Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa
File:                     e003425d-3460-3b54-b4cb-c53aee15bc2b.roa (raw, json)
Hash identifier:          2I0mFjhAN7vx46ddG+8FmyxiNC0DPMdx35UGMYVWS8M=
Subject key identifier:   0C:6D:27:E6:DB:7A:43:A0:3E:D5:23:30:19:56:1E:FD:28:B8:0C:69
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584484B9FD1D7410BC1CF4064680
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa
Signing time:             Thu 11 Jan 2024 14:00:29 +0000
ROA not before:           Thu 11 Jan 2024 14:00:29 +0000
ROA not after:            Wed 10 Apr 2024 13:00:29 +0000
asID:                     14618
IP address blocks:        192.161.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:84:b9:fd:1d:74:10:bc:1c:f4:06:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jan 11 14:00:29 2024 GMT
            Not After : Apr 10 13:00:29 2024 GMT
        Subject: CN=298e92af-0d22-4881-8aab-9fad57fdc240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:c6:4f:44:05:e2:a9:91:2d:e5:c0:57:93:
                    dd:8f:db:28:d2:bc:b1:3e:ac:8e:eb:47:c8:ab:d1:
                    35:fe:8a:28:e1:12:53:47:5b:6a:8d:d8:d3:95:86:
                    52:e3:04:40:ac:77:00:7f:c7:b0:b7:49:79:65:57:
                    3c:73:e8:3e:9c:8c:7e:a8:dc:ff:a8:9d:98:1b:89:
                    ec:78:83:84:3a:45:05:19:aa:ac:c7:c2:8a:4b:6a:
                    2c:bb:c9:71:8e:e7:2d:c2:20:95:98:23:fe:a9:0e:
                    cb:79:f0:90:72:cf:a1:cd:18:b1:0a:02:61:ae:5a:
                    d7:98:fc:26:c2:5c:24:40:9d:5b:22:bf:da:cf:b6:
                    e2:f8:28:0b:74:d2:74:9c:95:51:25:8f:f0:a5:06:
                    5f:27:b3:50:5c:b7:92:98:b1:af:ed:b7:c9:5b:21:
                    98:fb:65:14:38:dc:5b:d3:0f:38:80:90:26:3f:48:
                    b4:16:c4:30:49:69:e1:ab:e8:cc:5b:51:71:ee:4c:
                    e6:3b:d5:80:56:c5:9a:65:32:de:f3:ee:1e:d3:e7:
                    dd:4a:4e:a1:01:4c:b3:4f:0a:87:96:55:b4:74:6c:
                    57:4b:1c:7c:10:e2:6c:11:ed:7e:22:c6:86:a6:24:
                    a1:90:8a:54:58:af:cc:da:27:ff:61:88:4e:6e:e1:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:27:E6:DB:7A:43:A0:3E:D5:23:30:19:56:1E:FD:28:B8:0C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:80:67:67:b0:e1:3b:07:6f:c1:28:46:ee:ec:ab:10:f6:
         00:0f:d1:3c:b7:5e:af:43:20:67:5a:5b:fa:37:d7:50:b2:27:
         f5:79:7d:40:d5:e7:63:14:54:18:4c:b7:c8:81:31:9e:37:8e:
         79:ba:e5:82:15:be:87:b7:50:7d:f3:3e:05:c2:dc:9f:d3:25:
         6d:5f:93:bd:54:6f:09:85:77:7c:11:ba:ce:a8:67:75:31:c9:
         4c:4f:ec:78:11:b4:f7:39:c2:26:ff:28:2c:00:3e:6d:27:d5:
         7b:4e:7c:e2:60:3c:d9:5a:19:78:86:08:93:f3:38:32:e7:21:
         80:8f:6b:f7:ae:d2:43:31:fe:58:ea:5f:cf:d8:fe:fa:78:1f:
         3b:0d:3b:a4:65:b7:de:84:d2:e4:c2:12:ff:5d:5d:27:49:08:
         d5:06:63:63:92:0f:34:68:34:30:57:ba:27:dd:e1:b9:00:46:
         f7:b3:88:ac:98:df:b2:74:d1:fb:80:0a:45:2e:19:b5:3f:29:
         eb:da:63:8a:35:c3:c8:24:53:2e:1e:32:2a:89:97:d3:3b:1f:
         49:40:1f:c1:fc:72:f3:b7:1d:46:93:77:e0:46:d6:7a:7d:57:
         46:af:c3:cb:69:eb:71:d2:9b:d5:b3:c3:df:bc:f0:91:ad:fb:
         7d:90:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:51:21 2024 by rpki-client on console-fra.rpki-client.org