Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa
File:                     59304871-6491-3b57-9f1f-0458b6b92c46.roa (raw, json)
Hash identifier:          rm2KiymOx9nKIg1xuMnaw2oA9qMyHDmGZwxsteG0QMk=
Subject key identifier:   57:00:25:99:16:48:0B:58:A0:F0:3E:EA:3F:F9:E9:C5:EB:A0:03:AB
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844F9FABCE7FD95E179A7A0DF80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     30103
IP address blocks:        149.137.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:bc:e7:fd:95:e1:79:a7:a0:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=4bafd141-e16d-48f4-8aab-5ae2a0f06364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:94:08:14:52:08:d0:93:c3:ba:db:42:5d:
                    08:e9:09:2c:b2:83:85:75:02:8c:3b:44:c1:80:da:
                    aa:75:e7:8f:6b:72:d5:a3:14:37:f0:7c:ee:02:d7:
                    64:87:45:7e:fd:05:2a:c4:bd:9e:fa:72:d9:d6:a8:
                    ae:f4:f7:36:ac:b0:da:ef:cc:08:5c:e5:a7:11:ab:
                    e0:7c:81:dd:67:a7:ec:38:72:5e:8e:3e:d3:c6:3c:
                    9c:26:98:ff:55:74:1a:d4:6e:0f:6a:64:1c:33:6e:
                    42:65:ce:44:7c:8f:ca:28:c0:a4:3d:b2:48:2a:87:
                    58:de:45:43:59:55:b1:42:4e:2d:2b:90:b3:8b:f1:
                    5a:af:85:22:92:95:4d:5f:2b:b0:25:f4:b9:dc:b8:
                    22:09:70:83:69:c5:28:cc:fd:18:5c:bb:73:2f:47:
                    cf:37:fa:e3:e7:3f:fc:1f:bf:82:ca:92:47:99:78:
                    08:6f:59:28:cb:ae:04:a3:9c:d1:55:ee:27:ea:1b:
                    1b:b9:9b:c4:05:74:7d:3f:aa:51:47:3f:04:08:03:
                    71:03:a2:e0:03:23:27:c7:0e:5b:ff:47:ea:e8:4f:
                    36:42:73:7c:26:08:20:83:b1:9b:90:38:66:80:c9:
                    d9:dd:f1:95:25:95:41:53:b7:b8:d9:dd:c8:23:97:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:00:25:99:16:48:0B:58:A0:F0:3E:EA:3F:F9:E9:C5:EB:A0:03:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:c2:d1:bd:12:1a:93:0d:61:ee:06:cc:0a:f2:f4:f3:e1:
         8e:dc:26:f5:38:dc:54:6b:49:e4:f8:93:7b:46:a0:cb:e0:c2:
         22:97:1b:4f:59:c2:dd:bc:61:81:aa:a1:6d:c8:63:f9:1b:86:
         71:48:66:7f:f6:1c:d0:47:6e:81:1e:23:0b:a3:18:15:fa:12:
         77:14:8c:5f:a2:34:c0:13:ab:79:e7:3d:51:ec:da:2d:2c:ad:
         30:9b:9f:2e:88:73:fc:61:6d:68:d8:f7:d5:32:5c:ee:6a:72:
         a5:3d:3f:aa:74:f8:ec:6a:8a:9c:63:5c:43:71:0b:6f:15:35:
         20:89:65:55:01:25:a2:bf:a7:98:c6:3c:2b:a1:40:f7:22:1f:
         c7:cb:d1:f9:37:0a:ff:17:96:08:4a:7a:e9:85:55:68:41:7c:
         9b:02:2f:ba:73:98:21:8d:d9:eb:cf:52:0d:36:80:ff:31:78:
         67:47:b9:b8:28:b1:2e:a5:d2:3d:3c:81:e5:ce:6a:e8:fd:bc:
         91:c5:6c:73:d8:10:7f:6b:10:b5:11:ad:3a:1c:13:61:65:83:
         c6:df:bd:bc:f6:a8:b3:7a:ee:e7:a9:39:07:c4:40:99:9c:f9:
         6b:f6:a3:b5:60:b0:34:aa:dc:4f:5b:38:5a:3c:61:3b:be:ca:
         bd:ce:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 22:19:05 2024 by rpki-client on console-fra.rpki-client.org