Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31ebf730-ac91-3ac2-8c01-3614e3622c45.roa
File:                     31ebf730-ac91-3ac2-8c01-3614e3622c45.roa (raw, json)
Hash identifier:          Lehi4kJ4qbO7eyjEUiAWYNuFW4egNoF7kNr9jt+I9fk=
Subject key identifier:   8C:F3:A0:FF:B2:1D:EA:FB:3F:EC:56:D6:6F:13:0C:3C:72:3A:9C:3F
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844FB600CDBB28E345655AFC980
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31ebf730-ac91-3ac2-8c01-3614e3622c45.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     30103
IP address blocks:        149.137.60.0/22 maxlen: 24
                          173.231.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:0c:db:b2:8e:34:56:55:af:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=8b16f510-d0be-4106-838d-12e51d90129d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:19:ee:fa:c2:da:c9:5b:00:94:08:d4:88:
                    9e:5e:4a:c5:31:6e:af:da:e2:7b:69:3d:be:88:98:
                    7b:c8:5b:83:3b:cb:fb:6d:94:d8:60:67:eb:61:17:
                    f4:ba:cd:46:77:cb:8f:31:93:f7:64:91:f7:de:97:
                    77:fc:71:9f:3b:0c:7b:9d:88:80:c6:78:cc:4e:f1:
                    d1:9f:fd:01:ea:26:14:5e:f6:4f:a6:7c:40:95:4c:
                    91:24:5d:53:3b:4f:c0:20:22:dc:50:a1:1c:c9:ce:
                    87:02:52:14:5d:0c:df:70:ae:9e:c5:03:9d:38:fe:
                    c4:e8:1c:44:5d:9c:d1:e7:1c:8a:20:fc:11:7a:13:
                    0a:ba:62:c6:0f:8b:02:6d:4d:f0:ce:06:26:7a:4d:
                    1f:19:ce:92:a2:89:0e:5b:b7:57:20:ba:7e:a9:bd:
                    24:0a:d0:62:1f:69:33:13:d1:9c:fb:c2:ad:46:8c:
                    27:e5:bb:c3:ff:1e:9b:bf:c4:23:1b:0f:8b:fa:53:
                    10:24:cc:9c:34:cd:76:d5:1d:a7:10:d9:aa:38:a7:
                    c6:bd:8a:22:3a:05:8c:1f:cf:3e:1b:7a:2a:20:41:
                    b2:f0:ab:5d:c6:aa:dc:f7:3e:2b:d5:af:86:30:d6:
                    d0:d4:30:d5:fb:6a:7c:28:d4:6a:eb:9b:e5:65:cf:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F3:A0:FF:B2:1D:EA:FB:3F:EC:56:D6:6F:13:0C:3C:72:3A:9C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31ebf730-ac91-3ac2-8c01-3614e3622c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.60.0/22
                  173.231.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:e6:d9:93:90:36:72:9b:0c:4e:68:2c:e2:88:78:9a:08:
         60:b1:1f:2d:12:ce:2a:59:eb:23:70:47:b5:bd:82:c5:61:4b:
         ab:6f:31:bf:db:35:be:06:d5:55:29:e9:b7:f4:f9:6a:d6:0a:
         67:7d:62:1d:61:d8:5c:4d:f5:85:1d:93:c1:9f:76:33:99:51:
         b6:27:93:df:6a:01:9a:3e:ea:5b:52:f8:a8:a3:c0:b8:34:76:
         95:80:c7:b7:eb:d9:ee:c3:2a:bc:4a:3c:ce:6b:f0:aa:63:67:
         bb:6f:e5:f8:cf:ce:f7:a3:fc:87:c1:b1:88:56:82:e6:9a:65:
         9c:82:5a:c2:57:16:5b:ad:fc:bb:8a:b1:76:96:1c:57:b3:ee:
         c7:7b:55:6b:dc:43:66:5b:c4:d9:59:69:a8:f8:15:c1:a3:b5:
         4c:42:6d:27:30:a1:a6:f2:17:f3:a1:c7:b2:d7:bf:5e:32:02:
         f7:34:2d:bc:6b:a3:83:88:57:32:ed:13:b4:61:11:93:24:d4:
         0a:6e:bf:12:2f:ab:ea:09:1b:f5:42:90:0c:41:be:53:f6:e4:
         7a:e6:1e:8f:6a:7c:cf:b6:47:5d:5c:19:26:be:f5:91:fc:08:
         70:34:53:47:36:b0:de:83:8b:ba:f8:df:31:7f:15:8b:96:15:
         93:ab:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 22:19:05 2024 by rpki-client on console-fra.rpki-client.org