Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
File:                     2f0b7f49-a633-3566-aa0c-7f199a78611a.roa (raw, json)
Hash identifier:          4ENHINmzxzl9vzZtzjZX3Hj+18qQkMyiTylQZaKDrMU=
Subject key identifier:   04:BA:EB:86:CE:9A:BB:FF:BA:C3:C8:C0:5D:E7:12:37:92:21:28:06
Certificate issuer:       /CN=9c841696-0857-4d7c-8db5-21941a77450c
Certificate serial:       010D0C9F43285846EC30049B99C8D2E09D3DE280
Authority key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
Signing time:             Mon 19 Aug 2024 01:00:31 +0000
ROA not before:           Mon 19 Aug 2024 01:00:31 +0000
ROA not after:            Sun 17 Nov 2024 02:00:31 +0000
asID:                     237
IP address blocks:        192.138.137.0/24 maxlen: 24
                          192.160.192.0/24 maxlen: 24
                          192.160.204.0/24 maxlen: 24
                          192.245.252.0/24 maxlen: 24
                          192.245.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ec:30:04:9b:99:c8:d2:e0:9d:3d:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c841696-0857-4d7c-8db5-21941a77450c
        Validity
            Not Before: Aug 19 01:00:31 2024 GMT
            Not After : Nov 17 02:00:31 2024 GMT
        Subject: CN=a945bf57-2284-4713-a726-909c7b4fe8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:4d:e8:b3:e2:43:06:3a:9b:68:41:d1:a8:
                    21:8d:26:d4:df:80:c4:ca:a4:bd:ed:aa:e7:90:b4:
                    43:33:6a:c9:d6:71:00:74:0b:1e:56:f7:8c:62:d9:
                    c0:38:03:9b:2e:0f:73:8a:1f:93:fc:0f:f3:18:09:
                    8a:cd:39:d6:78:1e:04:b5:16:50:a6:01:00:01:47:
                    52:e3:a5:33:74:56:dc:0d:aa:ef:16:a8:da:86:17:
                    ba:00:18:ef:b2:f0:cb:ad:c6:25:fe:3a:25:49:5e:
                    a7:9e:fc:6b:dc:0e:03:61:07:13:16:9f:6f:eb:cc:
                    58:0c:b3:57:08:0f:f2:bb:5b:20:e5:d9:63:0f:89:
                    ed:cf:5c:f3:d4:3c:11:5f:4e:a0:27:22:16:17:df:
                    4a:05:9a:e7:b5:d6:c7:31:ce:3c:6a:62:88:a1:ae:
                    d6:d5:54:c7:89:6a:b2:cf:64:5a:e3:39:3d:ee:b8:
                    9a:8b:93:6d:7d:82:3d:0d:21:16:c0:2f:83:b3:52:
                    ea:95:e8:31:c8:51:aa:be:00:72:62:af:f0:28:d9:
                    46:53:88:3a:d4:46:e0:21:80:c4:d8:de:a8:07:dd:
                    77:7b:f4:63:6e:fa:dc:66:f7:02:74:12:3f:b8:c1:
                    63:08:fa:c6:f9:3b:1d:27:f8:d0:3f:ef:3e:0f:ba:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BA:EB:86:CE:9A:BB:FF:BA:C3:C8:C0:5D:E7:12:37:92:21:28:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl

            X509v3 Authority Key Identifier:
                keyid:62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.137.0/24
                  192.160.192.0/24
                  192.160.204.0/24
                  192.245.252.0/24
                  192.245.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8c:f3:44:4a:b3:f5:b9:ef:18:f5:7a:fc:65:dc:e3:24:0e:
         96:e6:e3:47:ed:70:56:58:c8:7d:7a:45:30:82:d2:eb:2d:5c:
         47:5f:f1:d1:65:71:8e:8e:0d:a9:b0:f0:57:2f:90:4d:3f:60:
         e4:11:70:82:dd:85:20:54:67:92:69:0d:cb:25:4b:09:3b:b1:
         00:3d:9d:15:27:04:2c:38:71:bb:73:e4:9e:ed:d6:1f:32:0c:
         b1:04:0f:dd:a3:dc:33:b7:fd:23:57:92:42:cf:14:ba:8c:f8:
         ef:c5:db:15:c9:f3:4f:49:90:6a:d2:1c:5f:28:d4:a2:c3:af:
         74:50:8e:12:01:e6:3e:54:d0:be:8e:0f:b6:ab:9f:9f:ef:4a:
         1b:0f:23:f3:d9:64:af:93:94:a4:4e:93:5d:bc:74:31:b6:7f:
         26:6d:d6:1b:20:fc:9a:e3:3d:f4:51:c0:0c:13:b3:27:08:ce:
         7e:28:00:a1:a9:34:c1:0e:fb:c9:2e:ab:3b:42:d9:c1:d5:5a:
         55:a3:7c:0b:2f:ea:af:cc:24:b7:80:bb:7a:fd:c9:9e:9f:72:
         78:90:fd:3a:a1:7e:28:eb:7f:b4:6a:bb:f8:02:8a:df:2a:69:
         16:fd:69:2a:0d:be:d7:de:35:70:26:ab:c2:9b:e0:bb:da:7e:
         e1:4b:2d:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:24 2024 by rpki-client on console-ams.rpki-client.org