Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d17afbdc-71f5-33e9-ab1b-365c52435919.roa
File:                     d17afbdc-71f5-33e9-ab1b-365c52435919.roa (raw, json)
Hash identifier:          NQZSzCmChx2OE7G6XC2cpHjtEJzlbJMIYT51QMmFf9I=
Subject key identifier:   9E:90:72:92:8A:3E:3B:3F:29:59:FC:37:31:1A:9B:5E:DB:C8:76:15
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DE6DAA43F76C482A36F40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d17afbdc-71f5-33e9-ab1b-365c52435919.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        192.61.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e6:da:a4:3f:76:c4:82:a3:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=5a3d42a4-8556-460d-9e48-03feb981d1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:d5:db:25:7e:0a:fc:43:9d:56:95:95:fb:
                    6a:ac:8c:a6:98:04:f5:de:02:3b:43:4a:c3:3c:a5:
                    de:6a:5f:ea:d9:72:d5:04:15:78:28:76:f5:bf:c9:
                    b0:ef:a9:da:17:33:2a:f1:a4:3d:5b:23:00:ff:dd:
                    bd:40:1e:42:7f:a8:d2:b6:68:a5:a5:4f:76:b0:d3:
                    73:ed:78:b3:bc:b9:c3:46:11:c3:15:69:c4:30:6c:
                    24:ce:3c:3e:9a:73:8e:18:ea:57:d4:ae:61:13:1e:
                    c7:44:94:b8:03:ec:52:fc:22:d6:83:e2:1b:bb:81:
                    41:34:2d:b2:c1:2d:ad:6e:8c:37:7c:cd:1a:20:42:
                    31:2c:a5:a5:35:af:7e:c9:7a:1c:85:df:4d:eb:5c:
                    bd:fe:a6:15:93:2f:b7:94:2e:d4:57:f5:67:72:b6:
                    58:39:e8:59:d4:1f:41:0c:e0:90:d8:1b:a4:4a:c4:
                    82:e4:fa:9a:50:58:c5:13:51:5c:a2:b2:48:18:57:
                    f3:2a:74:88:6b:c7:ba:33:e4:e8:b9:92:09:58:e2:
                    a8:ec:2e:b5:88:9b:8a:52:92:48:60:24:bd:09:85:
                    4d:0e:72:7e:33:ed:76:37:70:5d:86:2b:19:5b:03:
                    6b:6b:15:0b:11:ec:87:6f:89:54:4c:07:50:ac:eb:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:72:92:8A:3E:3B:3F:29:59:FC:37:31:1A:9B:5E:DB:C8:76:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d17afbdc-71f5-33e9-ab1b-365c52435919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.61.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:02:8b:2c:de:13:30:e0:f2:cf:1c:c7:7a:7f:6e:05:37:
         0b:dc:b5:fa:22:f1:be:26:e3:7d:12:07:83:f3:b4:b6:5c:80:
         4f:6d:66:2d:dc:6e:4f:19:2a:eb:89:a4:47:9a:fb:88:22:fa:
         10:46:ce:f1:c0:c5:58:b8:1d:24:c0:16:7d:28:55:85:45:34:
         66:47:49:97:18:bb:01:3f:5a:95:51:42:73:12:86:7a:04:db:
         85:17:c0:6d:37:6f:d8:bc:12:58:c5:e9:90:2a:10:f4:41:f4:
         10:dc:c0:37:f2:e4:90:01:f4:f5:7f:b5:dc:ad:6b:05:d4:28:
         f2:b3:2b:1f:34:a1:16:b4:0b:c6:38:6e:5e:51:97:ee:e1:05:
         e6:dc:16:0d:43:9a:30:96:80:fc:ac:0d:54:9a:6f:0a:23:d3:
         11:c7:1d:75:3f:64:b3:31:50:6c:b1:dd:89:e5:c2:20:ae:12:
         4a:ac:84:41:ae:4d:c9:01:b9:29:8f:14:08:61:a9:55:72:68:
         77:06:a3:10:fe:d1:c2:43:19:3a:5b:da:61:f9:a7:17:18:84:
         5f:da:0a:cd:dc:0c:9c:13:ee:58:90:f3:42:00:48:e3:bb:45:
         f3:c6:7c:f5:0e:2b:1d:1e:66:cb:e5:2e:68:a7:aa:01:f5:38:
         e4:d0:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:11 2024 by rpki-client on console-fra.rpki-client.org