Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa
File:                     d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa (raw, json)
Hash identifier:          k+Zb/dZipPvauIA5xo3NfZuKwZaXO1K3/L67iNlhZAQ=
Subject key identifier:   DB:8F:DF:36:68:04:50:4A:98:89:1A:2E:31:BF:B3:63:99:D6:97:B1
Certificate issuer:       /CN=fbeece25-87eb-4619-9af7-e2d6df16e5ca
Certificate serial:       010D0C9F43285845BA7E2E0C0AFD2742D3634F00
Authority key identifier: 6B:D0:A0:DE:1C:96:06:80:A2:37:CA:49:47:A4:79:FF:07:FC:9A:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        170.22.156.0/23 maxlen: 23
                          170.22.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2e:0c:0a:fd:27:42:d3:63:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbeece25-87eb-4619-9af7-e2d6df16e5ca
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=d1cc8897-8a93-47d9-a068-afda4b2d5c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:d5:69:73:82:d3:35:ec:68:37:92:84:d7:
                    b6:85:26:cb:73:71:18:72:dc:da:fe:3c:c1:1c:b6:
                    f6:c6:30:2d:3f:95:29:5d:cd:2d:da:c9:b0:f6:1b:
                    5e:6a:94:34:bf:db:7d:a9:dd:82:8e:d3:7a:91:ae:
                    79:60:c7:14:64:f6:23:43:b5:5a:f4:52:4c:dd:8a:
                    8b:02:34:50:3c:ea:b9:97:0a:67:6b:50:f3:e7:09:
                    3d:af:ad:99:59:c8:f4:a9:c6:54:69:04:b8:68:16:
                    1d:c1:ce:4f:73:e0:ef:f8:bb:f4:d9:ea:82:13:48:
                    84:ad:3b:27:ab:af:5f:1d:c4:25:5f:94:bc:14:48:
                    fd:d8:a6:bb:ac:25:46:85:1c:dc:47:f5:4e:4e:8b:
                    99:35:78:1e:47:40:b5:54:82:99:00:ef:30:a1:89:
                    bc:ac:f6:3b:5b:26:51:90:f5:e4:18:ea:e2:67:ba:
                    3a:49:9f:2a:55:46:a1:4f:26:e4:f5:43:29:c0:ca:
                    19:77:4a:68:c8:4b:1f:58:bd:c4:ab:24:02:17:18:
                    56:6f:e9:73:e4:29:80:b3:dc:48:7e:e0:5f:3c:26:
                    52:8b:2c:bc:2b:58:86:8e:50:1a:53:78:0e:70:fc:
                    ae:b5:3c:08:3a:ee:14:19:46:80:c9:aa:5e:7d:43:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8F:DF:36:68:04:50:4A:98:89:1A:2E:31:BF:B3:63:99:D6:97:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.crl

            X509v3 Authority Key Identifier:
                keyid:6B:D0:A0:DE:1C:96:06:80:A2:37:CA:49:47:A4:79:FF:07:FC:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.22.154.0-170.22.157.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0d:63:07:0f:e9:b0:d6:40:b9:78:ef:64:df:38:5b:1b:17:
         86:aa:37:76:dd:71:dc:cc:38:1b:5e:83:e1:83:62:9c:0a:25:
         e5:a3:67:ad:2d:ac:ed:2e:80:1d:6c:ef:b1:76:82:3f:36:73:
         c7:41:72:60:17:c8:99:f8:90:5a:62:4b:e9:ae:e5:07:2e:59:
         a8:af:61:47:17:f4:7e:a3:ae:5d:f4:b3:23:b1:21:39:41:4d:
         26:c5:de:2a:ba:dc:f4:01:48:58:5f:48:31:34:3e:73:e4:78:
         d0:d3:68:41:3b:f2:09:91:ff:4a:ca:72:92:44:14:93:b9:1f:
         af:34:27:3a:57:59:8e:80:a7:b4:ec:11:70:b3:d4:04:fe:67:
         fa:e1:33:e2:a0:8a:8a:6f:f5:26:76:29:c9:a3:d1:9c:ef:3d:
         8f:d6:74:a6:f1:20:9a:82:a5:84:f6:07:52:95:23:a5:94:e8:
         d7:f2:f2:c9:4d:7f:2b:cd:89:a7:8b:8c:86:b0:85:33:b5:d4:
         27:e8:2a:c7:e4:c5:40:b8:57:cb:18:22:06:88:04:a8:7a:d5:
         fe:4b:97:8d:30:f7:40:0d:15:32:ba:cc:59:d6:57:68:d0:db:
         d3:d4:77:36:b6:7d:5d:16:2d:b2:79:28:07:b3:19:e7:c7:02:
         98:e5:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:13:01 2024 by rpki-client on console-fra.rpki-client.org