Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa
File:                     655bf99e-9879-33d3-ab34-9c30551ed533.roa (raw, json)
Hash identifier:          utTTu4XjzU5P0slN2+JqQ0fPog7gFg0vYs4wPm2oFwc=
Subject key identifier:   AA:D2:3C:84:CC:1E:7A:7B:87:95:66:66:05:72:29:EE:B3:F8:8B:C3
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F43285845174AD70A9698B9F45C504C20
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     131477
IP address blocks:        198.176.48.0/22 maxlen: 24
                          198.176.52.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:d7:0a:96:98:b9:f4:5c:50:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=e4a8c23b-a07d-45cd-8525-46a743ce95e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:ab:34:18:d8:77:1f:d5:35:10:7b:ff:69:
                    52:e0:31:ca:7f:b2:e2:20:01:c2:dd:28:f4:72:2d:
                    4c:2c:bb:51:e7:44:ef:c7:0e:6a:d3:90:80:25:3a:
                    44:1c:f7:ac:c6:fc:13:f2:66:5b:20:f9:b1:08:80:
                    27:00:52:f9:2c:73:5a:bb:ec:df:59:75:c3:36:cc:
                    be:14:bd:53:55:ce:df:41:71:94:8c:5a:75:94:fa:
                    6b:77:7a:eb:8f:fe:7e:76:bb:06:64:09:f8:9c:a5:
                    0e:a2:7a:11:e9:16:75:35:97:e9:f4:ec:dd:55:a5:
                    f1:c7:33:6d:e1:81:61:e3:b6:86:08:f0:5b:2e:55:
                    a1:95:ca:34:bb:34:f9:d4:5c:80:47:e9:fb:09:17:
                    21:b2:65:2e:21:fe:14:1c:a0:32:94:36:e7:e2:cd:
                    e4:92:26:5e:d3:91:79:f0:42:8b:7d:da:86:a2:13:
                    ab:27:cf:96:c7:67:25:c5:ed:0f:a6:70:0b:87:63:
                    68:a7:cc:a7:a3:1d:48:26:61:3e:e7:86:9d:68:d1:
                    a9:37:e0:b4:8e:13:b4:00:38:02:e3:ef:a3:bd:c5:
                    54:de:50:52:f1:46:68:f5:bf:ca:e1:5a:d6:28:01:
                    0c:8f:b0:5d:df:bb:ef:b9:48:67:de:a7:59:d3:e5:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D2:3C:84:CC:1E:7A:7B:87:95:66:66:05:72:29:EE:B3:F8:8B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.48.0-198.176.53.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:c8:e9:3e:2d:c4:1c:0e:cf:3a:a7:9d:1b:36:da:e3:4d:
         cc:c8:1d:6e:15:f3:fb:f5:14:d0:96:fd:90:fb:20:18:3b:0c:
         92:93:64:fb:6b:11:a7:45:31:e4:b8:b6:f6:f8:e2:6c:aa:c2:
         c8:ab:bf:97:f3:43:50:99:60:ba:f0:5b:3f:db:c9:02:83:e8:
         ca:42:32:86:e6:d0:06:e0:03:03:08:da:41:eb:57:73:42:b0:
         1c:33:5d:d2:95:b5:eb:ba:39:9d:c1:7b:bc:12:19:b4:2f:77:
         ef:54:e3:34:2c:0a:53:d3:f7:ef:2f:32:9b:27:bb:27:e0:5c:
         92:0b:34:6d:96:09:d0:d7:ad:27:52:b5:24:58:81:03:20:77:
         57:dc:da:10:8f:2a:c6:e6:17:42:1c:b0:dc:7d:56:9f:ef:17:
         bd:50:ed:a5:38:ab:25:35:fa:ab:c0:fb:52:65:21:40:b1:77:
         8b:95:06:9e:0f:58:7a:33:15:14:c8:eb:84:91:53:d0:4a:91:
         df:cd:b7:de:cc:5e:1d:f9:59:b5:72:e6:0a:50:d4:df:db:31:
         9e:6a:c0:3c:09:47:aa:6b:cf:10:5b:be:18:2b:68:fa:2e:e9:
         7f:31:5e:c1:c9:58:a6:9a:a9:5a:cf:3b:48:59:e7:66:61:d5:
         b5:5d:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:32:57 2024 by rpki-client on console-fra.rpki-client.org