Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fd8341c1-a2ed-3963-a060-b1ba3d227628.roa
File:                     fd8341c1-a2ed-3963-a060-b1ba3d227628.roa (raw, json)
Hash identifier:          fwq1sgNXbc6sSIM+87ym4J1JW3YznYvjoBWDQ+5aUsE=
Subject key identifier:   EC:2A:22:0A:44:EA:C0:D5:5E:C1:9D:C8:F0:CF:93:CE:31:4E:75:69
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858454F02C219B32A6E038FC41D40
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fd8341c1-a2ed-3963-a060-b1ba3d227628.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     31898
IP address blocks:        170.114.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c2:19:b3:2a:6e:03:8f:c4:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=8531890a-35eb-43b0-978c-d146bd713e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:20:f5:0d:0a:25:dd:d5:fc:1a:52:06:07:
                    18:4f:a2:26:25:72:95:c9:6d:9d:7b:31:a7:fe:45:
                    5e:95:0d:e0:7a:a9:01:fc:3c:b1:83:22:6d:b4:2e:
                    ba:51:85:1c:bf:2c:6a:0c:33:ac:66:1a:a7:39:14:
                    1d:92:29:3d:9e:fa:f1:a7:2f:87:aa:91:f5:18:85:
                    be:96:05:13:00:ba:f4:7e:f1:83:5b:2e:68:19:22:
                    a7:9a:55:8d:1a:81:4f:f5:02:d7:53:44:16:e3:b3:
                    97:e3:0b:9d:3a:c7:eb:77:1a:ad:0d:df:2a:08:cb:
                    19:48:e7:48:b0:44:b9:69:eb:80:2f:92:72:5f:43:
                    52:d0:94:71:f8:40:db:c0:2d:35:4c:c1:e4:0c:5b:
                    28:8c:a1:96:7c:d9:23:12:a3:a3:49:e6:ec:19:0b:
                    ab:21:aa:7a:a9:35:0c:d1:43:7c:44:86:fe:ca:6a:
                    c9:0d:05:15:4e:6a:be:67:9f:f3:55:60:f1:9a:12:
                    97:58:27:51:89:09:8a:3a:e1:74:bc:3c:0b:69:1e:
                    24:45:1e:6b:db:c6:27:56:43:03:ad:b0:77:c7:8d:
                    88:39:49:49:42:7f:c7:2f:96:23:57:ea:f3:6f:24:
                    08:03:d0:6b:40:cc:db:eb:8a:e8:44:e4:66:4d:1e:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2A:22:0A:44:EA:C0:D5:5E:C1:9D:C8:F0:CF:93:CE:31:4E:75:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fd8341c1-a2ed-3963-a060-b1ba3d227628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:66:4a:bd:c0:d8:1e:7a:e9:27:be:8f:56:f5:a0:97:ac:b5:
         0a:74:43:58:e4:cc:4a:f1:36:8c:07:7b:2a:68:a3:b4:45:77:
         53:95:15:3d:10:cf:ea:1f:e1:6b:6e:8c:da:34:33:f9:1b:32:
         8c:80:38:21:e5:6e:e1:0e:c6:83:fb:da:52:37:1d:89:4c:8f:
         58:dd:ca:58:55:fe:22:08:61:38:b3:17:f3:b5:75:3f:42:85:
         06:6a:bd:5d:5e:06:0a:ec:5f:58:f1:52:0c:06:46:97:17:f6:
         e4:af:c1:5a:c4:ea:af:8d:db:0c:1f:ac:7d:f0:ff:18:13:65:
         08:44:9b:7f:91:99:90:58:ff:18:2a:43:d7:0a:b5:f7:37:ff:
         7a:28:61:59:0b:f6:b6:e6:4c:b7:1e:e9:48:62:5b:02:bf:d5:
         65:d2:9b:c2:ad:76:0b:37:3d:3d:4c:f5:30:02:59:7d:5d:f7:
         27:1d:bd:1b:34:ed:55:9d:3e:51:b6:7f:1c:b5:e9:8f:d9:d0:
         32:9c:da:00:14:c6:62:60:34:67:00:e7:16:60:2e:38:90:ec:
         e0:52:97:eb:9f:03:ad:f2:c6:6c:3e:0e:64:9f:aa:81:b8:d2:
         fe:cf:e3:80:3e:51:1e:e9:88:0e:39:9d:f2:e8:64:10:1e:ec:
         1e:cb:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:29:00 2024 by rpki-client on console-fra.rpki-client.org