Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa
File:                     a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa (raw, json)
Hash identifier:          Sz7WeThZBFaA1iObqc6l9AbKaycwkZgwiCRBHSo+OfI=
Subject key identifier:   88:E7:04:A9:B7:86:DE:95:CA:D4:A5:69:89:95:71:94:7E:7E:E1:B4
Certificate issuer:       /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
Certificate serial:       010D0C9F432858458C6DC787072437B9E59E7E00
Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     29764
IP address blocks:        192.48.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:c7:87:07:24:37:b9:e5:9e:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=f95eb4bb-04b2-4716-9588-cc2da75e9e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:22:0a:b4:31:9b:63:e2:4b:a7:1f:19:da:
                    19:07:bb:41:fb:32:7a:3f:9f:29:92:30:19:9f:fe:
                    df:b7:5f:05:6b:81:5e:af:cf:f4:ab:a2:06:67:bf:
                    6d:67:fa:78:24:ef:bb:e7:c5:72:c1:ef:22:82:b0:
                    1d:b9:67:f7:fc:20:ad:cb:cb:54:e6:c5:45:a9:ba:
                    46:20:24:02:cd:f1:84:17:a4:8f:0e:f5:4c:f1:0a:
                    50:68:e0:da:46:fb:7a:9a:02:02:0f:88:dc:d3:86:
                    8d:d3:88:b9:d1:c7:c6:5f:0b:e1:bf:0a:8a:26:e1:
                    a9:2d:88:a5:ee:e1:9e:a1:4d:b3:36:3b:87:a4:e6:
                    90:71:37:ee:1e:2f:64:16:75:8d:d9:db:93:f4:a5:
                    16:71:ec:35:ed:b4:4a:17:43:ad:e1:c7:e6:6e:98:
                    b4:76:f8:5d:9e:38:23:38:8d:6a:0c:42:3e:54:4f:
                    0e:2e:80:48:ae:0a:1c:f9:5d:86:4f:12:2c:96:94:
                    5e:3d:08:bc:34:ef:30:52:67:cc:c1:20:1e:32:73:
                    e6:31:36:66:c8:f6:91:1b:9e:e3:80:74:fc:a4:4c:
                    11:ff:3c:32:83:00:8c:fd:b0:9e:e0:4a:99:91:c2:
                    13:5b:b2:b6:bc:93:33:f4:74:7c:8d:c7:bd:eb:c9:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:04:A9:B7:86:DE:95:CA:D4:A5:69:89:95:71:94:7E:7E:E1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl

            X509v3 Authority Key Identifier:
                keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:54:7a:dd:1f:9b:e5:22:a6:c5:7a:7f:9b:64:bf:c2:a2:94:
         3c:41:8e:5f:0d:43:41:aa:a1:55:00:49:b5:d1:28:33:d4:a8:
         6a:8a:7e:81:bd:f3:fc:f3:10:c5:93:57:fd:f8:e0:be:1f:15:
         c3:8b:6b:7d:0f:29:ce:b3:0a:ad:31:0c:17:2c:a0:4e:46:04:
         e5:ca:d7:ec:cb:eb:5a:16:96:c2:4b:c7:35:7a:d4:d6:59:23:
         1b:50:50:11:4d:ee:97:2b:25:05:5d:9b:c7:82:e7:48:df:46:
         06:f9:3d:45:e8:31:91:3d:9d:13:74:04:85:59:f2:4f:45:21:
         35:c9:ed:aa:14:52:39:44:f0:87:62:6e:8c:ae:a1:1c:20:f1:
         da:08:dd:11:f3:14:6f:00:c9:0a:92:b8:e1:98:1d:9f:9e:ee:
         c0:8d:9d:97:16:2c:7d:89:46:db:71:71:ac:54:f1:8c:65:95:
         b3:46:84:ef:1c:45:2a:b1:ac:6d:ec:8f:60:c5:7e:af:73:1a:
         74:77:92:4c:25:69:75:ae:20:54:02:13:58:71:65:7c:ef:eb:
         1b:e4:a4:aa:13:26:3d:ff:f9:dd:89:cb:a0:20:e5:ed:7f:fd:
         b0:6c:74:2b:d0:68:ef:12:09:51:89:10:53:b7:f6:ee:17:80:
         b6:11:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:09:42 2024 by rpki-client on console-ams.rpki-client.org