Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/e286b671-27a4-3e29-ac43-265edb95c323.roa
File:                     e286b671-27a4-3e29-ac43-265edb95c323.roa (raw, json)
Hash identifier:          SEHcu+wPn0XmTiVFMw4/+Y+eSfn2pqfMbPcug5qhyXQ=
Subject key identifier:   73:4C:66:60:6B:93:35:A5:D1:A4:90:58:EE:F4:4D:E3:5B:96:D2:58
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F43285845A2ABA43E221315C759D9B5B0
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/e286b671-27a4-3e29-ac43-265edb95c323.roa
Signing time:             Tue 23 Apr 2024 00:12:52 +0000
ROA not before:           Tue 23 Apr 2024 00:12:52 +0000
ROA not after:            Mon 22 Jul 2024 00:12:52 +0000
asID:                     4185
IP address blocks:        192.133.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:ab:a4:3e:22:13:15:c7:59:d9:b5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Apr 23 00:12:52 2024 GMT
            Not After : Jul 22 00:12:52 2024 GMT
        Subject: CN=f0dd1d65-755c-48ff-b4c5-529defc22ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:e6:9f:64:6f:1b:39:b6:8b:29:35:aa:ab:
                    75:de:43:18:ae:a0:8e:5c:58:c0:a7:6a:49:19:3f:
                    0f:3b:0e:a6:b4:a3:98:ee:da:a8:f8:bf:90:8f:88:
                    bf:ff:d2:c2:26:c2:40:ea:54:21:86:dc:65:8a:9c:
                    68:0d:bb:53:46:a4:ac:15:5e:84:82:20:a1:18:4c:
                    a4:d6:ef:52:b1:57:35:c6:7c:78:d1:31:97:c6:8d:
                    3d:76:3d:a8:d1:7c:c2:ea:37:8c:ba:f0:8c:ce:28:
                    8f:69:0e:2e:5b:68:13:0b:50:89:9a:fb:93:5a:eb:
                    d5:f4:76:54:9a:2f:42:fb:2d:15:9c:3d:93:14:1a:
                    47:7e:c3:68:1c:85:d1:8a:a0:89:05:57:0a:e0:f9:
                    c8:27:63:83:04:67:00:73:3d:99:ff:2d:af:6d:6b:
                    99:bd:52:88:bf:04:bd:58:fc:28:04:f2:5b:27:5e:
                    12:04:b0:bf:f2:e2:8b:b5:b7:6f:5b:d2:ac:b1:0a:
                    a4:8c:11:d9:13:5d:21:ad:0d:1a:c2:94:39:15:10:
                    f0:d0:bb:b6:eb:a1:76:6d:4a:75:4b:54:ee:3a:45:
                    be:b4:d5:85:ab:0b:dc:f8:26:bd:a0:d5:71:61:aa:
                    ce:fe:89:f7:ad:0c:fa:ab:e9:51:9e:90:2a:c7:d9:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:66:60:6B:93:35:A5:D1:A4:90:58:EE:F4:4D:E3:5B:96:D2:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/e286b671-27a4-3e29-ac43-265edb95c323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5b:19:71:bb:19:7e:cf:9c:07:81:f5:f3:f4:39:54:6d:38:
         41:d6:11:ec:39:2b:ef:58:b6:ba:35:5c:2b:24:14:9c:39:90:
         bf:77:85:7e:1a:df:50:87:d1:38:90:2d:82:78:e2:33:2d:7b:
         cb:a5:48:96:76:54:d2:85:ab:f0:2c:ef:8d:22:e0:f0:bd:65:
         f6:f6:91:98:3b:02:69:d1:09:2b:ff:f4:fa:45:28:1e:fa:36:
         d7:e0:34:a0:b7:7b:1d:70:6e:d7:6b:16:aa:db:d3:71:c9:b6:
         19:02:bc:28:d6:73:af:2d:62:90:13:45:d9:0a:2f:66:b7:d7:
         d8:36:71:e7:f8:a5:d7:be:b3:21:f6:d7:14:58:ce:de:bb:65:
         f5:50:c4:59:35:98:6e:88:2b:65:c6:fb:2a:a6:77:d4:9a:9f:
         66:52:ff:92:2c:00:94:b5:d8:55:08:24:9f:4f:2c:b2:6f:6a:
         02:ec:53:3c:9a:9a:e2:56:58:c0:b5:b6:dd:e0:84:f2:a2:6b:
         f2:bb:3f:af:ad:71:58:b5:0f:f3:5e:8f:8f:72:50:53:5d:ed:
         94:01:7a:f7:02:88:ad:88:d0:ca:47:98:3e:e2:0b:bb:aa:ab:
         b2:69:60:0d:c7:0b:fe:99:d2:ea:bf:20:3c:98:d9:51:d6:b1:
         fd:ed:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:37:01 2024 by rpki-client on console-fra.rpki-client.org