Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa
File:                     d00cb053-7fdd-3738-987c-4166b9a7f33c.roa (raw, json)
Hash identifier:          PN/k86x7fKyTDObkmq6F9B4CVh+Plgkt+Jq7AzwRssA=
Subject key identifier:   56:D7:33:3B:2A:6A:C4:02:84:0C:A3:2D:7D:89:69:FB:5D:24:89:98
Certificate issuer:       /CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
Certificate serial:       010D0C9F43285845FAB3F01F367D7766978E0B80
Authority key identifier: EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa
Signing time:             Fri 24 May 2024 13:00:34 +0000
ROA not before:           Fri 24 May 2024 13:00:34 +0000
ROA not after:            Thu 22 Aug 2024 13:00:34 +0000
asID:                     40138
IP address blocks:        198.72.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:b3:f0:1f:36:7d:77:66:97:8e:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
        Validity
            Not Before: May 24 13:00:34 2024 GMT
            Not After : Aug 22 13:00:34 2024 GMT
        Subject: CN=01bad474-83f0-4cc9-8a4d-9e285b11cadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:9b:29:b8:ae:47:ff:d6:9b:34:1a:02:bc:
                    49:e3:c1:d0:67:62:38:0d:89:0a:36:f3:35:25:39:
                    a3:5a:ac:ce:3c:6a:7f:c3:b9:1d:77:5f:ea:a9:d4:
                    ff:c4:7a:6d:93:d1:ca:90:1b:64:32:df:96:20:d5:
                    c3:1b:a6:1d:86:77:f5:b8:87:45:06:8d:7d:0b:ea:
                    1c:ae:e3:8b:b9:b9:af:49:d4:af:97:aa:8d:ef:01:
                    24:88:86:59:d4:77:20:dc:be:22:bb:25:58:4b:1f:
                    52:a0:2c:d1:52:c3:40:02:c2:19:92:60:35:1f:a4:
                    3d:00:5f:6c:32:a9:36:00:18:de:ce:7b:85:cc:07:
                    d5:59:99:a9:b5:5a:b1:f6:90:a5:d8:be:2a:1f:52:
                    3d:47:12:75:6e:6d:ad:53:29:f4:61:8c:a4:c3:90:
                    c6:80:0e:61:76:61:0d:10:89:b8:e8:3b:42:b1:54:
                    c1:69:8f:fb:b2:f2:65:79:4b:b1:0a:27:3f:1f:d9:
                    c5:6f:3a:09:0d:ac:09:c0:8a:0a:50:c9:4d:ef:1e:
                    7d:ee:d0:2a:8c:c0:f9:4b:a9:7a:52:dd:98:ef:14:
                    53:63:5c:47:cd:4b:3d:1f:fc:c4:d5:d6:a0:bc:06:
                    8c:15:5a:b3:b9:68:68:1b:d9:77:da:30:07:42:6e:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D7:33:3B:2A:6A:C4:02:84:0C:A3:2D:7D:89:69:FB:5D:24:89:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl

            X509v3 Authority Key Identifier:
                keyid:EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.72.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:4e:6c:90:b0:eb:56:ba:99:55:2c:c2:25:7e:ca:06:3d:
         f0:2c:be:45:a3:8b:27:36:42:e6:6e:d7:be:2e:ea:cc:d4:ed:
         1d:ca:f3:13:d7:4c:3e:22:27:73:d9:60:65:19:5d:a1:29:15:
         cf:2a:78:0f:07:1a:67:93:83:f5:1e:bd:e8:56:0d:a9:c7:8f:
         d2:16:20:c1:4b:99:a2:3d:da:80:87:4e:0d:b5:51:c3:59:1a:
         3a:3d:3f:23:7e:c7:2a:33:0a:58:d9:ce:9d:64:b6:95:4e:35:
         c6:7e:c4:e1:f4:48:5b:a8:ed:69:77:56:11:27:82:6a:8a:a6:
         10:31:20:99:a0:23:fe:4b:0a:3f:ff:00:6c:a4:2b:5c:ca:ed:
         e8:bb:29:06:f3:62:77:a0:79:27:44:8d:25:c5:28:98:4e:05:
         6d:1e:5b:82:11:c2:11:1b:35:66:36:a0:1f:5b:46:30:04:ac:
         d0:76:d0:42:90:a1:40:f9:64:97:c9:58:53:22:24:73:16:15:
         46:23:a6:74:29:d3:a7:72:a2:bd:24:1a:94:db:c0:f6:f1:96:
         5a:75:4d:46:3a:11:95:f8:ae:8e:84:7f:59:aa:68:d4:b9:92:
         a7:14:87:c5:2e:bd:f2:4e:fc:6d:63:f7:60:5b:87:b4:7b:a1:
         a5:c9:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:11 2024 by rpki-client on console-fra.rpki-client.org