Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47239778-4090-3c7f-bf4b-4ac36e12f1b1.roa
File:                     47239778-4090-3c7f-bf4b-4ac36e12f1b1.roa (raw, json)
Hash identifier:          eO/3ok2kiJ3uwp+OUnliakFCCTXqJoFkloZ3sxd/35Y=
Subject key identifier:   D3:17:86:CC:39:96:7E:38:C0:41:3E:75:01:03:DE:F3:DF:01:C2:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584505257AF4ED199E480C9A0800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47239778-4090-3c7f-bf4b-4ac36e12f1b1.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     20115
IP address blocks:        159.235.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:7a:f4:ed:19:9e:48:0c:9a:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=634a6e1d-05c9-464b-8e48-c335caa86f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:56:78:fc:15:40:34:e5:e8:93:54:85:1e:
                    cf:ba:14:19:fc:37:43:dc:02:10:c5:8c:b3:91:2f:
                    43:2e:dd:72:73:9e:ac:b3:75:29:56:1f:c8:93:17:
                    50:58:fa:ba:57:e7:2f:29:83:ab:2d:f6:e7:09:96:
                    57:bf:bf:fd:9f:c3:33:2b:7f:d8:16:d2:a1:63:5d:
                    85:1c:dc:f8:31:88:56:5c:27:76:c3:e2:37:e2:e1:
                    ad:3c:61:7e:98:a4:92:b4:2d:d1:38:95:6f:b6:27:
                    1a:84:8d:18:d4:07:99:c0:74:89:99:9a:6e:f1:b4:
                    38:ca:c0:f2:5e:be:9b:ac:ae:ab:da:ab:bb:c0:11:
                    ef:86:a3:b8:9d:82:e5:9b:86:44:d3:e4:f2:ce:3a:
                    3e:15:bf:ff:2d:e7:24:70:62:53:08:a1:2b:c6:4c:
                    97:25:20:98:d6:cd:5f:bb:b2:41:bd:b7:11:36:fd:
                    6b:ea:08:48:87:b5:c2:03:aa:0f:df:44:94:3a:c6:
                    c7:67:56:44:76:d9:9c:ba:34:f9:be:88:a5:23:6b:
                    71:64:7c:f0:98:b8:95:c8:30:f2:d2:ca:18:da:78:
                    ef:59:3c:fe:54:d2:9d:3e:40:cd:8d:9b:2c:a5:bc:
                    bb:1e:2a:14:ce:b0:42:87:df:82:2e:44:83:ea:82:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:86:CC:39:96:7E:38:C0:41:3E:75:01:03:DE:F3:DF:01:C2:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47239778-4090-3c7f-bf4b-4ac36e12f1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.235.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:6f:f2:e9:32:c9:9e:ac:9b:2a:1a:45:f7:02:52:21:30:
         c5:11:ce:4f:a0:b6:17:e5:8d:55:34:52:50:9c:ec:c8:89:ae:
         7d:a1:5c:af:67:83:f1:da:12:03:b8:9b:ce:db:4f:b6:df:03:
         2d:f6:f2:e2:90:10:63:ce:d9:d9:86:00:54:7f:82:28:3d:51:
         2b:66:94:24:bc:0c:d2:6b:3c:2b:01:e1:a4:05:ed:b3:eb:a5:
         7d:fe:6f:76:b9:84:4b:1b:aa:5e:ac:66:05:be:5f:dc:81:de:
         26:5b:26:ad:84:ac:1f:7f:09:d1:8b:02:95:6e:08:30:5c:b7:
         2d:51:7a:e7:b5:a6:1a:1f:a2:8b:62:48:cf:af:70:ef:3e:b8:
         3a:a9:41:0d:1d:00:39:da:41:e6:04:e1:27:9c:16:3d:50:ca:
         87:e5:02:23:37:7c:d5:32:42:fa:96:c6:7a:b9:f3:e7:2e:97:
         61:a7:0e:ae:3a:35:b7:12:b3:44:c9:91:d5:11:d9:e9:59:b2:
         78:85:d8:7a:07:61:93:9b:6a:37:a0:26:a1:ab:9e:37:28:ef:
         91:39:a9:4e:e5:93:69:41:82:f8:cf:4d:c0:c7:15:38:cf:4a:
         6e:9a:91:65:61:59:2b:12:1d:13:fe:70:9d:18:5b:cf:d2:22:
         9b:de:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:03:52 2024 by rpki-client on console-fra.rpki-client.org