Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa
File:                     54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa (raw, json)
Hash identifier:          Cy9jRNJN2zcFo6UgeSG+5nel6xhMAaAfaWldLtGN9Ss=
Subject key identifier:   42:58:8C:58:62:43:A3:64:5E:68:BD:5C:42:F8:D4:DD:52:76:04:7F
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858456E32EBC3E0DF9B9CC0E226C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa
Signing time:             Thu 04 Apr 2024 05:07:36 +0000
ROA not before:           Thu 04 Apr 2024 05:07:36 +0000
ROA not after:            Wed 03 Jul 2024 05:07:36 +0000
asID:                     2734
IP address blocks:        173.45.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6e:32:eb:c3:e0:df:9b:9c:c0:e2:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr  4 05:07:36 2024 GMT
            Not After : Jul  3 05:07:36 2024 GMT
        Subject: CN=486ef044-70fc-4cbc-a0e9-4cb8c11b4d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9f:5d:c6:58:62:d2:69:9f:20:b9:22:56:85:
                    b5:f9:8c:5c:bb:d3:9f:03:a9:50:68:7e:67:18:c2:
                    a1:74:bb:25:9b:c3:a7:e4:b8:55:55:59:e2:2d:9f:
                    1c:21:47:dc:1d:ac:5e:92:fb:3a:d3:bd:8b:27:b3:
                    51:07:11:bf:dc:61:b4:32:12:0f:e1:51:5e:38:e1:
                    5e:6d:54:99:b9:70:73:b4:d5:8b:dc:f5:25:8d:1c:
                    64:14:96:a5:ac:6c:f3:39:73:ff:6c:6e:fa:3e:74:
                    2c:59:fa:a8:88:d3:5c:01:2f:0c:28:41:33:f1:b1:
                    8e:8b:3b:f5:f1:04:b3:1a:b2:50:0d:0e:6b:12:a0:
                    5d:c2:a4:5e:8d:c7:4c:84:e3:c5:3c:44:92:7d:b5:
                    12:20:fc:ee:bf:b2:43:dd:4e:17:61:9b:85:34:64:
                    2f:93:8e:5c:08:b3:5a:81:c5:6a:ce:b6:e9:63:ac:
                    f5:5f:d6:52:b9:6a:11:8e:68:d5:c0:a8:64:4d:da:
                    c4:b7:08:99:63:f6:5e:09:48:ef:c9:7a:8e:82:ad:
                    f7:27:8b:10:37:16:d6:0a:26:96:5d:f1:5e:f0:b1:
                    02:99:d3:81:13:6f:d3:33:85:cf:38:27:b6:50:8d:
                    c2:80:ad:98:1d:1c:86:ca:9b:e6:cf:cc:b4:f3:eb:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:58:8C:58:62:43:A3:64:5E:68:BD:5C:42:F8:D4:DD:52:76:04:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.45.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e5:0d:4a:12:f7:88:e6:73:ac:95:fc:19:4d:37:f1:46:43:
         20:65:e6:73:a5:b1:99:74:7f:31:b8:05:bd:55:42:8b:bf:a8:
         8b:87:e6:3d:35:ea:f0:75:ab:ba:6f:97:8d:aa:d6:b4:d5:95:
         39:a8:16:b3:8c:65:a4:0d:1d:c0:5e:c3:b3:d3:ba:9e:44:21:
         4a:42:f8:d5:bc:bc:11:75:b6:b4:5b:39:c1:75:ba:a8:4f:f2:
         25:07:fd:ba:4d:47:11:e0:5b:24:e1:e9:83:c2:7e:8a:d9:92:
         03:67:b2:86:8d:f6:c7:be:d6:72:2a:00:ce:33:bc:2d:ef:81:
         f4:b6:e5:f5:3d:c3:c1:1f:e7:4f:6e:91:63:94:10:41:79:a8:
         8c:fa:02:22:5c:3d:d9:8d:5e:66:17:ec:bd:6b:19:a4:60:12:
         bf:71:51:05:21:84:af:7c:31:7b:6f:03:8a:18:eb:dc:18:f9:
         c8:7c:ce:9f:82:85:0b:ec:dd:7c:b9:23:d0:e8:94:86:12:33:
         8d:af:84:41:d6:fd:ca:99:53:14:0a:b4:62:aa:94:59:69:bc:
         ac:55:39:6c:bc:80:89:9b:5c:b8:4c:44:ec:c0:90:99:51:cd:
         86:e2:fd:72:d6:02:bb:11:b0:92:91:92:5a:62:bf:a3:b4:8b:
         b6:ce:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 18:35:16 2024 by rpki-client on console-fra.rpki-client.org