Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa
File:                     8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa (raw, json)
Hash identifier:          Lm1ErHe9qIsDFLRaQTXA422Gkinpr+9kNIYJWf1PjcE=
Subject key identifier:   EA:D0:6B:75:66:DA:49:BF:50:CB:A1:87:48:96:EF:AB:16:55:6C:9C
Certificate issuer:       /CN=5dc12714-5247-41c5-b244-d0edceb32982
Certificate serial:       010D0C9F4328584548FBD7C1397736E47B02EF80
Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa
Signing time:             Thu 21 Mar 2024 21:11:42 +0000
ROA not before:           Thu 21 Mar 2024 21:11:42 +0000
ROA not after:            Wed 19 Jun 2024 21:11:42 +0000
asID:                     22856
IP address blocks:        209.237.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fb:d7:c1:39:77:36:e4:7b:02:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982
        Validity
            Not Before: Mar 21 21:11:42 2024 GMT
            Not After : Jun 19 21:11:42 2024 GMT
        Subject: CN=5323afca-9c90-4924-aa08-3d17da52450d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:d5:48:d8:3f:f9:9f:26:5e:37:c8:21:5d:
                    97:b1:aa:bf:6c:12:10:b4:2e:7e:4a:97:10:e7:fe:
                    d7:0c:13:ce:3a:e1:1b:41:92:9d:b0:5e:ca:2a:6d:
                    b7:ff:cf:0c:2b:25:3f:c3:c7:82:26:4b:7b:a7:fa:
                    05:24:18:4d:4d:83:ee:0b:14:cc:f3:0f:fc:6f:46:
                    c6:01:6e:47:6d:ce:d6:ce:d1:55:a9:c9:19:94:7e:
                    1e:94:af:d5:a5:54:8b:bc:9c:38:a1:10:a4:5a:cc:
                    92:7f:81:3e:a4:f0:3a:76:55:92:01:a1:03:3e:6c:
                    ba:bd:09:cf:dc:db:4b:ef:83:74:6f:55:fe:a3:b2:
                    f9:19:35:0e:9f:9a:84:49:b3:54:0e:c7:13:35:5d:
                    7d:76:72:b0:7a:ce:7b:7e:e0:25:d5:fd:ab:62:9c:
                    93:3e:31:73:98:07:15:85:a2:c2:dd:65:99:0d:c0:
                    b9:45:de:39:76:37:77:00:35:02:25:33:de:cd:f0:
                    c7:75:2f:55:fd:92:18:57:06:9f:56:f4:5d:43:3c:
                    9e:ab:c7:1e:1a:e8:53:06:cd:d7:a7:f2:5c:6e:c5:
                    30:92:c0:5a:85:dd:e8:12:11:9c:5d:4b:ab:fd:41:
                    26:6c:ca:86:1b:fc:cf:19:44:d7:c5:c5:1b:69:22:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D0:6B:75:66:DA:49:BF:50:CB:A1:87:48:96:EF:AB:16:55:6C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:03:c0:d8:d6:83:06:cc:52:e2:38:6a:c5:c4:f8:88:98:
         b8:f4:d9:27:63:9e:f9:0c:5d:6f:5e:dd:00:0d:ed:8b:70:47:
         b9:c7:a4:91:fe:41:73:5e:42:2c:3c:7c:07:ac:4d:1b:21:e1:
         69:57:06:df:b8:8e:d1:85:cc:d4:97:9e:1e:fa:b9:0f:4c:f1:
         63:92:8b:19:f4:12:e9:e2:fa:59:a2:50:5a:50:db:c0:fb:3e:
         c0:93:48:4f:82:b2:4e:18:fa:83:63:cc:6d:81:f9:cd:c2:4f:
         70:46:f3:b4:4c:fc:35:31:e9:ab:67:37:59:9c:c6:b1:0c:0a:
         b7:bf:f3:af:d2:1d:a6:76:8e:e2:1f:26:3f:3a:c0:50:e9:bd:
         61:3a:32:33:fe:ad:4c:5e:d2:0a:25:ff:47:bb:ca:53:ea:23:
         20:e6:ac:ba:5f:3f:ae:0e:55:c5:44:f0:b6:9d:37:06:16:4a:
         b8:1b:5d:0b:fa:bd:85:64:2e:2c:a4:e3:03:c8:2e:be:9b:55:
         2f:67:60:ef:27:c5:cc:72:da:1c:eb:59:32:49:c7:c5:9b:81:
         fe:7d:c5:ed:75:dd:7b:39:33:45:ae:9b:18:e9:90:a7:f8:c9:
         f4:5e:2f:b2:f8:9d:da:c5:f1:15:ea:41:ad:57:8f:b8:1b:f7:
         42:66:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:50:13 2024 by rpki-client on console-ams.rpki-client.org