Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa
File:                     cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa (raw, json)
Hash identifier:          qtQYcQR48rWWM659bjg2ytazY6j3oziXmcC5j3OrD80=
Subject key identifier:   0D:5D:82:0C:82:32:0C:7E:48:63:0C:CE:93:2F:C6:3A:2D:6C:7F:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049DF836DDC640729911080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33650
IP address blocks:        162.151.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:df:83:6d:dc:64:07:29:91:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=3fbfb8ea-21eb-402c-90f9-eed5a64f4ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:00:c6:81:69:04:d3:f1:6d:c6:c1:1e:12:
                    ab:1f:fb:fc:88:db:11:7d:ed:4a:aa:af:19:27:1f:
                    f7:9c:06:81:22:65:60:33:a7:9f:44:66:40:dc:a7:
                    3f:dd:62:20:53:63:0e:e3:d6:e6:bf:fd:78:44:41:
                    2c:62:96:f2:cd:70:1a:ce:08:ec:0e:f0:d4:32:da:
                    3b:6a:3f:dd:5d:95:95:61:01:87:d4:03:f3:96:2d:
                    41:1d:30:ea:a2:0d:26:ba:bb:b1:50:06:39:d2:2d:
                    37:8b:8f:b1:4c:28:52:ac:d2:53:27:de:a9:9a:eb:
                    7b:ad:42:80:bc:03:1a:bb:47:62:2e:db:f5:e4:d0:
                    26:bc:1c:65:39:b1:ab:33:a8:e6:e7:5f:fa:a9:4f:
                    d1:a7:67:0f:a8:e7:37:5c:69:3a:38:91:cc:73:ed:
                    c8:38:d7:72:04:56:ec:f2:be:74:44:70:d5:15:31:
                    8f:97:bb:b6:3d:d1:a0:c3:1a:e3:4a:59:be:fe:17:
                    51:86:b5:eb:7d:30:5b:23:69:52:51:7b:e6:9f:29:
                    23:20:a8:fe:42:44:1d:97:34:17:67:b7:c6:96:f2:
                    5a:6e:92:df:d3:18:5b:9c:28:ea:48:e5:88:dd:93:
                    06:20:2c:55:c7:ae:02:e7:92:36:a1:18:43:76:70:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:82:0C:82:32:0C:7E:48:63:0C:CE:93:2F:C6:3A:2D:6C:7F:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:b8:92:91:58:d4:11:64:11:2e:46:ee:9e:05:18:8a:00:
         17:2f:19:60:1d:f5:d4:68:ab:27:99:12:ba:40:95:93:f8:37:
         0c:19:ac:2c:72:f2:84:6d:3e:51:2c:26:fe:d2:57:05:0a:8a:
         e7:ff:6f:90:3e:d4:9a:df:51:19:32:c0:5f:d6:35:e7:3b:67:
         39:5b:a9:ac:92:8a:64:23:ea:69:0f:45:cd:ec:43:c8:85:2b:
         ec:69:e9:ee:df:bb:4a:65:d1:e5:2d:1c:4f:e1:df:28:09:2f:
         db:a8:1a:4c:d7:85:05:5b:be:b6:13:c9:54:69:42:58:4d:43:
         5f:e6:e9:f0:7f:bf:c4:ca:b6:a9:bb:81:86:41:d6:b5:4b:33:
         97:75:13:83:5a:b1:82:1e:c1:5c:bd:34:62:c5:a0:10:74:a1:
         a4:c4:23:55:49:0b:5d:09:80:1f:6e:37:b0:09:5b:16:bc:c8:
         2c:84:63:4c:a5:7d:3f:4e:f0:e6:42:31:57:cb:49:23:67:5f:
         94:19:11:3f:9b:e8:9a:24:0e:5a:d6:07:45:9d:1e:59:76:f6:
         11:7e:b7:ee:da:5f:fe:a9:d9:69:a2:73:1c:ba:94:17:36:b2:
         70:73:7d:2b:89:05:99:b8:b0:e1:37:01:18:49:8b:83:78:2e:
         0f:08:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:48 2024 by rpki-client on console-fra.rpki-client.org