Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa
File:                     0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa (raw, json)
Hash identifier:          A/iql8TxttVh2DPra6TXIedSURLpz8Nd9PkLn9QODvg=
Subject key identifier:   F6:1E:AB:C3:D9:54:E8:72:26:CB:07:18:5C:6B:B1:28:63:6F:21:F6
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455762CC84702421555E51AA00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     55246
IP address blocks:        162.255.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:cc:84:70:24:21:55:5e:51:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=a238169c-66bc-4004-a037-0082a6b7be7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:ea:a1:58:cc:ec:43:a9:3b:54:b9:db:76:
                    81:41:a5:9d:12:26:2c:25:60:0d:22:96:8c:3f:f2:
                    eb:94:e1:6c:a2:1d:d8:75:ab:1f:a9:75:ae:f7:f8:
                    6e:09:99:ce:bb:16:5e:f6:9c:35:e5:f5:89:06:c5:
                    c1:16:9f:e0:58:20:60:74:9a:56:a8:d2:85:d1:37:
                    aa:56:a5:8d:4b:4b:4f:aa:1b:0e:07:30:80:29:80:
                    22:b6:84:fc:c7:b7:63:58:74:26:30:a0:fc:a3:55:
                    b9:38:c6:c1:c7:66:27:9a:a9:3c:9e:2d:91:9d:6c:
                    cb:a3:08:e0:c8:73:be:dd:3c:18:ba:35:b5:e4:9a:
                    58:b7:d0:a1:6f:26:5f:88:eb:d2:78:8e:e9:a1:59:
                    a7:47:e7:b3:ea:57:71:b0:18:d3:1f:9f:8c:74:5f:
                    89:b4:55:88:49:fc:3c:9a:e5:be:75:65:48:a1:13:
                    3c:73:32:74:62:14:3e:2f:eb:9a:30:00:ba:e6:85:
                    2d:04:53:cb:c0:68:4c:a7:da:c0:48:ef:7f:9d:2b:
                    3d:5e:49:3b:49:09:ec:cf:a7:52:a9:28:7e:79:39:
                    6c:be:a7:c5:0a:3f:91:b4:05:a8:64:ff:ee:4d:1e:
                    86:f9:db:c0:c3:54:37:47:fd:2b:65:75:6f:da:a4:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1E:AB:C3:D9:54:E8:72:26:CB:07:18:5C:6B:B1:28:63:6F:21:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:f7:fb:e0:d3:5e:73:e6:cd:34:18:09:78:c5:40:d3:55:
         d4:a4:dd:51:e6:2c:b4:5b:03:e1:53:78:5d:f2:ac:bd:ef:52:
         fa:90:44:ac:51:ac:84:81:77:31:79:ba:e4:06:1f:92:45:c4:
         69:6f:3e:6c:32:64:90:13:18:53:9f:3c:af:52:88:24:46:e1:
         de:04:16:c0:c6:ee:fe:60:23:07:ed:4c:31:9c:3d:f0:f0:bb:
         de:3b:65:cb:32:95:d4:ae:fc:6a:bd:f3:2d:94:2d:b2:23:30:
         2a:2e:f2:07:d9:a0:ab:60:8f:eb:71:6e:10:22:f1:a8:a6:04:
         65:b2:9c:66:44:50:22:88:5c:3f:ec:74:c7:fb:70:6e:b5:50:
         c6:61:ed:75:fc:c3:87:a0:12:22:2e:b6:48:70:3d:96:9a:da:
         64:74:52:df:e6:37:fe:cc:0e:6c:da:2a:df:b4:6e:72:fe:5c:
         eb:a1:9b:6d:2d:0a:1a:cd:14:eb:95:2f:27:07:bd:13:d2:af:
         f6:a3:0a:36:f6:6f:49:84:74:00:43:97:e5:6f:e9:2f:9e:9c:
         88:ff:2e:92:af:93:91:7d:d3:d1:17:fe:ea:1a:78:7b:70:f3:
         16:46:6d:a6:0c:df:77:22:bc:f5:c4:38:40:41:2b:88:c3:1f:
         4e:9f:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:32:59 2024 by rpki-client on console-fra.rpki-client.org