Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa
File:                     5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa (raw, json)
Hash identifier:          B+rqVJqFIpJFPYAXXR5hY7t8UViVLK9o8//93lj7gic=
Subject key identifier:   33:9F:54:7F:10:59:33:52:07:08:4A:B1:E7:02:7A:11:97:8E:9C:6C
Certificate issuer:       /CN=e9f20d36-05ed-4189-8230-12eaed2b41c6
Certificate serial:       010D0C9F43285845A7502009B75BA5B190104480
Authority key identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa
Signing time:             Wed 24 Apr 2024 16:07:31 +0000
ROA not before:           Wed 24 Apr 2024 16:07:31 +0000
ROA not after:            Tue 23 Jul 2024 16:07:31 +0000
asID:                     72
IP address blocks:        192.58.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:50:20:09:b7:5b:a5:b1:90:10:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f20d36-05ed-4189-8230-12eaed2b41c6
        Validity
            Not Before: Apr 24 16:07:31 2024 GMT
            Not After : Jul 23 16:07:31 2024 GMT
        Subject: CN=e2bdc1c1-71ac-4476-b128-29c2423dde81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:ba:b4:ff:48:a7:12:8c:61:79:36:e4:28:
                    7d:80:a0:9e:01:1a:96:21:93:cd:35:1b:13:10:73:
                    da:74:f0:3a:0b:61:63:26:2d:94:0b:12:8f:30:d8:
                    32:48:b2:65:3c:fb:30:87:a3:12:41:16:85:98:76:
                    08:f4:17:29:5d:7e:77:54:1d:f1:cc:1e:ff:98:eb:
                    28:b3:66:f2:31:a3:75:27:e2:f2:ec:06:28:fc:b6:
                    02:92:f2:78:9c:32:2c:a4:a9:91:a1:2b:02:34:71:
                    c3:b9:84:73:32:65:81:de:0e:0e:92:41:cc:5f:e6:
                    79:5b:09:4b:4a:15:b4:81:16:e9:9d:7d:14:54:a4:
                    9d:ea:45:06:43:c8:5d:93:53:25:8a:ee:b3:43:28:
                    f7:42:87:60:b8:81:bf:cd:fe:05:70:c4:89:3c:67:
                    0a:80:7c:4b:2d:c3:51:87:61:59:1f:66:b7:27:ef:
                    99:ed:01:74:51:68:d0:46:91:87:3d:ae:42:6b:f5:
                    3e:79:32:c9:9d:15:8b:4e:b3:ae:36:f8:0d:fd:01:
                    d8:ce:35:c3:70:bd:b2:d6:49:4e:c7:29:cf:7b:03:
                    de:fe:8c:11:18:33:ba:4a:b9:63:99:d3:5a:99:13:
                    39:16:a7:c3:b7:27:f4:b1:81:5a:db:07:3a:16:98:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:54:7F:10:59:33:52:07:08:4A:B1:E7:02:7A:11:97:8E:9C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl

            X509v3 Authority Key Identifier:
                keyid:BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:d4:4a:42:95:48:43:a9:43:79:36:76:5e:0f:62:a4:c4:
         54:02:6b:e3:82:cd:c2:0c:3d:22:8f:95:25:b9:73:2e:91:3a:
         51:b1:19:5a:ae:49:7f:99:51:24:a6:28:a1:fd:b6:78:82:9e:
         4e:2f:4a:55:d2:5c:22:75:0f:c0:91:8e:78:eb:5c:59:02:d6:
         2b:ad:b3:52:ab:18:48:ae:3b:ed:87:71:2d:92:e8:46:15:83:
         3b:aa:5c:dd:7c:1d:a0:02:ab:9c:7f:b6:c4:5b:58:12:77:29:
         b8:fa:c1:66:2e:40:c3:7d:53:62:a7:a5:73:d4:44:d4:c1:97:
         b0:b0:ed:22:b4:6d:50:9d:5d:7e:f1:c7:1e:d4:42:a7:4d:52:
         3e:3c:e4:6c:86:fd:f2:03:ee:d9:f4:e3:ec:b6:29:76:69:58:
         6b:28:9e:b2:fc:c6:01:00:1d:b0:39:83:1b:e2:2e:8b:e6:c4:
         04:64:8c:5e:d3:e5:c4:5c:ec:33:f8:a1:15:3e:a2:4f:6f:e4:
         3a:e9:ab:69:34:5f:ec:75:bd:92:c2:1b:b4:47:41:f5:e2:59:
         a9:23:ae:47:68:ea:56:ad:cc:56:cd:4a:77:43:a4:f6:ce:6d:
         9e:91:f1:d7:da:92:75:cc:25:83:e9:bd:92:f2:2c:ff:a3:81:
         a8:32:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:45 2024 by rpki-client on console-ams.rpki-client.org