Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/7a773694-0120-39c7-bce2-9a843256701a.roa
File:                     7a773694-0120-39c7-bce2-9a843256701a.roa (raw, json)
Hash identifier:          r+qMbn3uhfolsbrfEKOoppQ88Gdo/R++hHXE0QDANis=
Subject key identifier:   23:7F:A3:66:51:F2:34:06:AF:0E:D9:AD:70:37:40:FF:56:83:5B:47
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F43285845BE2312AC4962A2A2681C5270
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/7a773694-0120-39c7-bce2-9a843256701a.roa
Signing time:             Thu 02 May 2024 20:20:20 +0000
ROA not before:           Thu 02 May 2024 20:20:20 +0000
ROA not after:            Wed 31 Jul 2024 20:20:20 +0000
asID:                     396982
IP address blocks:        151.193.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:23:12:ac:49:62:a2:a2:68:1c:52:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: May  2 20:20:20 2024 GMT
            Not After : Jul 31 20:20:20 2024 GMT
        Subject: CN=1d6778b0-c5da-4be1-8e5c-0a80eaa484a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:df:3f:49:14:3b:5b:db:42:65:2f:eb:33:
                    77:3e:31:c6:f8:78:bc:cf:53:01:d3:22:dc:2c:74:
                    84:99:95:a7:bc:e0:34:ca:a6:7e:7e:88:40:62:72:
                    47:09:2a:97:6d:ce:89:d5:ae:9e:8a:c6:59:a5:da:
                    ed:27:17:f5:0c:8b:4e:af:cf:50:81:7c:2d:f8:a1:
                    c3:5e:b1:db:06:78:3f:d0:34:12:65:74:74:ba:74:
                    de:e2:67:44:f7:b9:d3:74:b0:11:35:4a:e2:72:61:
                    d7:5f:b1:06:b6:73:9d:29:c2:c2:49:e7:06:d7:b1:
                    b1:b9:17:23:2e:16:8b:1f:6d:fe:a3:af:56:0e:b7:
                    07:d1:55:54:1a:93:94:6d:c8:a2:3b:55:45:20:6c:
                    2f:e1:7a:60:96:e6:a2:b7:0c:81:7a:f9:fe:67:3b:
                    c2:4d:9d:a4:14:b5:5d:a7:d2:43:07:a9:74:06:4e:
                    92:48:c6:42:b1:73:ca:7d:ac:44:e8:ae:8f:aa:6a:
                    85:ac:d9:f6:8d:71:9d:6b:02:16:0d:5b:81:06:c3:
                    54:09:60:e2:20:c7:db:b3:64:78:c7:d3:2a:52:eb:
                    ae:25:2d:6c:c7:1c:7d:4d:13:ff:1c:2b:da:25:3d:
                    1f:d4:56:02:5a:d6:f0:3a:0d:b9:62:81:39:03:2c:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7F:A3:66:51:F2:34:06:AF:0E:D9:AD:70:37:40:FF:56:83:5B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/7a773694-0120-39c7-bce2-9a843256701a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9c:6e:d3:43:7a:c2:72:4e:09:7e:3e:75:cb:52:9c:07:cb:
         13:c1:49:a0:b4:4a:c7:cb:52:27:94:18:24:cc:ea:4b:26:f7:
         62:ba:4c:db:36:ee:c5:4d:af:a0:00:1d:8f:a9:fe:93:ea:aa:
         52:4c:e4:86:ed:32:f0:43:16:61:86:3d:49:82:cc:a1:b2:38:
         83:ac:14:dd:cc:8d:5e:ee:7e:ea:ab:9e:0d:8e:8c:9b:20:6d:
         93:03:4a:9d:a2:7c:5c:d4:0e:78:6d:e5:83:83:c8:e2:1e:49:
         0f:5b:85:53:9f:57:a2:db:46:6a:a5:0f:04:84:01:9e:44:c1:
         a9:64:65:d4:9a:43:28:a0:26:0d:71:30:22:6d:77:12:19:fb:
         f1:86:69:44:3f:46:fa:0f:1a:a6:82:f6:e6:7f:36:30:0f:e4:
         20:07:8d:1b:ec:ff:3b:9f:78:5c:6b:7b:35:91:8c:9d:47:b6:
         e0:cc:09:ce:4a:9a:55:24:23:43:97:5a:8d:66:b7:31:d0:6b:
         89:5a:e7:36:2d:4a:52:11:eb:de:66:98:bc:c1:fe:d7:c8:26:
         5d:35:75:84:07:fd:79:c9:f0:e7:e9:b2:a3:1b:ac:34:58:f7:
         74:be:fd:c0:88:e5:75:1a:e4:4b:8e:d6:57:1d:10:52:8e:f1:
         a5:17:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:27:47 2024 by rpki-client on console-fra.rpki-client.org