Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa
File:                     2863cd8d-e932-373f-bff5-503c406d81fa.roa (raw, json)
Hash identifier:          d6NHMUezbY+mdGrEfhKL3Ti+NNZPPmfBWhv/I0FpxEw=
Subject key identifier:   DD:2B:78:95:EB:E9:0E:BB:4A:8A:C7:62:58:32:A3:55:BA:0C:03:E3
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F432858455CF82D699A34708E4E2FA680
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     46455
IP address blocks:        199.71.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2d:69:9a:34:70:8e:4e:2f:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=20fd8305-d569-4b1b-8426-8db8b188ce0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bb:92:ff:73:3d:11:9b:55:0b:c5:d6:39:02:
                    61:d0:d8:d4:41:3d:c7:92:4d:d5:71:c8:4f:96:57:
                    2f:f7:3e:c5:4d:59:88:fb:a3:a2:c0:e2:34:0d:96:
                    ce:4d:b1:e6:be:46:c3:0f:53:1e:0d:48:9f:11:c1:
                    22:00:07:f1:73:54:8a:3e:e1:5a:14:79:09:e8:d0:
                    08:72:38:be:48:24:b4:f8:31:3e:3b:b3:5a:68:ae:
                    24:d4:86:e6:32:f9:b9:b2:ed:ee:51:43:cf:a1:90:
                    ac:05:47:76:47:c3:71:6b:69:84:bb:1f:ac:43:ea:
                    8c:cd:94:1c:10:e2:71:2c:16:fe:00:a7:57:d9:3b:
                    64:cb:ec:82:f3:b2:c0:96:9e:93:31:31:d6:8a:e1:
                    6b:c6:ba:67:7f:ee:bb:47:d0:77:60:1e:6b:db:de:
                    c6:b9:8b:18:ab:83:e7:32:73:c6:6b:b8:7b:6f:c3:
                    a9:c6:1c:95:f5:88:57:a3:21:54:4f:1e:12:e8:37:
                    61:97:11:76:b6:b7:b8:ae:05:ec:92:e6:85:7d:94:
                    b7:40:77:fd:14:ef:7c:ae:3c:ef:a4:1d:bc:b6:da:
                    59:29:29:2f:04:f6:db:69:32:ec:46:be:10:b3:58:
                    ca:a6:ae:f2:8c:1f:0f:c4:1c:62:f6:26:c9:4a:82:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2B:78:95:EB:E9:0E:BB:4A:8A:C7:62:58:32:A3:55:BA:0C:03:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:bf:d6:0e:12:89:8a:d6:5e:2f:0e:17:e2:9f:be:bd:19:
         3d:1e:57:3f:b6:ea:15:bf:bb:32:f0:72:a8:96:98:22:8f:7f:
         f5:c0:d8:da:87:24:14:f4:2d:a3:64:dc:b9:47:8b:1a:28:b8:
         3d:58:11:35:d2:1b:06:5c:dc:c7:70:09:e4:5d:d7:80:40:32:
         e6:89:5e:7f:a8:ef:73:0e:ce:14:33:f4:62:a7:57:22:56:d4:
         35:47:e1:63:85:14:5f:f8:b6:8e:63:97:dd:cc:9f:f2:5b:60:
         3f:ce:89:fc:7a:45:f4:3f:ab:91:c8:c9:1f:c5:12:c2:76:a1:
         10:87:9f:c2:6a:05:98:e4:a8:26:df:5a:b4:7e:a0:5d:dd:71:
         51:bb:93:cc:6e:7a:72:dc:cf:72:10:70:45:b2:92:99:42:90:
         fd:dd:c4:26:25:19:80:f7:3e:70:8d:8f:83:35:41:bc:76:bf:
         79:65:5f:aa:6f:d7:90:d8:1a:aa:67:57:a3:40:47:b8:a5:48:
         5a:bf:c6:8a:fd:09:2f:f8:1f:c0:cd:dc:5f:9c:72:74:29:e3:
         06:13:ef:1f:bb:a1:fc:67:f8:c3:f3:83:24:9c:f5:31:8c:a2:
         b5:67:9c:aa:1b:5f:0c:a9:af:26:e3:b7:6e:cb:51:35:52:4e:
         bd:a2:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:14 2024 by rpki-client on console-ams.rpki-client.org