Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bd8b6677-a9aa-3745-887f-ca9ff3ab677f.roa
File:                     bd8b6677-a9aa-3745-887f-ca9ff3ab677f.roa (raw, json)
Hash identifier:          W3U94955tNKyR+cFar3NKxJtVddDjvCEorS5D4buRl8=
Subject key identifier:   E9:57:5B:15:80:E6:94:93:74:F0:B3:92:67:AC:72:B7:83:D2:CB:B8
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285845ADEE1127ED81B59D42E87A00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bd8b6677-a9aa-3745-887f-ca9ff3ab677f.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     8075
IP address blocks:        170.114.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:11:27:ed:81:b5:9d:42:e8:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=8c1b976d-2fc3-4bc1-82bb-750c6445a522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:e1:75:48:39:86:e0:e3:1d:ad:2e:7a:01:
                    5e:15:76:3e:19:63:c6:2c:8c:96:87:ba:11:24:d2:
                    b1:6e:77:d3:5e:27:ea:40:28:74:b8:63:8a:e2:14:
                    ae:11:30:83:fa:42:b0:7c:50:c9:c4:2a:a9:7d:96:
                    05:bb:07:13:ab:db:2b:cf:53:70:bb:ab:d3:4e:0a:
                    0e:a7:9c:d1:96:c5:24:9d:3a:11:07:b8:52:79:7d:
                    e9:f4:93:5c:6c:47:89:bc:b8:68:c0:05:67:6d:60:
                    a5:2e:53:92:78:93:d9:55:4f:61:5e:55:80:49:8f:
                    9c:b1:8d:52:6b:7a:02:3f:b4:4b:2d:49:4a:6a:c9:
                    0a:7a:81:26:74:16:c1:f3:be:1e:50:65:41:f0:6e:
                    18:1e:44:0c:a4:e6:8b:35:e2:2c:5a:4a:88:aa:52:
                    8f:22:3f:4d:11:a9:2d:c9:42:37:3e:30:72:9a:38:
                    71:77:b7:cc:e5:1d:91:46:5a:53:51:35:6f:75:32:
                    e9:1f:cc:e2:7d:8e:33:c2:6f:99:41:f1:aa:09:83:
                    8e:03:9a:1f:14:53:c7:1b:52:0e:f9:7e:5b:2a:cc:
                    2f:4c:6b:ed:8b:a2:99:cb:f2:9e:f7:c8:64:28:e1:
                    1e:d7:29:13:09:b8:4c:5e:9e:22:a0:c6:1e:4e:81:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:57:5B:15:80:E6:94:93:74:F0:B3:92:67:AC:72:B7:83:D2:CB:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bd8b6677-a9aa-3745-887f-ca9ff3ab677f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:a7:55:b7:c2:74:60:4a:a4:af:79:a3:38:6d:a9:9c:85:
         5f:07:77:7b:2c:e0:ac:37:8b:2d:7b:8a:03:83:32:a3:b4:8a:
         d9:b4:dc:b6:16:a0:7c:b2:17:84:60:13:71:48:34:55:21:00:
         13:ca:4f:07:de:d9:be:11:52:d7:dd:01:e0:fc:78:f5:fd:60:
         97:8f:dd:cb:18:4d:63:5f:c3:3c:39:34:3c:3a:ad:43:2e:db:
         5a:7b:47:fe:60:6a:7a:70:56:4a:ef:8e:dc:d2:df:37:71:6e:
         d4:72:37:d0:17:f4:49:1a:a5:d9:a6:e2:af:5a:51:fa:4c:15:
         7c:42:5b:86:da:a5:d4:a5:97:f3:87:03:eb:82:f7:ee:27:6d:
         74:ac:52:5b:c4:17:4e:50:51:7d:f0:88:58:e0:8f:7b:91:e7:
         ae:24:fc:f5:83:83:45:ec:be:63:c3:ef:26:9b:1f:b8:be:f3:
         c2:1c:0f:ac:f2:5e:9d:64:84:1e:d3:f5:cc:d2:d0:30:88:d3:
         fa:93:9e:65:51:ca:46:62:33:d1:34:66:28:1a:22:da:97:0b:
         05:d5:86:ae:e2:37:e1:46:c3:3a:cb:bd:cd:17:06:4a:d6:9b:
         00:cf:d1:88:ad:5b:38:50:0c:3b:a2:ca:e9:26:82:f9:56:40:
         e9:45:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:11:50 2024 by rpki-client on console-fra.rpki-client.org