Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa
File:                     0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa (raw, json)
Hash identifier:          nGwbNcRUazHpUfxhTi4Qc4/xGH69teHmBd1lza4fPQI=
Subject key identifier:   CE:96:8C:DF:D1:8F:E3:DD:91:8E:B4:44:29:E8:0A:5B:1B:51:38:96
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584503C015859CD09B03E383A900
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     31898
IP address blocks:        170.114.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:15:85:9c:d0:9b:03:e3:83:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=ebbfa42a-107b-4168-a2f5-3431f0abadfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:1c:bb:04:c4:a0:75:cd:85:4b:be:1b:ef:
                    20:23:5a:93:fb:e1:59:c8:0c:75:d5:1c:97:ef:7d:
                    80:62:35:03:e5:7c:cb:d8:9d:d6:3f:25:de:b4:63:
                    87:21:d2:25:29:4d:04:0c:60:8f:9c:0a:ba:00:bd:
                    c0:fd:85:66:8a:62:29:74:9a:76:de:64:dd:d9:55:
                    8a:41:63:24:7e:5b:62:28:65:3a:e0:43:e9:92:63:
                    a3:fc:19:31:c0:4f:41:24:bd:5a:1a:7a:6a:0d:02:
                    77:e7:ab:fa:d9:b1:74:35:7e:b1:7c:78:2d:1a:6f:
                    49:e3:cf:39:4e:96:84:00:e4:59:8d:69:e5:62:5d:
                    da:7b:a5:56:e9:82:b3:e8:10:46:03:66:20:64:c7:
                    ac:82:c0:77:c2:b2:ef:8c:e1:b3:b1:3c:0c:14:98:
                    fd:fc:17:aa:d4:1e:81:ef:1d:76:33:17:51:a7:da:
                    dc:9c:16:99:e4:90:9c:5f:e4:8d:83:05:dc:db:a9:
                    2c:7d:04:87:e3:6a:f3:83:35:0a:46:10:2a:40:f8:
                    c6:ce:e3:0b:1a:88:18:5f:45:d7:58:93:ae:dc:b3:
                    36:77:62:f1:06:de:c5:f1:91:be:ea:4d:ec:41:ea:
                    97:ce:05:3a:f7:61:d4:0d:58:d1:d2:33:6c:70:a1:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:8C:DF:D1:8F:E3:DD:91:8E:B4:44:29:E8:0A:5B:1B:51:38:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:cb:66:8c:5e:1c:d2:a7:7c:92:4b:eb:d4:19:fc:14:8d:
         58:3d:11:06:bf:ee:6e:8d:8b:87:85:b7:0f:20:ff:c9:f1:57:
         b5:74:af:43:04:1d:5e:39:1f:4c:a6:14:62:a9:9d:38:b5:0e:
         2a:10:5c:1a:5c:09:47:88:73:c7:2d:c3:18:5d:20:e0:ca:06:
         a0:42:7c:71:c6:40:03:41:79:c9:ce:dc:ce:20:09:6f:cc:e9:
         06:b5:74:4b:22:d4:95:e6:8c:2b:a5:61:21:9c:d0:ad:00:b8:
         95:17:c1:c3:95:08:74:98:52:0f:f2:c8:bf:5b:41:3f:73:fc:
         c5:3a:d3:32:25:a7:cf:22:ac:43:d7:5b:79:69:62:90:76:96:
         a8:12:78:41:ef:0d:e3:45:0a:1e:0b:40:fd:b1:de:86:c8:53:
         eb:6b:65:69:8d:0d:90:a8:b1:8b:cd:11:b3:ef:2b:d2:10:c8:
         cd:cf:c0:25:89:09:87:90:a8:b4:4e:2b:0d:5b:d3:1a:53:f6:
         7f:7c:93:fe:d2:5f:28:1c:35:81:57:7c:7c:ea:4d:6a:9d:a4:
         c9:36:42:22:35:23:fa:ab:11:bc:98:ab:8c:29:15:6b:1c:68:
         94:4d:92:c5:6c:80:6f:d0:16:03:e5:1e:d0:6f:b7:bd:b6:38:
         56:82:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:10 2024 by rpki-client on console-ams.rpki-client.org