Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0058b196-7350-37a4-a391-e7eced158af2.roa
File:                     0058b196-7350-37a4-a391-e7eced158af2.roa (raw, json)
Hash identifier:          90F2nhlyYF7tYxeAZsynBCNBm/+EgCzjOP18CVZjYNs=
Subject key identifier:   FB:B4:4F:90:EA:4D:CD:E1:6B:E4:16:41:F2:61:F2:9C:27:82:D5:07
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844E7D53BAA998B5A1EA0F98500
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0058b196-7350-37a4-a391-e7eced158af2.roa
Signing time:             Fri 16 Feb 2024 02:00:26 +0000
ROA not before:           Fri 16 Feb 2024 02:00:26 +0000
ROA not after:            Thu 16 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        170.114.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:d5:3b:aa:99:8b:5a:1e:a0:f9:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 16 02:00:26 2024 GMT
            Not After : May 16 01:00:26 2024 GMT
        Subject: CN=14740d4d-309d-4df2-9904-62778423c723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:49:bf:61:70:01:ac:a4:c3:b4:f4:24:a5:
                    47:28:2b:10:d3:a1:2e:c2:9d:4c:07:79:40:be:ec:
                    28:14:3b:4a:44:57:7d:12:dc:b1:ff:38:cc:e4:dc:
                    fe:1f:63:51:1e:37:57:af:e5:e5:7c:08:2a:c4:24:
                    4b:6d:af:02:cb:93:16:2a:70:9a:cf:7b:2c:c7:97:
                    39:d1:17:5b:ad:ae:e5:66:37:70:2b:8d:92:51:d6:
                    97:88:e5:51:74:76:cc:6c:34:75:4d:9e:21:ae:96:
                    82:2a:48:f6:43:fa:3d:a2:69:c2:8f:c3:15:6c:c4:
                    c4:7f:39:56:33:48:f8:b3:41:45:0e:7a:b7:9e:ff:
                    19:1a:fa:9f:96:48:5d:96:3f:34:c5:29:73:16:06:
                    37:de:39:2f:9d:fa:ce:c2:f0:3d:ca:94:a2:0f:a6:
                    b4:5c:b1:3e:c9:a4:da:13:da:20:5a:52:03:fb:e2:
                    a7:67:02:87:0d:ea:b2:87:d2:61:eb:48:41:ac:3f:
                    d3:46:38:f4:53:75:fd:01:7e:ac:5e:26:5f:f5:61:
                    0c:74:d9:b0:b3:a7:d1:54:de:29:e2:05:50:fb:61:
                    b8:6d:5c:62:e2:a7:2e:53:09:5c:39:e7:b2:df:c3:
                    de:e6:cf:27:12:2e:68:a6:15:28:db:84:6f:5a:c1:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:4F:90:EA:4D:CD:E1:6B:E4:16:41:F2:61:F2:9C:27:82:D5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0058b196-7350-37a4-a391-e7eced158af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:47:78:d3:ad:45:8f:d0:81:59:1e:45:df:97:fc:df:c7:8e:
         62:e5:d2:74:cd:95:eb:40:68:41:1a:4f:d1:b3:f0:47:97:bc:
         68:86:dc:20:6f:c2:c9:c9:b4:22:d2:f6:ad:6a:be:bc:3c:8c:
         ae:a5:78:d5:92:c1:e4:03:33:75:89:14:70:d7:6e:d6:e8:e8:
         18:60:c1:cd:17:bc:78:18:24:61:f6:dc:0e:84:d6:2f:19:b4:
         54:a0:ae:f8:85:82:54:6e:be:84:42:30:00:9e:31:4b:3c:fe:
         92:5b:dd:dd:b4:0c:39:1f:fb:a6:c3:1c:9c:0c:58:cd:f9:d6:
         a5:7a:79:b8:25:06:e3:97:eb:1e:d2:13:b2:e3:04:c6:51:a2:
         58:6a:e8:f1:4a:34:3a:69:33:d4:af:fe:ed:98:ef:a5:3c:de:
         1e:ec:01:55:57:9e:b3:03:00:27:11:e4:a7:b7:85:63:64:74:
         78:24:36:1f:60:ca:b2:16:3f:fe:d5:3f:13:85:d6:57:51:36:
         07:1f:e5:80:cb:d5:4b:3b:6e:22:47:49:18:82:98:29:9d:91:
         ef:46:0e:5b:a3:ae:19:6d:9d:e4:13:66:57:d5:f4:b1:df:67:
         71:20:0a:c9:22:06:73:f2:40:b0:82:9d:a9:93:ba:83:f8:97:
         00:07:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:09 2024 by rpki-client on console-ams.rpki-client.org