Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/36b05852-bb4a-32af-81b2-711fb983c0dd.roa
File:                     36b05852-bb4a-32af-81b2-711fb983c0dd.roa (raw, json)
Hash identifier:          uYiFMTqeUMgnY+a4ogGi5tqrB+sS7T7PvFKJYyxHwIw=
Subject key identifier:   8E:92:E0:0C:08:90:9D:C5:F1:F2:73:01:38:42:F8:35:7D:89:0A:5B
Certificate issuer:       /CN=fc8b3016-10fe-4f4c-b37c-cf3409c776e2
Certificate serial:       010D0C9F43285845ADEE0DDAC953E1698C2BF500
Authority key identifier: CE:33:0F:54:4C:F9:ED:2F:E2:B1:73:7C:73:B7:2E:2D:0C:1C:CE:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/36b05852-bb4a-32af-81b2-711fb983c0dd.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     398921
IP address blocks:        134.195.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:0d:da:c9:53:e1:69:8c:2b:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc8b3016-10fe-4f4c-b37c-cf3409c776e2
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=decb4587-898e-4dad-942d-814846a9b5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:94:18:de:6e:40:8f:07:37:6f:42:d2:79:
                    64:f8:46:50:19:1b:a7:f0:55:39:56:1e:46:fd:f0:
                    1c:22:b5:e7:01:cf:6d:75:f2:7e:72:d0:76:0d:96:
                    2f:f6:ac:d0:8e:ff:dc:5a:83:ea:8d:64:39:98:0e:
                    2e:30:80:85:ba:2c:bf:c4:57:80:5d:c9:f3:65:b6:
                    07:41:f2:36:54:1c:e7:02:22:70:79:e8:fb:2c:56:
                    36:9d:ed:f4:11:ef:29:74:23:df:e5:a7:cd:dd:f4:
                    05:36:6d:98:24:3d:93:63:aa:59:b4:e9:3d:5b:d6:
                    1c:ab:48:7e:89:65:36:89:a5:c2:c2:cb:31:81:50:
                    61:1e:c1:65:e6:5e:c0:33:52:11:86:ad:89:69:9a:
                    60:5c:47:61:c1:6b:a1:57:3d:0d:13:e4:d7:4c:dd:
                    c4:94:04:96:65:7c:29:6d:0f:89:26:ee:7d:b3:3e:
                    60:3f:ad:3b:94:ec:84:9c:be:30:b7:1c:57:33:2c:
                    dc:0e:7e:db:0b:9e:0d:3f:2a:cf:4b:1a:46:51:48:
                    37:b8:05:c9:e0:be:f6:d7:6f:92:83:fe:ed:b6:1b:
                    95:30:47:24:3c:84:21:e6:fd:7b:b7:ea:9c:d3:b4:
                    e3:db:99:9b:37:6c:1a:55:d5:c3:2a:de:dd:b1:19:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:92:E0:0C:08:90:9D:C5:F1:F2:73:01:38:42:F8:35:7D:89:0A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/36b05852-bb4a-32af-81b2-711fb983c0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.crl

            X509v3 Authority Key Identifier:
                keyid:CE:33:0F:54:4C:F9:ED:2F:E2:B1:73:7C:73:B7:2E:2D:0C:1C:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:c5:82:23:4b:60:79:bf:34:3e:04:b1:83:dc:fa:e2:ea:
         27:92:cd:d2:43:34:df:42:6e:07:6a:1b:e8:32:4d:00:6c:88:
         d4:68:98:5f:c5:17:af:f4:88:b6:25:d6:e1:ea:47:22:62:4b:
         05:46:07:ab:68:a6:3a:5a:5a:f5:2a:87:e8:9d:a3:1b:d1:20:
         3f:62:a3:b8:e4:d7:a2:fb:d0:77:02:81:7c:8d:eb:ee:cc:e7:
         23:d8:cb:a6:69:be:04:d9:1d:56:07:22:e0:aa:ab:9f:b3:5c:
         cf:07:49:8d:6c:38:96:ff:6d:ba:0b:d3:58:a6:f3:9e:fe:58:
         fc:e2:a2:ae:e5:d1:f8:74:4e:15:59:22:7c:d8:6f:f5:4c:ee:
         b9:6f:21:1e:4e:b9:49:39:46:5d:b0:a4:2c:ce:98:14:ab:df:
         e5:10:2a:54:62:5b:39:84:61:39:ad:f1:e8:4f:39:98:fd:bb:
         19:9a:09:36:d9:d5:f4:e4:e4:ff:fb:8e:68:f5:55:c8:3d:d4:
         3a:af:91:83:ba:77:8a:fb:79:9d:46:4a:35:16:17:d9:b3:fc:
         91:af:52:2c:80:e2:af:3b:27:60:8a:c6:40:a8:67:67:da:81:
         03:57:70:8c:33:de:77:7c:95:9e:cc:46:f9:cc:c9:a4:0e:be:
         c8:23:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:35:49 2024 by rpki-client on console-fra.rpki-client.org