Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/592e8c69-1b9f-3549-bf0f-c6876893b33a.roa
File:                     592e8c69-1b9f-3549-bf0f-c6876893b33a.roa (raw, json)
Hash identifier:          Lg+rP4PFNcKqmalOA3cKBZ4iyaUhYN7WNZWzQawzT0w=
Subject key identifier:   0D:23:A9:46:D3:26:B7:B8:25:34:AA:E8:61:1D:A4:10:A3:0C:5C:9B
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285845B383735503BE3FF66C5C6C00
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/592e8c69-1b9f-3549-bf0f-c6876893b33a.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     6079
IP address blocks:        146.115.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:73:55:03:be:3f:f6:6c:5c:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=87e3ee50-7bdc-4884-a4df-0ab2cc4aad7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:19:df:67:49:6f:eb:26:e8:70:46:d3:5c:
                    ef:e7:5f:80:1a:26:16:b2:1b:c4:c4:87:84:bf:37:
                    7c:67:04:91:c7:c8:ca:4d:98:ce:7a:d0:6c:d6:f2:
                    fb:1a:4d:49:33:22:fa:08:f7:25:c7:6f:f5:c8:34:
                    02:7b:66:2d:81:96:b0:3a:a1:69:b7:a8:25:79:8a:
                    0f:ca:34:1d:16:cb:e8:f6:60:81:2c:87:6e:ce:a7:
                    e0:c0:25:9b:34:c0:1e:45:09:e7:38:70:20:aa:53:
                    d7:c4:32:6b:b9:ef:b7:72:d2:09:85:d3:9b:59:a1:
                    54:75:70:3b:8e:23:52:25:c0:1a:34:c4:96:ec:34:
                    66:bc:55:00:3f:03:7f:9d:b5:b7:78:c4:c3:98:cc:
                    d8:94:99:87:72:f4:ca:23:74:4c:c6:b6:5e:65:90:
                    c6:66:4c:e0:65:98:b6:fa:69:79:64:af:2b:87:65:
                    d1:16:f0:f9:6e:ff:aa:af:c4:2b:2f:6c:81:ca:83:
                    ef:11:92:60:4a:d1:7b:21:21:0c:59:04:bf:33:1d:
                    42:d7:d3:6d:68:39:19:1f:3b:23:94:da:74:fb:2c:
                    29:55:35:1a:63:8a:7d:e7:33:ea:7a:76:d9:1e:3f:
                    27:27:fb:f9:e6:48:a6:23:7f:b0:24:a5:4a:ae:1d:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:23:A9:46:D3:26:B7:B8:25:34:AA:E8:61:1D:A4:10:A3:0C:5C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/592e8c69-1b9f-3549-bf0f-c6876893b33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:b6:66:8f:ff:36:f6:71:7c:14:97:43:7b:79:04:b0:e7:
         2e:29:71:cf:a6:46:56:e0:25:7d:fd:89:8c:05:39:26:63:62:
         03:9b:df:aa:e3:9e:94:b3:64:87:b8:6d:a5:2a:ee:d5:3c:98:
         91:c3:24:f4:7b:4f:fc:29:8a:b2:a4:71:17:c0:8d:bc:8e:bc:
         fe:cb:a6:a8:61:24:92:dd:9d:5a:90:9d:f3:74:e1:50:11:0a:
         0b:9f:c6:da:28:d8:b9:5e:32:a0:5c:b0:85:23:b6:48:8c:2c:
         a6:6d:52:b7:63:f2:4c:00:a5:e1:20:07:8f:27:df:32:86:2b:
         c9:68:05:63:1a:ad:29:67:19:31:0c:cb:f3:e8:59:ae:67:ed:
         6b:d8:25:16:bb:30:2e:97:c4:91:d5:a8:b3:fb:53:2a:2b:20:
         ed:de:5c:96:ba:5c:39:e2:5a:be:7f:35:e1:21:1a:02:d9:45:
         e7:96:b3:55:ef:2f:f3:52:1e:dc:1f:78:cb:a3:a5:2d:d6:f5:
         32:dc:82:b0:7c:23:93:bf:a3:07:bc:28:2f:98:e8:9c:81:9a:
         6b:cf:1b:d0:ac:b5:42:e0:03:fe:ba:d3:1a:6f:b5:ba:4f:00:
         ae:60:84:a5:29:f9:51:a4:33:c3:8f:40:c5:17:38:45:65:f9:
         dc:4b:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 21:39:06 2024 by rpki-client on console-fra.rpki-client.org