Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa
File:                     967eaad3-c11f-369f-9120-3854ace1ae5d.roa (raw, json)
Hash identifier:          AJchsHZTmgPWjoiqyEqjHb3jJD2fs7CKtibFRxoK7dI=
Subject key identifier:   73:15:B8:5B:07:C0:04:58:1B:06:5A:E8:B3:F2:FB:62:5C:A3:B2:9A
Certificate issuer:       /CN=145bac4b-d098-4846-b4b1-ac1761209cd4
Certificate serial:       010D0C9F432858457082FDAA873004EFE8C25400
Authority key identifier: AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     21681
IP address blocks:        192.86.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:fd:aa:87:30:04:ef:e8:c2:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145bac4b-d098-4846-b4b1-ac1761209cd4
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=9ebfaf3d-4341-4694-8f85-0c24a1fd2af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:4b:8d:18:f8:61:a0:4e:95:bf:a0:f9:cd:
                    5e:51:70:71:47:8d:5a:73:04:4f:bb:db:91:8e:58:
                    82:ec:28:5e:aa:4e:17:7a:a0:73:65:c4:0a:3d:04:
                    3d:cc:6c:36:03:8e:d3:5c:71:c1:2b:d8:1d:15:b7:
                    ce:02:f1:42:c1:5b:50:45:3b:b9:d5:c9:ed:aa:0b:
                    80:e6:8d:80:1f:ef:94:df:30:d1:36:7f:63:f5:26:
                    73:4b:a2:9a:87:b3:78:c1:b7:b6:f0:cf:3e:3c:c5:
                    33:f6:dc:c0:a3:2e:3b:bf:2b:15:f0:81:be:af:8a:
                    72:a9:5b:7e:21:2a:06:8f:22:a8:27:6f:d0:b5:46:
                    f5:cd:5d:c0:79:a6:98:91:67:f3:13:8b:96:61:db:
                    b7:ba:ec:d9:34:0a:e4:75:a3:3b:09:4d:3e:28:29:
                    56:60:b0:7f:44:44:63:51:20:05:a8:9c:47:bf:6d:
                    b8:8d:42:c6:31:df:2b:93:57:ee:fd:b8:00:8f:9e:
                    5c:42:dd:05:0f:83:57:17:b2:80:bb:d3:a6:31:d9:
                    f5:4b:b9:7d:33:64:89:07:63:4c:60:39:98:92:33:
                    d2:4c:5d:cd:5e:67:f0:e4:78:b4:71:fe:eb:af:61:
                    1d:6a:e9:a8:b0:90:37:5b:eb:96:ef:b1:91:53:55:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:B8:5B:07:C0:04:58:1B:06:5A:E8:B3:F2:FB:62:5C:A3:B2:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl

            X509v3 Authority Key Identifier:
                keyid:AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:fa:70:60:2d:8e:d9:6b:fd:d3:af:79:34:05:4b:cc:58:fe:
         cc:b2:80:f1:7f:a8:dc:66:3d:03:92:a7:16:08:44:d2:b0:05:
         84:e5:37:1e:a1:41:81:34:95:dd:a6:a5:59:cb:1d:16:5e:ab:
         aa:96:a4:88:80:3a:6e:fc:b6:c7:6a:a3:f4:7e:7d:8c:45:14:
         61:d7:15:07:4e:29:d5:f7:3f:8a:40:39:d0:08:ae:15:d9:13:
         5f:c8:d0:66:08:35:00:03:e9:be:a8:e5:a3:07:af:e2:77:9f:
         d0:ca:6a:27:60:ae:fc:e0:72:fb:b5:74:fa:44:99:d1:f8:48:
         e9:19:e5:86:31:b9:01:33:01:e1:55:26:6b:46:0f:cb:4f:8d:
         7d:f9:66:76:9d:dc:db:67:37:42:b7:58:44:9c:bd:b2:91:82:
         39:2d:09:f1:cc:ba:e7:f5:df:da:02:34:21:9d:95:ea:37:3b:
         3c:48:79:9c:10:2a:86:6f:ab:36:0e:ba:0a:e2:da:07:39:2c:
         24:a2:20:14:79:5f:61:c1:47:d3:fe:23:0a:bf:27:17:57:24:
         f8:1e:d7:68:ba:98:d2:07:cc:ab:c3:f3:f8:80:c8:9d:80:1f:
         1a:dd:16:ca:fb:39:92:26:99:e7:da:5f:b0:46:8c:c6:e6:b0:
         72:ef:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:10 2024 by rpki-client on console-ams.rpki-client.org