Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
File:                     ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa (raw, json)
Hash identifier:          REswJpiz0dTr0DJbVuC7PEnPpCn7KZcq6frI+RZ7QGI=
Subject key identifier:   C9:6A:DA:CE:D3:07:05:EC:20:3B:7F:1B:5D:9C:EB:E1:E3:7C:63:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845B7AC01E5D8472C6A7B5BB060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
Signing time:             Tue 30 Apr 2024 12:45:35 +0000
ROA not before:           Tue 30 Apr 2024 12:45:35 +0000
ROA not after:            Mon 29 Jul 2024 12:45:35 +0000
asID:                     7342
IP address blocks:        199.7.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:ac:01:e5:d8:47:2c:6a:7b:5b:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 12:45:35 2024 GMT
            Not After : Jul 29 12:45:35 2024 GMT
        Subject: CN=59939fd2-e645-46f1-a99a-6f40f3ea8b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:4b:84:20:76:1f:24:6b:65:0c:3c:bf:eb:
                    cb:b9:83:59:0e:ef:9a:16:51:5f:ac:86:df:08:02:
                    6f:02:e3:74:44:0c:e6:a7:44:81:7e:70:56:97:e5:
                    e9:bd:96:68:79:a0:6c:0e:1f:a6:ae:b0:b3:32:e9:
                    c7:e4:1c:40:d5:d7:c5:04:90:38:0d:97:8b:62:8a:
                    0b:a7:b5:12:f7:42:66:6a:de:ff:2e:c0:36:d7:8f:
                    da:6b:ff:9c:9a:16:1e:15:fe:2b:0a:f7:85:dd:4d:
                    fc:33:d6:46:fb:2f:a5:31:f3:30:a7:88:a7:13:14:
                    a2:24:84:25:a2:45:72:6c:f4:b7:82:ef:aa:38:f6:
                    b8:73:12:d3:c6:34:00:a4:da:b0:71:f9:63:f2:9e:
                    84:36:27:ed:a0:f5:f5:a8:b1:07:8f:b1:41:8c:55:
                    8e:6a:7f:12:94:67:18:cd:74:8e:13:66:27:5b:60:
                    f9:33:69:c6:de:84:8c:d5:a4:e5:d1:42:d2:9a:0e:
                    31:68:0e:a8:71:3f:f4:c3:7d:b7:b1:08:09:2b:17:
                    61:8f:74:40:c6:3a:ff:da:79:79:f4:91:cd:36:31:
                    43:79:40:54:0f:f0:71:a2:c6:6a:cf:82:1e:50:eb:
                    9f:46:64:6b:38:64:63:3f:51:b7:cf:e8:ca:1e:4c:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:DA:CE:D3:07:05:EC:20:3B:7F:1B:5D:9C:EB:E1:E3:7C:63:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:78:c8:5b:c2:c5:1b:12:66:96:4b:7c:c7:e9:8e:7d:ef:
         9d:f2:23:f5:01:91:56:9d:8e:48:eb:40:87:9c:bb:20:b7:c4:
         1d:71:58:f4:94:03:d8:2a:8f:9c:19:ca:08:81:14:ab:a5:31:
         82:af:d7:c9:e2:bc:ae:a5:8f:6e:17:0e:07:b3:5b:c0:cf:25:
         3e:a0:05:47:6f:ae:78:88:ae:15:29:6f:49:da:5e:b9:07:41:
         26:5e:1a:96:95:83:e7:eb:59:80:33:52:34:86:3f:7a:5e:61:
         08:0f:69:b6:e7:f5:26:a6:42:47:42:6c:76:72:94:24:4c:b8:
         c9:98:b1:84:86:8f:28:b9:ae:28:a3:3b:a2:21:f3:a0:3d:d9:
         02:ce:fe:8a:c2:7e:6c:8c:46:80:eb:c8:d8:7a:13:2e:4f:b9:
         b6:5d:28:fc:7c:75:b3:23:5c:dd:a5:74:02:91:5a:93:90:3a:
         71:dd:e4:1a:ff:31:2f:e1:41:f5:ba:d6:df:87:c8:ee:75:ce:
         c4:d5:7a:7c:eb:e0:1c:27:d7:54:6a:72:58:3c:e1:2f:25:aa:
         a7:63:eb:f6:81:f4:e2:28:92:4d:49:99:87:28:ff:c6:a0:8e:
         f8:b5:9a:95:3a:88:52:21:58:af:e1:d5:65:8f:45:d9:3b:9c:
         68:28:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:11 2024 by rpki-client on console-fra.rpki-client.org