Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa
File:                     cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa (raw, json)
Hash identifier:          cLXmOwjo9XgMJYvnwQ9ATiyjKlkkHoWWD5CrQClSen8=
Subject key identifier:   DB:04:58:F7:10:3A:2B:CD:0D:0E:72:11:29:CC:30:BA:F7:27:B7:9E
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F432858449F3F7823631E689350F09440
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa
Signing time:             Sun 21 Jan 2024 02:00:26 +0000
ROA not before:           Sun 21 Jan 2024 02:00:26 +0000
ROA not after:            Sat 20 Apr 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        192.161.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9f:3f:78:23:63:1e:68:93:50:f0:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jan 21 02:00:26 2024 GMT
            Not After : Apr 20 01:00:26 2024 GMT
        Subject: CN=11a19f9b-812f-4e3c-aa2e-1aba7681268d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:92:89:dd:46:68:28:9d:b9:0e:64:a4:24:
                    ae:0f:eb:de:54:56:2e:75:9b:b4:0c:3c:ae:ce:a7:
                    d3:c2:fe:17:83:8a:93:8e:f6:26:f2:28:cc:98:e3:
                    bb:10:da:d1:03:0c:ae:ea:ab:7d:1b:25:a8:ee:91:
                    f9:d9:67:42:9c:e0:61:e8:a8:3f:00:be:61:c3:5c:
                    63:f4:1c:d5:cd:7a:ae:97:13:24:ff:e8:9d:53:68:
                    92:40:f1:43:e2:56:12:38:9c:f8:a0:5c:0e:d7:b4:
                    a6:3d:22:b5:a5:9c:df:0c:35:fc:83:c9:67:25:9f:
                    20:e9:6b:13:89:aa:87:c3:0f:00:07:0f:b7:87:ba:
                    3f:50:a8:d7:2d:95:85:77:ea:53:16:c9:b8:d1:c4:
                    e6:de:a0:d0:32:be:06:bc:46:f3:97:81:d4:75:2e:
                    52:fb:2b:c6:14:25:97:f1:be:13:6f:fc:de:e7:73:
                    2f:c9:26:30:f1:04:a4:a7:54:3b:8a:71:87:8b:36:
                    ec:c5:6d:b5:2d:fb:d9:e7:ec:8a:69:69:3f:ae:4d:
                    32:f6:a0:e8:7d:d9:8f:c8:f7:ea:55:78:1b:65:3d:
                    18:14:5f:37:cd:43:a3:92:bd:47:18:09:da:28:a8:
                    cc:6c:c8:43:2e:56:91:17:12:1e:e3:e7:58:95:6c:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:04:58:F7:10:3A:2B:CD:0D:0E:72:11:29:CC:30:BA:F7:27:B7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:bf:f1:8f:30:6c:f6:f8:2a:38:4f:2e:c7:5e:0c:8a:4a:
         e4:81:41:83:64:66:16:b7:07:78:a5:d9:57:77:03:e7:b0:3e:
         af:f4:6a:61:5e:19:fd:19:11:dd:e0:01:16:97:65:44:15:e3:
         83:88:68:67:eb:d9:ef:c6:0a:2a:0d:64:63:97:b9:12:b8:a3:
         d6:cf:93:85:e7:d5:85:6e:9b:db:94:fb:35:0a:02:82:de:bf:
         fc:7f:f6:46:92:73:2f:a2:e9:5f:8f:b3:a4:af:38:c6:20:d6:
         ea:18:be:c4:5e:b0:a0:0f:db:30:97:5c:71:92:5a:c6:08:e4:
         7e:00:42:77:92:2c:6a:44:74:a6:86:d1:ed:08:05:bd:84:16:
         aa:3a:7a:d7:03:21:3a:c6:b0:1f:29:5b:d4:a6:80:3f:e7:fa:
         38:f2:50:a8:59:78:ae:13:35:b3:77:6e:f5:2f:1a:d5:6a:e0:
         15:6b:ef:a1:65:78:e4:9d:0f:0b:c0:ef:a6:46:57:84:66:d2:
         4d:53:7f:b0:b2:21:f2:e6:4b:60:c8:92:4f:cd:a2:28:f8:01:
         78:44:99:ba:dc:d7:fe:90:cd:bd:ac:a2:b3:4d:c9:bb:0e:dc:
         11:12:ac:36:5f:1e:34:4d:43:16:e2:45:4e:bc:6f:35:25:44:
         d8:81:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:44:50 2024 by rpki-client on console-fra.rpki-client.org