Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa
File:                     1ec803cb-f96d-3d90-b088-6d5713ba0049.roa (raw, json)
Hash identifier:          9Dfkw+U27X74JsrS9yUbNNabnFUYygTCrf/ttcDTAVo=
Subject key identifier:   BD:05:2E:59:6F:46:73:4A:DF:EC:AF:04:9A:F4:78:89:95:23:E7:37
Certificate issuer:       /CN=76d8390e-aab4-4081-a682-eebfe9ed3dde
Certificate serial:       010D0C9F43285845628D8D2B07C063F830A09180
Authority key identifier: 85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        199.60.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8d:2b:07:c0:63:f8:30:a0:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d8390e-aab4-4081-a682-eebfe9ed3dde
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=c5e1c1ac-6f48-4147-aa16-9ae4a06d3e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:f4:54:0a:8d:dc:fb:72:34:85:b5:e6:b9:
                    3d:20:51:ae:27:b3:5e:2b:32:e4:fd:30:6f:ae:dd:
                    91:b5:0e:f3:66:ab:ea:26:7e:56:83:a5:c4:d7:6d:
                    fe:42:b8:1b:7f:1b:99:ad:b1:33:b5:ff:b0:dc:a4:
                    2a:c3:db:b8:b7:5f:8d:9e:a9:ff:18:d5:87:47:94:
                    65:52:f3:11:c8:89:28:8a:db:d5:68:c9:f7:be:0b:
                    d3:35:2d:fb:be:ce:09:e6:5e:3b:ff:63:31:96:ab:
                    62:12:8c:8c:55:59:6d:e5:aa:3a:e1:cb:3e:35:aa:
                    27:2a:e2:1d:cb:81:eb:72:29:3d:32:eb:6e:96:f2:
                    03:da:69:97:96:03:2a:39:ca:76:86:dd:98:6d:ac:
                    a5:cf:f9:b2:b4:46:a6:66:b9:fc:27:11:e8:7a:69:
                    fd:fc:6e:81:e9:c3:b8:02:80:4e:e4:92:e6:57:eb:
                    8a:40:c4:62:c8:d1:f1:f7:26:45:25:b2:41:24:39:
                    be:f3:ea:03:90:1a:05:fa:38:74:7f:dc:cb:7e:e0:
                    5f:5e:df:32:2d:50:99:23:65:75:30:95:15:f8:f9:
                    e1:5d:9d:a1:d5:0b:cd:17:1e:01:c1:0b:a2:d5:0c:
                    03:14:24:74:85:b1:22:c4:64:26:6b:4d:30:85:b6:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:05:2E:59:6F:46:73:4A:DF:EC:AF:04:9A:F4:78:89:95:23:E7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl

            X509v3 Authority Key Identifier:
                keyid:85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:97:f6:09:f1:3c:c3:d0:29:9a:f4:6a:60:34:ec:89:e7:11:
         14:47:6f:98:2c:a6:41:01:0c:80:20:b7:83:05:d1:72:a6:0f:
         c4:b5:ac:81:fa:3e:1a:5b:db:0b:02:75:d2:25:6d:45:3f:bf:
         29:e5:74:9b:e4:33:38:2d:3e:27:6c:c1:31:57:58:ee:b1:73:
         ae:7a:32:32:0b:4a:3e:85:9e:b9:af:a5:56:62:32:3a:f2:17:
         4e:7f:0e:7e:fd:41:6f:46:5d:30:21:ad:0f:a9:1a:0f:69:9d:
         9b:15:47:fd:cc:22:40:21:d8:e7:31:51:a0:e2:22:2c:b8:f5:
         aa:d2:df:25:e1:26:6c:c5:ba:96:53:4d:9a:37:04:a3:61:45:
         4b:a4:7f:5b:9d:2e:ff:2a:a3:3c:f1:c4:ca:76:8f:f5:f6:09:
         2b:62:0e:9e:93:6a:26:ed:fb:7f:b5:3f:cd:7e:fd:d3:cf:55:
         48:69:e2:ff:d7:e8:2b:dd:0b:6a:65:78:32:01:2b:7a:4c:f1:
         3a:bd:54:c5:74:3b:cb:f4:59:4a:29:47:ce:ac:c7:c4:51:58:
         41:ef:ef:d6:c8:7c:a9:a0:83:ab:af:97:95:02:b1:d3:a7:d7:
         5b:91:e9:89:96:8e:4f:1e:18:1d:5e:0d:b5:28:17:8e:ae:e9:
         cb:f5:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:33:54 2024 by rpki-client on console-fra.rpki-client.org