Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
File:                     33383e35-cfc9-334b-848e-ad7ba56090f1.roa (raw, json)
Hash identifier:          jZlf+rkT0a6Z99I0TP+7NGnrfMWLO/K9bcdXk+vtUSE=
Subject key identifier:   63:36:C0:40:FD:CB:0B:5D:A6:42:88:E8:2A:B4:20:CB:91:2C:A8:1B
Certificate issuer:       /CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
Certificate serial:       010D0C9F4328584578E2FD8B358EEC61313626D0
Authority key identifier: 4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     55179
IP address blocks:        198.168.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e2:fd:8b:35:8e:ec:61:31:36:26:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=75d87b85-9a56-4043-bea6-3edef353f0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:b4:c9:bc:0a:9c:a2:4f:b5:24:54:35:36:
                    84:08:ed:2e:1e:44:4a:3f:8f:7b:7f:6d:ad:46:b7:
                    6e:d2:a3:21:73:88:bc:41:df:0c:d3:64:e6:e2:a0:
                    ad:79:8a:d8:6c:d5:b6:fe:45:29:f3:26:5d:c6:69:
                    c2:f9:22:c5:f6:8f:2d:2e:8f:b2:fd:4e:ff:1f:08:
                    d7:68:2f:ea:e4:3b:22:38:9e:72:01:12:19:6a:08:
                    a4:6f:bf:b7:d8:89:96:42:d0:a6:04:6c:3f:5b:54:
                    51:9e:90:b0:f9:b2:ab:ce:dd:05:8a:8d:72:76:8a:
                    fb:b6:4c:2e:41:a8:80:cf:a1:90:33:1a:23:3d:02:
                    dd:dc:c0:22:0f:36:54:54:58:9c:07:b9:dd:7a:d6:
                    9f:f1:5b:f5:7c:90:77:07:4e:1b:08:ad:a7:ae:66:
                    0b:aa:d9:fc:90:b0:28:1a:86:61:d2:85:ba:b6:17:
                    b0:b6:5c:15:0b:6b:b8:56:59:bc:44:68:21:25:9a:
                    d5:56:c4:c1:0c:67:4b:c4:6a:ec:ec:08:a1:d2:5b:
                    e6:9c:5c:28:44:b2:2e:25:66:89:97:17:bb:ec:d5:
                    c9:57:d5:29:b6:a9:20:32:f1:6a:ce:49:1f:1e:27:
                    5c:78:a4:ed:ff:5b:c2:4c:7c:1e:f9:1d:12:19:3d:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:36:C0:40:FD:CB:0B:5D:A6:42:88:E8:2A:B4:20:CB:91:2C:A8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl

            X509v3 Authority Key Identifier:
                keyid:4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:84:fc:f3:7b:1c:b0:5a:a6:92:2d:58:f8:4d:40:bc:e3:1a:
         9f:75:8d:7d:57:4a:1a:82:3a:af:eb:d1:b2:09:80:53:0d:58:
         da:ed:99:4e:d8:fc:f3:57:1d:37:e0:2b:67:e6:c6:52:51:58:
         ce:f9:9a:f3:0f:91:99:a4:49:6d:d8:1d:5d:0e:15:af:a0:de:
         a5:a7:44:b5:a0:39:de:e9:a6:43:d8:c9:76:18:50:cd:e9:cb:
         eb:15:21:31:e1:f0:35:8b:80:ae:97:96:2d:ae:ba:be:55:b3:
         11:51:bd:7b:22:d8:7c:8b:08:41:84:07:2d:d6:ec:d1:29:d8:
         71:34:f0:e8:62:5c:e0:e2:0f:e4:51:6f:9d:ba:49:87:81:d0:
         f2:2e:11:12:25:76:a6:d7:71:17:1c:af:41:33:66:03:f6:42:
         e1:a4:8c:e2:4c:d4:07:f2:96:35:6b:11:74:65:83:9d:87:62:
         26:1a:a0:57:30:d9:72:ee:5b:3b:ee:6d:9b:a2:a6:fb:d5:70:
         2b:24:61:80:54:e5:b7:ef:a2:eb:53:0a:32:92:7e:0e:89:c4:
         d8:9a:81:de:b6:d2:2e:ae:3e:2a:b8:48:8e:83:d6:3a:a5:0d:
         1e:0b:31:38:fc:57:e5:39:c8:25:d5:32:99:cc:ca:ad:7a:8e:
         99:62:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:10 2024 by rpki-client on console-fra.rpki-client.org