:65:d2:60:e0:92:b5:83:
         a6:b3:8c:c1:0e:bf:e6:5f:a1:eb:3f:7b:c8:be:11:f6:2c:7b:
         62:ae:ff:15:b3:43:6a:36:8d:e1:38:39:25:55:d9:eb:ed:84:
         73:79:c2:48:04:5f:47:f0:d8:e8:58:a4:b9:4e:41:47:33:3a:
         e5:bc:4d:74:5c:52:a6:a8:63:70:df:7d:2a:db:e8:46:2e:aa:
         c7:57:20:cc:1b:5c:e0:aa:5f:0d:89:43:99:02:ae:1f:25:aa:
         e1:9d:b6:b0:ae:12:de:28:13:ed:e2:6d:cc:e0:79:23:5a:31:
         e9:e3:64:ed:b0:66:39:87:fd:07:6d:69:69:5f:c1:d9:3c:49:
         b4:0e:17:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:29:01 2024 by rpki-client on console-ams.rpki-client.org