Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa
File:                     82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (raw, json)
Hash identifier:          MVmXB53IHZxvDrqj3pmrJfRrQCVFKg9CAA+6AeiZo3w=
Subject key identifier:   62:AB:44:36:60:68:9F:55:04:BF:4C:BA:0B:5C:DB:75:39:C5:88:8F
Certificate issuer:       /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd
Certificate serial:       010D0C9F43285845131AE10D9805265AE362EC00
Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     8075
IP address blocks:        138.128.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e1:0d:98:05:26:5a:e3:62:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=8e6042a7-3cef-4fe9-86c8-2e03c45b5815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:6f:f0:81:75:cd:59:c3:40:73:fb:b6:b3:
                    05:b3:ff:dd:89:71:b1:eb:b6:2b:56:b3:05:a2:3b:
                    dd:93:17:b8:be:50:76:f7:6b:66:05:9a:3d:bf:5e:
                    e4:7d:4e:22:ad:c0:5d:05:e6:79:b9:0b:17:be:4d:
                    47:80:16:10:77:b9:fa:71:c9:9e:69:7a:d0:12:c6:
                    f2:74:94:a3:56:c9:a8:80:74:f3:94:6e:8f:cc:8b:
                    1e:42:8a:b2:f2:cb:9a:73:20:96:c1:6f:6e:fc:3c:
                    73:5a:21:13:ac:31:0f:1b:e8:32:d5:8a:0f:66:fc:
                    4b:fa:f9:3f:2e:30:25:5b:41:d9:56:43:be:20:9a:
                    75:17:2c:c3:28:3e:9e:7d:bd:b1:b7:51:7d:19:07:
                    36:c8:91:3b:06:39:47:ee:30:35:5a:07:59:ae:f1:
                    5f:4f:d8:96:48:b8:fe:1d:d0:20:36:52:af:42:c0:
                    85:8c:0e:5f:87:f8:a9:fb:55:02:65:ee:5e:28:b9:
                    90:88:cb:a6:ba:53:cb:f6:f7:aa:51:22:f9:78:6a:
                    fc:d1:1a:f9:87:6a:1b:97:45:6e:94:24:25:8c:a5:
                    12:d7:c6:26:4d:cc:05:81:70:15:da:b0:1f:36:10:
                    90:eb:da:82:e2:28:b8:0b:75:cf:bd:18:44:04:3c:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AB:44:36:60:68:9F:55:04:BF:4C:BA:0B:5C:DB:75:39:C5:88:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl

            X509v3 Authority Key Identifier:
                keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:71:a9:7b:e7:45:46:89:13:d8:62:d5:87:5d:97:b7:cb:
         ba:71:b2:51:78:dc:63:a7:2c:e9:26:74:44:9e:57:bb:06:df:
         54:b9:35:4b:6d:c3:d1:bd:ef:86:0a:8a:0f:7a:0c:62:c8:39:
         e3:63:f5:61:4c:d2:7b:f7:4b:47:74:ed:b1:32:b3:42:15:ca:
         96:a6:4b:32:b7:24:d9:ce:d8:b8:d7:09:df:60:e6:99:73:bf:
         64:3d:c6:cb:70:3f:03:21:04:08:a6:98:58:b2:1a:b3:62:0e:
         4f:a3:b7:44:09:1a:73:12:1d:e9:b0:f3:c1:7a:58:02:04:9b:
         7e:01:0f:c1:39:f8:5b:df:25:61:4e:c3:f6:91:b8:b7:67:95:
         3f:b2:4c:a7:f8:d1:6b:08:62:88:84:10:f6:56:a3:b0:19:dd:
         07:b3:89:48:70:b9:ad:89:6a:1f:7d:bb:a4:af:70:30:b2:db:
         59:7c:30:cc:c7:64:2e:2a:01:00:67:8b:d7:70:d9:e8:c2:42:
         33:aa:1e:62:9a:84:e8:16:7f:79:b6:70:80:42:fb:76:43:31:
         1e:f0:ba:5a:50:0e:75:83:21:64:cd:0a:a1:bd:af:cc:22:4e:
         ad:96:41:96:fd:a0:bc:de:1e:37:45:e8:c3:fc:11:4f:f4:98:
         72:13:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:32 2024 by rpki-client on console-fra.rpki-client.org