Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/bd125188-00ef-3eac-8e7a-897f56a0fb91.roa
File:                     bd125188-00ef-3eac-8e7a-897f56a0fb91.roa (raw, json)
Hash identifier:          SkK1d/tagDus1TAM/S6M5sm+u62F9XhAdweJ9xmU66U=
Subject key identifier:   9A:99:7A:B4:3B:AD:4E:EA:C2:B4:59:F0:42:7B:7D:DA:E9:1C:90:2D
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F4328584578E30320BA17724FCC10D600
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/bd125188-00ef-3eac-8e7a-897f56a0fb91.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     396982
IP address blocks:        149.117.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e3:03:20:ba:17:72:4f:cc:10:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=4b4ea16a-c469-4560-9937-8d2b3efc4abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:bf:42:ad:24:19:e8:3d:1b:93:86:32:60:
                    ba:1d:a6:d1:08:95:0c:a2:c8:5c:90:66:8a:91:42:
                    48:f9:cf:1b:fc:2b:8c:d8:0c:50:59:46:6d:f3:ce:
                    06:98:83:db:49:f5:aa:4f:39:b8:63:f2:d6:26:87:
                    20:32:40:03:47:ba:60:77:b3:28:8a:2b:e9:97:0b:
                    f6:2e:17:11:78:8d:13:ec:45:e2:9c:d5:e4:93:0e:
                    63:2e:9c:b2:8b:6e:e1:88:f3:ea:b1:06:39:7f:f8:
                    99:f1:46:de:b0:d1:19:62:33:14:60:e8:3c:de:58:
                    99:ca:7d:9f:61:72:32:69:89:4a:ea:4c:44:91:da:
                    bf:e4:3b:1d:8f:32:fb:18:48:06:d3:fd:80:ef:28:
                    5f:06:91:2a:32:4e:d9:1d:a7:39:51:13:f6:98:d5:
                    a9:d7:40:52:12:7a:c5:37:b9:c3:64:e1:0c:36:73:
                    59:32:63:2f:0c:bf:f8:42:50:5c:3c:1a:9c:a0:47:
                    60:39:ed:f1:eb:18:c4:23:18:1d:14:9c:f9:e3:ae:
                    7e:ff:86:d0:a8:1a:07:6d:65:63:6a:57:a3:51:7e:
                    f8:3b:09:e8:f0:48:fa:8e:6d:58:a4:d2:74:51:e3:
                    98:5a:0d:92:d7:83:aa:10:1a:f4:dd:be:2a:6f:c0:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:99:7A:B4:3B:AD:4E:EA:C2:B4:59:F0:42:7B:7D:DA:E9:1C:90:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/bd125188-00ef-3eac-8e7a-897f56a0fb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.117.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:75:b3:5d:fa:b9:b9:f0:ea:3e:c8:6c:d6:47:8a:6b:89:b4:
         19:9b:14:57:e0:64:0e:69:b1:c8:8d:58:7c:6d:ab:18:d4:f2:
         f1:3a:52:d1:78:cd:26:9f:9d:98:2d:4a:2b:b1:ff:ea:74:44:
         5c:5a:f9:31:de:ed:cf:d8:dd:ff:58:16:a5:35:e1:28:18:83:
         cb:3e:09:54:5d:2d:46:c0:a3:18:e2:ec:d9:b8:22:03:dc:eb:
         e1:36:9c:78:b2:76:50:92:71:8d:16:82:d3:17:92:ae:80:63:
         d9:f5:18:bf:e4:c1:f5:09:95:f5:d8:cc:1e:1f:49:03:96:ad:
         72:cf:bc:a9:f2:ca:21:b9:4d:08:94:44:3a:5b:fa:e3:06:a6:
         b1:64:94:3c:49:a3:84:3f:9e:1a:03:06:46:2a:f9:c3:f3:05:
         42:c4:94:a7:2a:82:21:c2:86:6e:c5:29:c9:30:8d:11:9f:60:
         d2:33:51:ab:a0:4f:59:56:ba:dd:89:b0:5a:a9:23:35:03:42:
         72:27:0e:16:88:52:21:b0:7b:a5:a6:59:e5:f1:6f:2f:4c:04:
         de:d4:83:ae:a5:d3:38:6b:b9:cd:c8:42:2a:43:0d:88:1d:fe:
         e9:1e:01:c6:49:8b:1c:d5:56:fd:7b:9a:08:2f:0a:c9:08:ab:
         70:f5:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:12:27 2024 by rpki-client on console-fra.rpki-client.org