Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa
File:                     f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa (raw, json)
Hash identifier:          9famlrAvxxliup3pHQ3i0tM6WUTQ2mmFrsWGTquO0Z4=
Subject key identifier:   DA:66:29:39:F5:B0:9C:0C:44:AC:F9:03:86:44:5C:4A:8A:66:2A:7E
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F4328584582A87943C35F72B95E03B240
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        161.38.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:79:43:c3:5f:72:b9:5e:03:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=bc0db881-1d97-480b-9bbc-bd5930d93fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:a1:30:cd:9b:34:6a:c4:d1:ea:28:9d:c9:
                    82:88:e0:47:cc:3b:72:30:29:d5:f7:91:85:9d:69:
                    d8:d8:21:dc:a0:74:d8:16:56:96:4e:b0:ac:60:db:
                    80:a6:69:8f:9e:b9:ee:81:35:f8:d5:48:e2:ba:a6:
                    fd:ff:11:fe:60:9f:4e:20:4f:f8:54:82:47:e1:36:
                    d3:80:67:95:a2:0f:55:70:33:8a:c2:b9:25:e4:1a:
                    94:38:17:3f:b9:ee:c7:ae:29:ec:11:47:68:84:31:
                    9a:af:32:af:9b:cb:ff:d5:87:38:d1:f9:4a:20:fe:
                    82:fe:71:42:9d:89:1f:29:8e:61:b8:89:3c:d8:e6:
                    ad:08:03:10:d2:17:33:06:0f:c1:a0:31:06:24:a7:
                    28:1f:81:e2:e7:0c:c5:c0:96:23:30:57:50:20:98:
                    86:d9:7b:d0:e9:01:da:b3:7d:76:34:57:b7:e1:10:
                    90:2a:e0:63:76:c7:cb:73:38:97:96:73:86:cb:05:
                    15:5f:05:36:19:03:f8:5c:47:68:c9:e3:4c:70:51:
                    4b:c5:8c:1b:bd:2d:5d:69:0e:13:e8:f7:05:8c:7b:
                    75:5d:7b:b3:05:a9:c6:07:22:f1:0f:dc:7a:c9:7c:
                    b6:95:4d:a6:b7:b8:2e:a6:cc:7e:7e:d7:46:4c:7c:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:29:39:F5:B0:9C:0C:44:AC:F9:03:86:44:5C:4A:8A:66:2A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:76:3b:fa:1f:5a:8f:52:12:e8:24:94:45:f5:f1:38:4d:
         46:2c:a7:df:86:77:21:00:cd:4a:23:ac:ef:6f:70:d6:2a:1a:
         5a:47:21:67:39:98:48:e6:44:f8:89:89:e0:b6:60:62:e3:0f:
         2c:d2:2f:4b:c9:c9:1f:e8:2e:39:ae:27:e9:6f:44:4f:d8:2c:
         88:e3:5a:e8:43:92:bd:a7:5b:13:c4:3e:9d:e1:b9:0a:66:fb:
         ec:36:3f:33:3d:e5:89:4e:78:d0:69:69:a3:5c:5e:03:f5:75:
         14:d8:54:c1:80:27:61:5e:8a:91:cf:f3:81:0a:40:ec:ae:96:
         ce:0d:39:4a:31:66:45:50:fa:c5:92:bb:d6:63:4e:f2:e3:a7:
         99:60:c9:96:cc:59:a0:cb:49:c5:40:26:e6:fa:99:c8:b7:76:
         ed:99:d0:d5:3b:e5:4f:93:46:5d:2b:f0:a6:94:be:83:8a:3d:
         b1:c8:c7:e3:e0:a6:dd:cb:af:43:43:bf:6c:c8:ab:f3:e0:67:
         bf:19:20:78:be:8e:b4:90:33:e4:08:6d:b5:79:50:68:bd:8a:
         b7:50:8b:dc:e0:eb:9c:17:e2:a3:ec:1d:be:f5:a6:a1:83:d1:
         23:1f:b5:a0:c6:9b:35:5b:0e:35:e1:5a:5b:44:9c:8f:f5:f7:
         69:d8:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:10:41 2024 by rpki-client on console-ams.rpki-client.org