Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
File:                     1ece9c7d-b04b-3926-9731-b706c26b400a.roa (raw, json)
Hash identifier:          2aUpO15REUzzqKYnBpOfrz+gt5xqG2gnOo6ArFjZ5Ys=
Subject key identifier:   52:2F:18:F3:3C:A9:DC:BC:1F:07:65:77:8C:E4:5A:91:B2:F3:FE:14
Certificate issuer:       /CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
Certificate serial:       010D0C9F4328584531B298C1BCAD9BADC6C03880
Authority key identifier: 6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     20169
IP address blocks:        149.112.51.0/24 maxlen: 24
                          2001:504:128::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:98:c1:bc:ad:9b:ad:c6:c0:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=022f5183-9e0e-42e8-ac20-7a4922adf8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:8e:fa:43:d9:24:b2:48:79:b5:e0:bc:b2:
                    7d:6e:fc:2f:08:dd:bd:f4:ac:3d:a2:c3:fd:04:65:
                    6f:4d:21:bb:eb:28:32:48:22:5e:b9:3e:2f:4d:db:
                    16:96:a9:43:0b:5d:fa:74:fa:57:93:2f:61:ec:36:
                    d5:fc:10:ed:cb:0a:b7:b6:8a:85:3e:35:81:2a:ed:
                    d1:7c:39:11:f5:17:6c:cd:6e:c5:88:b5:8b:67:bf:
                    20:ce:68:12:59:42:04:37:f1:d2:cd:6c:f7:72:f4:
                    6d:00:61:cd:02:da:99:bc:ef:8a:28:3c:06:04:a7:
                    eb:af:09:9b:cd:06:ff:11:b4:b3:a3:25:e5:0e:30:
                    55:87:7c:5c:dc:18:f9:c9:74:cf:b7:fe:09:31:b3:
                    54:49:8f:07:ce:ab:a9:e1:16:d3:e5:de:0b:43:11:
                    57:2e:27:d1:70:58:a5:2b:b9:3e:b8:78:2e:ee:ad:
                    cf:04:f2:e5:b6:9d:c7:87:90:d1:54:df:01:33:9f:
                    fa:58:0a:65:d4:c2:e2:43:f6:d7:0c:2e:29:f1:a8:
                    1b:3b:d4:22:ef:86:1b:c1:d5:97:d4:23:c7:55:ee:
                    21:a8:53:62:5e:84:6b:23:5a:7e:c1:8a:14:6c:eb:
                    ec:d4:84:e2:44:6d:e4:dd:ad:f0:12:42:9a:e8:68:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2F:18:F3:3C:A9:DC:BC:1F:07:65:77:8C:E4:5A:91:B2:F3:FE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl

            X509v3 Authority Key Identifier:
                keyid:6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.51.0/24
                IPv6:
                  2001:504:128::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:a4:1f:5c:d4:5b:9b:43:79:36:b9:91:aa:3a:fb:af:65:
         8b:bb:b6:37:b1:b8:19:8a:9d:d3:fc:95:c1:ff:3d:9e:6a:5e:
         10:30:1d:fd:3b:c5:51:dc:e9:82:6b:aa:9d:61:3a:0f:aa:41:
         69:3c:6c:9c:42:c9:80:e2:8f:e0:90:25:9e:97:93:26:ee:5c:
         6c:8e:79:57:5b:34:fa:b7:55:2b:df:43:fa:49:90:6b:35:b5:
         3a:4d:17:27:a6:c4:b4:7b:17:e9:8f:a9:a3:cf:06:4b:d0:02:
         a9:18:87:3c:6e:ce:a2:84:9d:e6:de:30:ad:6d:8d:48:9d:c7:
         18:50:0b:46:9a:5c:4e:17:dd:53:af:5e:58:d0:df:ff:4e:db:
         18:d4:a7:fd:45:ca:5c:2f:7d:c6:cd:0b:cd:11:c1:bd:a6:cd:
         81:14:c0:b5:55:37:1e:d3:4b:7d:8e:b0:6f:59:13:53:1e:ca:
         18:5b:d5:7b:93:dd:c8:b6:1b:f6:78:6a:86:6d:02:74:44:67:
         13:f2:5e:82:ac:0d:59:e7:97:56:38:79:58:8e:60:9f:22:5b:
         e6:3b:47:64:bd:aa:4b:d4:32:82:73:67:51:aa:68:b5:3b:36:
         ed:58:70:43:ac:f2:5d:52:56:16:d0:0c:64:a2:3b:3d:58:54:
         90:2e:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:48:35 2024 by rpki-client on console-fra.rpki-client.org