Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/e408dee3-c038-3b93-b489-a688428531c6.roa
File:                     e408dee3-c038-3b93-b489-a688428531c6.roa (raw, json)
Hash identifier:          btxHWm8zTYMw+2KZHzw5Hbh32g5+tRXoSqc3LRylcso=
Subject key identifier:   F2:44:5C:08:81:CE:E9:F9:B2:44:3B:F5:45:F5:36:AE:2B:35:8F:C4
Certificate issuer:       /CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Certificate serial:       010D0C9F43285845BD48E1EF43510A6818EB2A00
Authority key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/e408dee3-c038-3b93-b489-a688428531c6.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        203.96.184.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e1:ef:43:51:0a:68:18:eb:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=112d98e9-de64-48e6-82a7-de59d23b9188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:23:bd:eb:f3:0a:cf:ab:0a:5d:97:ab:d7:
                    7d:4d:92:2a:2d:7d:8a:38:c3:7f:10:8a:3b:5f:34:
                    1d:69:47:06:b0:8d:31:f0:d5:70:2b:56:a9:16:34:
                    0b:35:93:6f:06:20:44:53:22:ea:d8:1f:7f:82:96:
                    d9:28:31:96:5e:d2:f6:fd:e1:ce:8a:fc:6b:9f:17:
                    d8:de:35:b6:75:06:d2:5c:05:96:53:24:6b:a0:ba:
                    7c:b6:40:f1:c6:85:2b:6d:ee:9e:5d:bf:7c:c5:20:
                    79:da:58:9c:f3:17:84:1a:da:ee:70:8c:86:20:fd:
                    74:96:a1:d7:0e:06:2d:13:0b:cd:51:24:13:bf:c4:
                    c5:38:64:f2:a6:3f:4a:b6:6e:69:c9:db:e2:13:19:
                    51:48:b2:94:8d:72:38:8c:72:09:df:7f:1e:22:90:
                    26:ad:29:9a:35:cb:32:2a:b9:b7:13:54:44:56:fc:
                    f6:77:d0:1b:5d:15:dd:cb:7f:a3:bf:6b:09:38:e0:
                    f7:15:a1:98:c1:c4:36:2b:3a:3a:47:d1:8e:fd:38:
                    e5:39:2f:77:a7:d7:e4:9b:85:b0:c6:a1:25:dc:5e:
                    be:ca:1d:47:89:41:02:ab:ef:85:4e:71:ba:67:47:
                    de:56:29:0e:b1:54:b0:31:9d:3f:2c:61:5c:a5:90:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:44:5C:08:81:CE:E9:F9:B2:44:3B:F5:45:F5:36:AE:2B:35:8F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/e408dee3-c038-3b93-b489-a688428531c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl

            X509v3 Authority Key Identifier:
                keyid:42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:80:b3:a0:35:4a:3b:ef:39:25:31:52:fc:b8:7f:c3:b1:9c:
         2c:13:72:c3:61:89:98:3c:b2:db:19:d3:de:75:69:74:e4:a1:
         69:eb:b8:93:1a:a0:06:5d:9f:2c:c5:eb:0a:5a:dc:f3:7b:ee:
         f5:3b:74:56:f6:fc:04:6f:69:bb:26:ff:74:50:b8:5b:ab:4f:
         2a:23:b5:1f:a8:c5:20:1d:a7:24:ea:de:81:b6:7a:19:f1:ee:
         4d:16:c9:60:f6:ac:6d:79:77:95:cb:14:ba:fd:b9:c1:67:f1:
         18:1f:af:75:c9:a7:f8:e0:5b:4c:37:f8:1a:e2:e7:6e:fa:e9:
         bc:7b:16:bb:cf:fc:9a:18:02:6d:f9:ac:b2:f4:0a:2c:35:78:
         68:41:9b:9f:a0:c8:a2:d9:8c:74:a9:08:ac:fb:da:bf:05:62:
         3d:e7:1a:92:17:9f:33:53:cd:b0:8c:e5:cd:45:55:05:f8:a7:
         34:57:75:9d:ab:11:19:03:c5:5e:b6:77:0f:df:be:fe:f2:30:
         4d:36:3f:75:04:b8:e0:a5:7a:c5:3e:7f:28:12:b7:e7:6c:fa:
         9c:43:00:20:d8:f9:e6:24:09:fe:5f:bf:b1:e4:fd:19:04:60:
         87:10:06:b9:86:b8:f9:45:79:3d:0d:cc:c5:67:f3:ae:1b:3a:
         d5:25:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:35:47 2024 by rpki-client on console-fra.rpki-client.org