Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa
File:                     c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa (raw, json)
Hash identifier:          P/1E+Icrzf/JtdLorkbZ/0PXatGxzor/ne8Z/SYXUw8=
Subject key identifier:   42:C4:CE:7F:84:15:33:C6:8E:78:05:0D:4F:2C:A5:B6:ED:31:39:BC
Certificate issuer:       /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Certificate serial:       010D0C9F432858454D9D7B9B95AE1CB2D0E29B00
Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     8849
IP address blocks:        162.247.155.0/24 maxlen: 24
                          162.247.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7b:9b:95:ae:1c:b2:d0:e2:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=90e90184-76e1-4910-ada2-4f84d3d91a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:29:21:bb:f5:b7:f5:3d:59:30:63:c4:e3:
                    85:1b:f8:0f:d0:ff:88:92:8f:47:40:ea:df:75:db:
                    f3:63:2f:85:a7:b0:a7:69:b2:16:86:a6:0d:80:06:
                    9f:87:0d:a2:c3:8c:ee:ce:b2:4d:11:79:56:c8:3e:
                    65:10:15:25:f2:f4:bb:88:2c:1e:f1:83:73:74:99:
                    bc:eb:39:51:d1:94:b5:9d:50:b0:b0:19:71:85:56:
                    19:ea:8b:e9:13:4b:98:e7:14:f6:a2:e7:74:17:8b:
                    0a:4c:b3:70:7c:ac:5d:0f:a7:b6:97:be:a2:65:de:
                    92:98:c5:f0:5e:dd:52:a1:e7:09:dc:af:12:6b:f0:
                    66:f4:ac:77:c4:e2:bd:39:61:8c:68:c6:dd:7e:fb:
                    8e:e3:bd:f2:c0:82:97:55:81:d7:62:59:a9:54:a4:
                    0f:88:2c:d1:95:bf:87:0f:c4:05:ac:ae:f5:fd:29:
                    21:99:b3:05:3a:d4:f3:99:bd:9a:bc:14:4f:fd:c9:
                    f3:0b:b4:b7:9f:bb:b7:d7:bc:b9:b8:dc:dd:bf:87:
                    29:c4:05:b6:da:63:cd:ae:2a:49:08:02:57:83:34:
                    6f:a3:34:ba:5e:6b:16:99:38:94:11:87:82:4b:08:
                    43:04:6f:6a:ee:bb:a6:74:37:fb:b3:d8:1d:65:bf:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:CE:7F:84:15:33:C6:8E:78:05:0D:4F:2C:A5:B6:ED:31:39:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl

            X509v3 Authority Key Identifier:
                keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.152.0/24
                  162.247.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:e5:3a:ef:4c:cf:a9:ee:8a:22:55:a8:29:11:fc:d2:d6:
         28:fe:be:df:5a:81:3d:84:5c:17:2b:22:ed:cc:57:4f:93:ff:
         98:e6:ac:c3:63:23:11:ed:fc:6f:0f:5d:b1:17:b7:a3:3c:22:
         3f:94:6d:e7:68:0c:35:8f:d8:10:1a:39:ba:a7:7f:51:3d:ca:
         12:05:d8:cb:aa:fc:8b:c4:f8:b4:15:9c:1e:7a:9e:a8:b7:8b:
         84:c8:47:ae:73:13:71:81:cb:86:3e:e2:48:13:ea:e5:77:ff:
         d9:71:aa:76:f2:0d:26:8a:f9:68:f9:ab:b5:43:ba:b2:08:57:
         8d:7c:dd:40:dc:19:8c:9a:a0:74:69:88:da:d9:28:15:bd:9e:
         3b:15:9c:48:67:a0:75:ee:db:d7:43:a5:4e:f8:1c:0b:b6:06:
         1e:09:71:8c:92:c4:63:23:10:85:30:3e:cb:39:f3:34:c1:5d:
         c4:32:d1:0e:61:16:c7:f0:03:c8:3f:a1:69:be:19:db:65:a4:
         5b:2a:e8:da:60:47:83:62:36:5a:90:ad:08:54:55:f2:3f:74:
         22:99:8e:1f:b2:c6:70:88:84:0c:0f:82:6b:32:d9:a8:d9:f4:
         e2:5a:8c:78:1e:5b:b6:d8:93:97:ad:f2:df:2d:fa:62:12:0a:
         d3:38:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:45 2024 by rpki-client on console-ams.rpki-client.org