Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
File:                     bd22376a-0063-340a-9389-87a8253b2735.roa (raw, json)
Hash identifier:          sk8kuHM4CvEBWU1voz1OF5RC6oTBjBeRDf6Dn146S2g=
Subject key identifier:   E3:61:6E:DA:53:80:2F:D1:0E:38:29:8F:11:61:34:5B:7F:1A:5E:DF
Certificate issuer:       /CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
Certificate serial:       010D0C9F432858450ABAD087F9AC3E2749C12500
Authority key identifier: 74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     46154
IP address blocks:        169.197.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d0:87:f9:ac:3e:27:49:c1:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=9372819a-2bec-4f78-92ca-d7873c568b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:a3:9b:a6:ee:05:3f:f0:71:77:a3:fc:3d:
                    2f:f6:88:f2:10:27:67:70:73:ed:d5:2c:d1:18:85:
                    72:fb:b1:a4:17:a5:d1:0e:f7:51:c3:13:1b:65:d3:
                    e9:d2:4c:35:76:2f:7f:5e:3d:97:eb:c3:92:e5:79:
                    a4:0b:5b:d0:85:81:ed:37:cd:9c:c4:6a:3e:87:f3:
                    16:39:b5:fe:d8:52:e0:ea:cd:60:5c:7c:cc:c4:2e:
                    30:33:17:c7:3c:05:c5:3b:39:9a:75:af:5a:65:d9:
                    9e:35:d9:c9:e6:5a:7b:98:b1:ed:52:a8:23:04:d2:
                    25:d8:85:9e:51:87:2b:28:76:e1:d7:74:fb:ba:32:
                    6e:64:91:07:ad:2a:47:dc:06:2f:ea:22:d0:95:9f:
                    b7:b8:5c:60:a9:7d:04:00:af:49:84:16:1f:73:53:
                    1c:23:53:37:8e:6b:84:db:94:fc:f4:64:db:58:58:
                    3a:1d:c9:4a:71:c9:21:e1:91:d6:6d:0f:68:62:5a:
                    1a:08:56:96:e9:0f:53:87:42:78:d2:e1:da:c1:2d:
                    0d:6c:c2:85:c3:ef:3c:f7:93:49:eb:54:f2:72:aa:
                    e9:1b:e3:1b:fd:6e:a0:a1:8b:19:c1:c4:ba:12:6a:
                    05:41:a1:2b:07:2c:9c:5a:6f:a5:41:1e:e4:46:d3:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:61:6E:DA:53:80:2F:D1:0E:38:29:8F:11:61:34:5B:7F:1A:5E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl

            X509v3 Authority Key Identifier:
                keyid:74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:d3:88:bc:02:5c:0e:d5:46:06:b9:4d:17:1f:4d:f6:b4:
         4d:8d:1f:e4:04:9b:d8:3c:f8:00:01:ab:f3:e8:f0:f9:78:a5:
         aa:c0:94:1b:2f:f5:21:3d:c4:c5:3d:3a:55:d2:b6:8e:22:49:
         28:72:f9:f7:d8:9c:48:9e:76:04:da:a1:8f:5b:52:c1:f3:f1:
         61:51:f1:c9:d1:13:e3:bd:f3:eb:9c:94:18:90:4d:7c:91:fa:
         a7:f1:28:a1:b1:71:f3:81:6e:c3:86:09:61:03:51:5e:d5:f7:
         45:f1:9e:37:85:b8:5e:25:6c:31:5d:26:dc:ec:23:cd:30:c8:
         6e:71:e4:a0:e7:ae:06:48:c5:65:5f:66:a2:db:74:75:8d:aa:
         86:3d:02:c0:a5:cc:8f:04:3c:7f:ea:9f:3a:65:db:ba:0a:9d:
         bc:9f:8a:d2:5a:63:06:70:26:2b:b4:58:d0:3f:97:4b:7d:2c:
         27:09:71:e8:64:95:5c:e0:60:e2:aa:72:6b:62:30:8b:a8:db:
         d3:a3:d9:cf:a6:01:12:58:3b:18:4c:b9:52:56:06:8d:4d:78:
         57:3e:9d:ab:de:13:50:bf:39:44:c5:59:39:bc:d2:83:32:0d:
         65:b9:6a:e6:73:15:4b:d6:90:48:65:9a:55:0d:dd:8a:07:77:
         cc:24:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:46 2024 by rpki-client on console-ams.rpki-client.org