Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/19352952-3470-322d-88eb-b17505846bdc.roa
File:                     19352952-3470-322d-88eb-b17505846bdc.roa (raw, json)
Hash identifier:          LnNGB/a2Sa7q7Xthc8cGTdSUe154Jf9VshFhrO5bz6A=
Subject key identifier:   04:6C:73:B3:FB:5C:7B:06:9A:E7:67:62:A0:C8:19:3E:C7:8B:89:62
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DBB09E4C7388133B36600
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/19352952-3470-322d-88eb-b17505846bdc.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        199.233.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bb:09:e4:c7:38:81:33:b3:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=aafcec36-bc46-43f8-bca5-c583ef8baf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:02:27:d2:92:4f:e3:9c:5c:64:c7:ee:2f:
                    83:93:42:2c:4c:4a:b7:7c:8d:4f:e3:25:bf:4d:77:
                    35:9a:c0:83:ba:63:f7:27:b0:7a:00:b6:a6:60:75:
                    7b:c7:df:71:3b:17:d0:ac:10:9e:64:ab:64:6d:79:
                    e5:33:05:cb:06:63:a4:97:47:24:50:ad:73:eb:76:
                    71:df:ba:f1:ae:0c:ed:b1:a4:76:4c:ff:8f:09:ab:
                    d7:a7:90:4c:bb:8d:01:04:b0:c4:48:f0:50:7c:56:
                    5b:c8:27:6e:c9:41:78:24:7b:ff:b0:5b:0e:1a:5a:
                    66:2d:94:5c:b3:97:c0:b2:a2:b4:83:69:1a:f1:6c:
                    0d:dc:51:bc:0e:37:bc:aa:d6:71:26:9f:52:b3:18:
                    74:9b:38:3c:b5:8d:38:8b:cc:f1:79:5d:07:2b:d8:
                    84:82:d3:0a:98:e7:d6:8d:50:e4:88:3a:92:f3:13:
                    c2:18:40:51:92:66:75:29:7a:f2:31:e6:aa:4d:0c:
                    14:ef:28:49:4a:f7:e5:6b:6f:94:b9:d9:00:33:06:
                    af:85:4f:81:5e:4f:1f:9e:e1:8e:45:43:cf:51:e5:
                    37:f4:cf:eb:4a:7f:fd:ab:07:4f:bd:04:0a:d3:7a:
                    83:6c:ed:1a:24:ba:5c:24:01:71:b2:ba:8d:81:3f:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6C:73:B3:FB:5C:7B:06:9A:E7:67:62:A0:C8:19:3E:C7:8B:89:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/19352952-3470-322d-88eb-b17505846bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:e9:f2:68:f9:bd:69:85:e0:ca:04:d7:7e:34:50:08:7e:
         df:ec:3d:e5:e9:af:04:2a:ff:89:4b:45:4e:83:c1:5c:8c:ac:
         04:28:54:e5:c4:93:47:bd:30:40:e7:76:b6:e7:e3:d8:6e:da:
         5c:a5:ce:bc:18:7d:c4:05:0b:52:98:5b:ab:f1:9f:2c:4c:ea:
         a9:a7:06:a6:c6:8a:3d:d7:fd:a3:77:57:62:7f:34:2f:f6:9e:
         45:59:19:7b:04:44:aa:93:e2:cb:56:b1:6d:39:a4:51:5a:1e:
         f8:2f:da:8c:37:f1:19:ba:48:b3:53:5c:2e:4b:f3:d2:22:d4:
         a2:8b:b3:6a:e7:61:94:a1:ea:19:04:de:d6:9c:ad:f3:20:9f:
         b9:e6:a4:31:09:7d:63:97:97:58:c0:26:c0:73:dc:19:3d:41:
         c1:b9:69:bb:57:ec:af:1e:dc:21:36:1b:ae:58:c7:38:65:20:
         e3:a5:0a:35:61:dd:b2:b9:ce:d2:9d:47:88:db:65:72:9f:ef:
         31:24:a5:9d:ba:34:8f:65:b1:27:db:51:d5:9b:7b:87:6d:58:
         2f:00:d1:5f:64:c2:8f:af:e9:77:5a:9b:62:56:4b:50:15:aa:
         23:2d:0a:fe:83:d4:86:77:47:ea:ee:48:b2:2c:32:84:ee:a0:
         29:d3:be:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:57:50 2024 by rpki-client on console-ams.rpki-client.org