Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/613e7045-c47e-3beb-a285-01f6a9043a46.roa
File:                     613e7045-c47e-3beb-a285-01f6a9043a46.roa (raw, json)
Hash identifier:          aX0CRUPt1U0DRGT/uHOoUcu+5l0I78ICsMWyNzAk1uU=
Subject key identifier:   89:CC:B7:9E:7D:E6:96:EF:66:8A:89:70:58:96:04:1C:07:07:A5:D1
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F432858460CD94854E45391ECA58C3800
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/613e7045-c47e-3beb-a285-01f6a9043a46.roa
Signing time:             Fri 31 May 2024 01:00:24 +0000
ROA not before:           Fri 31 May 2024 01:00:24 +0000
ROA not after:            Thu 29 Aug 2024 01:00:24 +0000
asID:                     397735
IP address blocks:        198.200.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0c:d9:48:54:e4:53:91:ec:a5:8c:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: May 31 01:00:24 2024 GMT
            Not After : Aug 29 01:00:24 2024 GMT
        Subject: CN=cad612ca-1c66-48ac-b537-1be34bcf0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:21:7f:69:48:46:53:d6:b8:df:5e:4d:41:
                    16:b5:7c:8d:62:d4:ff:cb:a0:7b:ca:08:97:93:a4:
                    0c:87:c8:5c:0e:4d:26:ae:7a:24:66:07:0d:ca:1b:
                    b0:c4:98:e2:08:85:ae:01:f5:78:e8:9a:09:45:ed:
                    c9:2d:ef:c5:46:87:cd:dd:1c:f2:c2:f1:8b:09:30:
                    cc:2c:8d:28:e9:16:c1:22:80:5c:53:12:e4:5b:23:
                    f0:40:17:d1:1c:4c:46:37:9c:40:0c:ee:a6:94:47:
                    95:b0:a2:3e:82:94:32:1a:c1:6a:3c:dd:eb:bb:b4:
                    75:a4:91:23:51:ff:5a:27:3e:85:64:57:86:be:dd:
                    18:ac:41:0a:3e:a3:50:f8:da:00:f8:86:15:89:58:
                    a6:f3:0d:84:31:43:1d:3d:19:16:31:ec:0c:73:0a:
                    08:37:fb:f3:a1:e3:8f:ba:c8:1e:94:4b:ec:3e:b9:
                    54:1f:2f:31:4f:38:bc:43:68:4b:7b:e9:c3:4a:f6:
                    de:f5:75:7a:12:b3:5a:c6:57:5e:9d:e4:1d:83:30:
                    7a:09:72:20:41:16:e8:19:f8:43:4a:1a:8f:c2:e1:
                    c3:c1:36:7d:68:fb:ef:44:86:c4:64:5f:7a:fa:91:
                    c0:4d:f1:a4:4c:6b:d1:33:45:4f:27:48:f6:5c:60:
                    1c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CC:B7:9E:7D:E6:96:EF:66:8A:89:70:58:96:04:1C:07:07:A5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/613e7045-c47e-3beb-a285-01f6a9043a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:06:8d:8f:19:50:db:28:a8:06:58:82:4b:9e:65:22:e5:b9:
         6b:c6:fd:7c:40:87:af:21:8b:09:2c:21:9f:24:14:42:54:87:
         9e:78:99:fd:7e:08:65:4a:76:ac:01:a7:b8:0d:b8:c4:9b:18:
         87:4c:93:cf:c2:97:4f:c2:52:8b:c3:96:40:0b:36:19:6d:da:
         e2:80:59:02:ba:b8:61:2e:3c:52:5d:d2:71:41:1f:ad:23:85:
         74:16:19:38:50:92:ea:40:dc:41:20:9f:1e:be:52:5d:e4:4c:
         94:14:a0:e1:aa:2b:c6:00:f0:9f:88:4c:f9:41:b9:f7:b1:de:
         2d:8d:d7:f2:7c:14:06:3d:2a:01:63:da:8e:25:df:50:af:e8:
         a3:c6:7a:e2:e9:84:fa:a9:bf:af:6c:83:c8:dc:69:6d:fb:6f:
         4c:5a:e0:fc:5d:48:32:2b:2e:e8:a7:d1:72:9d:4d:35:69:7a:
         03:b9:4b:5f:6b:d0:ad:86:ac:71:1a:09:30:23:2f:3b:b3:fb:
         b5:bc:71:cd:fb:d7:9e:73:0b:7d:e9:2a:06:42:c2:d2:41:7a:
         32:a3:fd:28:cd:8e:a5:00:1f:5f:54:84:0e:3b:f4:ff:cf:da:
         24:73:8b:23:1e:77:fd:c7:4c:a3:f7:a4:3e:cf:b1:da:bf:91:
         50:7c:b9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:23:45 2024 by rpki-client on console-fra.rpki-client.org