Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/70114519-9900-3a4b-8475-2a7d5f3f9c5b.roa
File:                     70114519-9900-3a4b-8475-2a7d5f3f9c5b.roa (raw, json)
Hash identifier:          BB9FnbjcOO2nqwb4xIr1fIOIwuoP5MvuKW6hthy09d8=
Subject key identifier:   D0:6B:9E:3C:7A:29:95:B3:38:93:B1:B7:33:00:CA:EB:8C:EC:93:E2
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844FA5722F7E2DB8EF682AEED80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/70114519-9900-3a4b-8475-2a7d5f3f9c5b.roa
Signing time:             Thu 22 Feb 2024 17:06:48 +0000
ROA not before:           Thu 22 Feb 2024 17:06:48 +0000
ROA not after:            Wed 22 May 2024 16:06:48 +0000
asID:                     209242
IP address blocks:        170.114.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fa:57:22:f7:e2:db:8e:f6:82:ae:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 22 17:06:48 2024 GMT
            Not After : May 22 16:06:48 2024 GMT
        Subject: CN=6bdd7138-e0fb-4cc2-9807-b7a2975f05cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7a:a7:eb:de:23:94:18:8c:f1:b7:33:54:b9:
                    1d:eb:1c:4d:e5:c0:8f:5f:07:77:70:fa:45:3e:0b:
                    81:07:2f:f5:5a:17:bd:e6:06:2f:f7:de:48:c6:1f:
                    46:1c:f4:c1:ae:43:d1:4b:9d:2c:9e:fe:bd:79:db:
                    35:9b:74:10:80:e0:00:06:ad:bb:0a:cb:26:81:75:
                    d9:0c:3d:b5:a1:08:0a:ac:df:83:09:f2:d1:53:93:
                    ab:91:e3:a7:2a:2f:69:2e:cb:48:ae:dc:ee:57:3e:
                    df:38:49:81:4d:fd:6d:6d:57:0b:90:1b:c2:4b:94:
                    6a:37:5e:75:69:a0:64:63:1a:8e:a2:15:7d:01:67:
                    4a:31:08:68:21:d6:da:3f:53:2e:51:85:94:53:c1:
                    5b:7c:81:5a:a5:67:a2:26:ef:8a:4f:da:ad:d8:ab:
                    ef:28:63:f4:1c:db:0c:ec:e7:24:7d:0a:13:4a:50:
                    dd:ed:79:8b:b6:f5:57:56:d7:ad:80:fe:d8:28:8e:
                    d6:29:90:6d:11:c3:29:99:f3:69:79:05:12:b7:88:
                    3c:bc:ed:52:63:cc:de:80:f7:78:c4:fd:d7:f2:27:
                    be:ce:2c:76:73:ca:c5:9a:b8:50:de:1d:0e:e8:9e:
                    bd:42:9e:a2:07:92:7e:85:96:eb:43:41:40:ba:c8:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6B:9E:3C:7A:29:95:B3:38:93:B1:B7:33:00:CA:EB:8C:EC:93:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/70114519-9900-3a4b-8475-2a7d5f3f9c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:48:3e:2c:2a:cf:d5:6c:20:e1:e9:56:bd:98:0c:d6:c0:27:
         0e:26:2c:8b:72:a4:bd:b7:ef:d5:1a:29:40:b2:3d:23:25:ba:
         52:1f:40:d4:b5:1b:2f:12:b8:2d:11:ed:86:a8:df:71:fe:11:
         4c:7c:f5:2c:b6:65:e3:f0:1a:5f:f9:c7:5f:38:ce:5a:eb:d6:
         a3:df:fb:e3:93:ef:92:c5:2a:b0:30:54:6a:bd:10:fc:a3:f9:
         09:a1:53:76:a2:de:af:5e:60:23:74:ad:b0:2c:93:0e:e3:09:
         9b:a5:32:61:16:8e:1b:cd:15:eb:78:c6:e6:15:0e:a4:d6:c5:
         51:e1:10:13:61:a9:f0:6f:79:ca:0f:ab:10:ca:55:4d:73:ea:
         e1:35:88:54:09:04:b7:e5:03:db:af:a4:de:79:c8:60:0c:52:
         eb:6c:73:de:d5:e5:32:a3:7f:5b:f5:0b:5b:59:fa:61:ca:4a:
         c0:6b:0f:c3:ca:8d:a3:7e:07:a8:5c:77:52:de:16:50:de:6d:
         3a:e7:48:b4:b8:d0:65:e6:39:1f:18:37:d4:24:17:e1:3c:14:
         3c:db:12:be:4d:e0:4a:43:49:bc:48:a1:0d:b7:48:aa:28:c8:
         93:5d:6b:d1:a9:cc:9d:3e:4f:3b:e4:21:00:13:29:2b:5e:9d:
         74:d1:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:35:18 2024 by rpki-client on console-fra.rpki-client.org