Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/53e7077e-f336-3e62-a4cc-a4b890f7ab1f.roa
File:                     53e7077e-f336-3e62-a4cc-a4b890f7ab1f.roa (raw, json)
Hash identifier:          9T/QA1kvdTcjeUzeNQSFlVy6UIBESeLSGbcg3I3x+Kc=
Subject key identifier:   F4:01:8C:D1:48:1D:14:51:96:BD:34:1E:EB:32:BF:FD:55:77:9C:38
Certificate issuer:       /CN=4e534d5e-d592-4f77-b437-24906bd6cceb
Certificate serial:       010D0C9F43285845C17916F1B3FFFA4D85FE1058
Authority key identifier: 50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/53e7077e-f336-3e62-a4cc-a4b890f7ab1f.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     396982
IP address blocks:        148.80.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:16:f1:b3:ff:fa:4d:85:fe:10:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e534d5e-d592-4f77-b437-24906bd6cceb
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=a65892f0-114b-4f7b-9c4e-b3cc969bbae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:35:dd:50:f9:c6:89:10:fb:22:d2:af:71:
                    f3:ff:54:1f:a0:63:99:b4:d8:98:d4:17:17:fc:33:
                    94:a6:f6:77:df:da:81:f0:97:39:57:5b:7e:15:17:
                    1f:ce:c3:57:60:99:ee:af:ba:45:e6:06:b0:f5:7c:
                    39:16:5c:72:ab:75:f7:60:5d:cb:0c:85:9d:be:24:
                    cb:84:77:dc:ae:0c:75:5b:e3:9e:c6:7e:ed:04:d4:
                    71:44:f3:98:19:f3:4a:06:7d:11:ff:bb:d2:54:f4:
                    4b:56:6a:f6:34:57:2b:d8:f2:61:4d:af:57:06:88:
                    19:50:46:21:ad:e0:18:72:1e:06:48:7c:fe:75:c4:
                    3b:c5:47:06:fd:c6:32:e7:3b:c8:27:58:2a:a8:76:
                    f4:fe:a0:34:26:ed:44:ad:59:9d:70:04:87:8f:cc:
                    a4:46:62:f7:bf:0b:1f:75:6d:56:80:36:63:01:5f:
                    ab:3e:a8:9d:f9:84:35:6b:1d:66:37:32:b2:3f:05:
                    0b:21:96:b2:f5:61:bc:a1:1f:ca:01:2e:95:71:6f:
                    1d:31:c1:31:00:4f:2b:fd:72:20:e6:a1:80:1c:bb:
                    92:26:df:f6:27:d3:20:97:f1:a1:d8:96:0c:c3:46:
                    44:4e:3b:ac:84:b6:82:45:b2:ff:1a:3a:6a:ab:12:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:8C:D1:48:1D:14:51:96:BD:34:1E:EB:32:BF:FD:55:77:9C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/53e7077e-f336-3e62-a4cc-a4b890f7ab1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl

            X509v3 Authority Key Identifier:
                keyid:50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.80.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:12:0a:01:89:14:ad:29:7a:be:16:61:ab:83:77:af:53:
         10:b6:90:1c:56:d5:8f:a0:36:78:98:36:b4:52:3d:97:a4:08:
         bc:9f:db:73:37:fe:2c:b5:91:26:89:9b:b9:33:44:9d:be:28:
         1e:7e:14:2c:14:07:a2:2c:1f:98:cd:81:61:7b:a7:49:52:6e:
         54:9f:94:14:30:18:7f:3e:88:c0:86:19:38:e0:fc:fc:f2:f4:
         f9:21:3d:10:74:31:1c:e7:cb:6e:a3:44:75:8c:45:4c:fe:c5:
         26:80:89:d9:fc:95:c3:1b:3b:ee:69:4c:73:63:18:d8:ed:9c:
         9c:a7:75:d3:c1:3d:2c:48:9e:c0:e2:72:17:0f:88:40:bc:3b:
         6a:df:99:a7:34:39:91:e1:f6:ed:c6:24:05:a2:a9:67:a9:f7:
         e7:1f:c2:89:17:e9:7c:24:3d:be:12:e8:53:62:ce:a0:67:cf:
         8a:0d:dd:54:01:00:a5:32:53:fa:e1:4c:da:38:a6:7c:79:02:
         81:c3:6a:77:95:e1:96:ed:ab:23:93:04:14:5d:98:6b:87:d8:
         e9:21:51:61:69:3d:a4:85:c9:d1:96:48:c9:f3:95:98:fb:2a:
         da:6c:17:68:eb:b3:67:00:ca:0a:60:d7:e7:ad:96:e3:58:01:
         ba:21:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:15:10 2024 by rpki-client on console-fra.rpki-client.org