Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
File:                     b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa (raw, json)
Hash identifier:          XGB3noeHFAj3OBPdDglrs5OcX5ohVf8tegAetaBubc4=
Subject key identifier:   D3:4D:95:8B:35:DB:1A:B5:2C:D7:25:B7:97:19:22:D5:BE:6B:97:DC
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858457FDDD69972491C5DD73FAF10
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     394089
IP address blocks:        165.85.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d6:99:72:49:1c:5d:d7:3f:af:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=053732c5-c377-419e-abad-3ac5f88b0d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:16:8d:55:33:c9:48:cc:42:90:3b:34:c3:
                    70:69:7e:74:86:35:65:f0:25:a0:d3:84:6f:48:97:
                    94:ac:df:a7:ba:95:69:e1:10:2d:a6:dc:76:a1:de:
                    b1:af:4c:05:66:c3:b6:96:e9:a7:1d:d1:e5:9f:48:
                    a4:4f:fa:54:cf:9b:aa:9d:17:74:39:9b:fb:e5:1c:
                    e0:e8:1c:e7:8e:5f:ba:b8:a1:31:fe:6d:34:3a:a6:
                    67:7f:ab:d5:77:78:32:a2:54:17:e8:ce:4b:4b:c3:
                    13:d7:07:2e:ca:81:fc:cd:f2:8b:d6:4e:1e:d5:77:
                    1e:db:58:2b:2b:16:bd:66:37:1b:9f:4a:d4:ab:e1:
                    5d:e5:7d:c5:21:c0:01:ec:6c:34:9c:76:92:69:c0:
                    32:33:96:b1:6b:45:1b:a8:2d:ba:ba:39:9c:37:11:
                    f9:e2:33:63:2f:7c:92:4c:13:b5:9f:e8:9c:e8:35:
                    a5:a8:af:18:93:75:45:dc:07:da:50:7e:14:7a:bf:
                    eb:cf:ba:14:fb:89:f4:2a:d3:c7:c0:e3:47:83:ed:
                    67:7b:57:bd:07:18:39:8a:a4:94:14:7f:c8:08:a9:
                    e0:7e:91:19:0d:3d:78:43:3a:ce:59:a3:fa:5f:cb:
                    d6:a1:d2:17:e9:f3:6d:1a:d1:1a:b8:cb:56:3a:1f:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:95:8B:35:DB:1A:B5:2C:D7:25:B7:97:19:22:D5:BE:6B:97:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:ce:13:03:d1:5d:18:96:eb:6c:a4:18:59:af:68:00:ed:
         44:99:f2:1d:6b:fd:62:eb:bf:14:d0:fe:86:40:2a:b5:8a:80:
         59:16:43:0e:7a:90:e6:5b:1c:40:41:95:a7:9d:a1:a6:df:11:
         90:c1:8a:67:37:9e:da:9d:be:b4:e5:97:2a:e4:da:cb:84:66:
         6c:5f:03:1a:c7:0f:9f:5a:c1:f9:04:43:65:51:af:8f:70:18:
         ff:ed:85:52:52:26:a9:b7:b9:8a:ce:5d:64:f8:99:9e:cd:89:
         bc:82:91:72:3e:99:01:69:24:57:78:4c:86:23:d3:d9:d8:ef:
         cb:8e:5c:62:b2:20:4e:54:f9:8e:c8:19:db:85:63:ef:4f:05:
         68:03:57:ed:99:1a:69:24:e1:ff:51:c7:f9:0b:7c:e3:bb:65:
         76:05:b8:10:dc:24:e4:d3:0d:32:5b:94:9e:40:83:a5:89:7e:
         0c:a8:b5:b3:85:10:d7:57:f0:dc:ff:51:6b:22:69:70:e9:37:
         07:cc:0f:52:fd:37:68:51:2c:80:75:41:66:14:19:71:f0:e0:
         13:05:1a:aa:01:19:7c:aa:c0:80:8c:3a:83:4c:e1:57:29:32:
         08:67:9e:ec:7c:c5:b9:57:f7:93:c6:04:83:85:c2:52:54:ef:
         71:4f:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 22:55:18 2024 by rpki-client on console-ams.rpki-client.org