Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
File:                     f4637f85-f045-3611-b433-908584a54b6e.roa (raw, json)
Hash identifier:          d82aVbkqx/cEcOpzjVjDdqWnDt0b4QO82C1WgRAheOc=
Subject key identifier:   18:51:24:82:69:06:75:8C:76:17:9D:75:2B:18:01:4A:9A:3A:0C:4C
Certificate issuer:       /CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
Certificate serial:       010D0C9F43285846EEFAB140CD14570342160600
Authority key identifier: 49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
Signing time:             Tue 20 Aug 2024 01:00:30 +0000
ROA not before:           Tue 20 Aug 2024 01:00:30 +0000
ROA not after:            Mon 18 Nov 2024 02:00:30 +0000
asID:                     40194
IP address blocks:        192.152.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ee:fa:b1:40:cd:14:57:03:42:16:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
        Validity
            Not Before: Aug 20 01:00:30 2024 GMT
            Not After : Nov 18 02:00:30 2024 GMT
        Subject: CN=a0367fd1-773a-4e23-9a73-30428fa021b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:99:d4:fd:fc:71:33:d7:6d:99:f1:23:f9:
                    99:85:8f:8e:7e:a8:24:ba:69:4e:e8:df:4e:0a:92:
                    1f:d2:8c:d9:55:66:e2:71:21:81:a6:92:79:8b:29:
                    c3:e9:a1:ca:0e:a8:a1:44:c5:82:75:d6:85:68:b5:
                    6a:de:76:76:44:81:0c:69:2b:8a:17:5f:67:c3:03:
                    b6:90:95:3d:0d:1c:d8:cc:64:04:2d:ad:7b:ce:c7:
                    65:29:04:80:3b:13:c3:4b:8e:37:89:36:36:bd:24:
                    e5:e8:a1:f9:c5:71:40:3d:34:73:d7:06:a5:83:7a:
                    07:55:01:d9:4c:e2:06:ff:32:90:f3:3e:43:f7:70:
                    74:b8:42:a0:3a:03:c9:56:e9:3f:20:a7:f3:e0:f3:
                    85:0d:c8:07:41:f7:b2:e0:31:bd:65:b6:85:0f:fb:
                    c7:c2:90:0d:eb:c7:16:c8:73:8d:33:4a:4b:cd:f2:
                    51:3b:29:a3:08:7b:ad:f8:bb:1e:7e:5d:14:81:96:
                    e5:f6:58:b9:04:1c:45:86:52:3e:03:ea:0b:68:9d:
                    39:1c:20:c4:05:a6:e7:75:e1:e9:6b:bf:02:f3:2e:
                    d9:b1:95:2d:80:67:ac:a1:77:10:4a:10:52:b1:ab:
                    ba:f6:3b:0d:8a:50:44:d9:71:07:59:ca:73:66:33:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:24:82:69:06:75:8C:76:17:9D:75:2B:18:01:4A:9A:3A:0C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl

            X509v3 Authority Key Identifier:
                keyid:49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:1e:61:56:b3:23:a2:88:08:79:81:24:b9:04:e4:a0:1e:
         fc:fa:3a:d4:fd:73:4e:9d:f8:20:9b:ff:32:80:85:9f:8a:8f:
         79:1e:3a:21:71:f7:52:21:6b:9c:dd:ff:fa:c8:41:07:60:c3:
         59:ab:19:84:ea:78:4f:90:96:52:da:b6:f0:58:2b:90:9c:ee:
         86:b6:e9:15:07:f3:e8:c7:24:99:00:f2:4a:9e:42:82:29:e0:
         9e:44:45:76:2a:80:bb:1e:b5:ff:6c:04:05:50:01:8d:72:1d:
         37:f3:01:60:96:0b:9b:df:c6:6f:40:3e:bc:cd:6b:d4:87:c4:
         d3:c6:75:dd:7a:aa:e3:96:42:90:eb:ed:a4:11:4f:8e:8f:a0:
         48:47:57:de:6d:c8:e5:e0:a0:8c:45:73:ce:6b:b5:38:18:8b:
         47:15:04:36:49:70:ed:93:e9:05:93:9e:10:6d:76:fb:3b:b8:
         2e:02:01:1c:ec:67:41:03:6b:e4:29:de:71:89:3e:0f:8c:6e:
         8c:5a:0e:4c:0a:ff:07:55:f1:88:55:32:67:a5:fa:5c:5c:10:
         21:d3:eb:4a:b5:8b:c9:9e:64:ec:6b:21:86:ff:e0:e6:71:81:
         9a:a6:f5:32:07:a4:bf:09:d9:c7:b9:64:85:8d:60:2b:33:7a:
         5a:ee:75:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:08 2024 by rpki-client on console-fra.rpki-client.org