Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b3ec2b0f-03ac-3787-8abe-3e22ea30db84.roa
File:                     b3ec2b0f-03ac-3787-8abe-3e22ea30db84.roa (raw, json)
Hash identifier:          9koErOuj7AHsZGRvXKM5SnCn3s7gnZ4n6UgkYYneAl8=
Subject key identifier:   78:6C:C4:DF:2B:9C:86:90:CF:74:8D:B1:E1:09:4A:1B:DB:E7:B4:D2
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844FE2AE13C57F3FA62A34E3300
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b3ec2b0f-03ac-3787-8abe-3e22ea30db84.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        170.114.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:e1:3c:57:f3:fa:62:a3:4e:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=c6ecbfca-65e8-4b07-9e91-f71baf99e682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:42:dc:b3:a5:b3:12:03:96:91:eb:eb:43:
                    92:35:bf:bb:45:aa:be:1c:a7:4e:fb:7c:db:d4:e2:
                    2a:fa:f6:52:e8:59:39:e3:04:71:d2:3c:bf:1b:62:
                    34:bf:85:7e:64:2e:c6:33:b0:dd:17:c7:ba:c0:1f:
                    19:ea:4e:aa:06:e5:f5:b6:f5:d2:17:13:51:39:c3:
                    0f:55:bc:e6:1e:0e:ed:33:dd:50:9e:78:8c:f2:93:
                    03:3d:0d:09:00:a7:04:4e:f8:23:26:27:fc:d7:59:
                    d0:8d:4a:8a:13:14:44:70:d9:c9:71:47:4a:ef:00:
                    41:34:26:98:7f:6e:32:3b:6c:08:b7:af:a9:cb:40:
                    d6:ce:fa:3f:c9:5b:60:a8:d7:17:cd:50:2c:58:28:
                    07:54:89:46:6a:12:d7:41:f8:0e:10:af:e4:7c:be:
                    a1:3c:a9:90:27:44:59:81:13:bd:9a:4e:fc:34:02:
                    df:34:79:d3:52:e0:00:e4:45:19:93:9f:87:e1:d5:
                    1d:07:48:1a:3c:50:55:51:24:c7:b8:31:f9:6d:04:
                    45:16:60:75:df:ab:0e:fb:30:56:af:23:d3:8a:39:
                    bc:39:4e:c9:a5:20:75:db:c0:86:40:52:78:b8:ef:
                    2e:b8:60:bf:89:aa:5a:46:a9:b4:23:68:dc:03:e6:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6C:C4:DF:2B:9C:86:90:CF:74:8D:B1:E1:09:4A:1B:DB:E7:B4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b3ec2b0f-03ac-3787-8abe-3e22ea30db84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:f0:83:f2:dd:a3:0e:5c:20:0f:99:77:95:66:e4:2f:6a:
         80:b4:c7:52:7d:32:01:4e:ab:a7:d5:c5:00:2d:09:01:8e:f9:
         3d:96:e2:71:a4:90:7a:ed:8c:98:7e:22:08:e9:3a:bf:1b:0d:
         9e:de:b9:29:52:e7:b0:40:27:9f:ab:6c:c9:a5:62:71:22:8c:
         c5:1e:b8:53:92:8e:3e:74:95:2f:47:25:cf:0f:1e:a5:eb:7a:
         8c:1b:bd:e1:9f:d2:f8:08:54:c3:42:06:2b:e7:ce:a9:0c:08:
         4f:84:bf:cd:83:43:75:20:a5:10:95:62:18:4b:14:e0:2b:80:
         90:35:ed:a4:1e:67:f5:c4:37:be:5a:2d:87:75:bf:b0:0a:1e:
         7f:45:90:ab:0c:0a:56:08:0c:4a:ac:f7:19:26:94:54:6b:c7:
         c9:f4:b3:9b:2e:b1:3d:89:30:ec:55:01:d0:19:24:18:fc:6f:
         d3:2c:f1:61:e0:c0:01:31:ab:a0:00:8e:12:a5:1a:a9:cf:fd:
         5a:f4:e9:8f:b1:66:ce:cc:da:9d:88:f1:5a:df:55:07:d4:50:
         57:e1:5d:60:61:e8:16:a8:b4:d7:0b:d2:fb:aa:1a:aa:f2:9a:
         ed:b7:13:17:73:4c:06:aa:55:62:42:80:7f:80:14:9d:88:64:
         0b:a2:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:29:00 2024 by rpki-client on console-fra.rpki-client.org