Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/04142c16-ecbd-36d8-aab3-507b3504f8fc.roa
File:                     04142c16-ecbd-36d8-aab3-507b3504f8fc.roa (raw, json)
Hash identifier:          mkMsCtV7BFcZ9if6I+QG7PxUXg+C8bobrtZXNLuDtPE=
Subject key identifier:   BC:7C:B0:F3:75:BA:6E:9A:4B:5F:FF:AF:3D:0F:FA:8F:04:65:70:7A
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F432858458E67F3CCFE218A48D60238E0
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/04142c16-ecbd-36d8-aab3-507b3504f8fc.roa
Signing time:             Mon 15 Apr 2024 18:00:19 +0000
ROA not before:           Mon 15 Apr 2024 18:00:19 +0000
ROA not after:            Sun 14 Jul 2024 18:00:19 +0000
asID:                     212238
IP address blocks:        199.101.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8e:67:f3:cc:fe:21:8a:48:d6:02:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Apr 15 18:00:19 2024 GMT
            Not After : Jul 14 18:00:19 2024 GMT
        Subject: CN=edddf0df-26c3-4a85-948d-58c22acc0b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:2f:3a:fa:b9:78:00:1a:43:69:5d:61:fe:
                    30:8d:7c:6b:26:7a:af:dd:4a:4c:1d:35:72:a5:a0:
                    9b:0b:0e:bc:1f:ab:1b:c6:60:79:62:f0:f8:56:0a:
                    1a:8c:73:a2:71:14:3a:b9:c0:3a:39:14:61:41:03:
                    6b:68:cf:40:5d:f0:5a:ed:3b:47:4a:3d:5a:01:88:
                    fc:7c:0f:2a:c2:af:0b:05:96:0d:a3:01:b2:c9:64:
                    1a:90:5c:25:29:1d:75:ec:e4:ff:db:ca:6a:32:61:
                    07:1d:4b:da:2d:c3:58:9f:c7:6e:60:56:ea:63:82:
                    8c:2d:5c:aa:22:9e:79:8b:6f:ad:2d:01:40:a5:82:
                    92:4b:e8:f8:65:70:a8:f4:9e:74:ff:56:b7:d8:77:
                    7c:41:d3:e0:94:6b:ad:da:67:df:82:13:e7:68:df:
                    7f:d3:e4:a6:a9:6d:27:d9:c5:84:61:6a:1d:b4:74:
                    d4:25:e5:16:e2:01:39:4d:9b:ba:32:01:97:5b:00:
                    2f:79:bb:aa:41:71:47:bc:64:1f:ed:24:7b:42:29:
                    8e:d4:2a:19:13:ee:81:4c:cf:6a:3a:e0:d0:0d:5e:
                    5d:c1:ac:d4:16:ef:12:32:12:36:10:66:ae:75:2b:
                    3e:69:3a:0a:48:8f:73:61:62:80:4c:5d:8a:66:08:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7C:B0:F3:75:BA:6E:9A:4B:5F:FF:AF:3D:0F:FA:8F:04:65:70:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/04142c16-ecbd-36d8-aab3-507b3504f8fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:29:25:a0:48:e9:c0:0f:d1:c3:97:c6:f8:54:2b:e6:32:
         4d:46:dd:02:ed:3e:f2:0b:bc:f4:09:a5:12:63:60:e1:af:ee:
         82:2a:1f:76:75:f1:40:99:39:c5:b6:9d:bc:8c:f5:9c:b8:8c:
         1f:4c:d7:8d:e3:af:c0:35:b8:b5:9f:ea:ea:88:0d:e0:53:1e:
         ac:e7:3d:fd:46:dd:2b:0b:2c:6b:b1:b5:94:c2:5a:ea:56:a4:
         80:a4:fb:c0:b2:2a:19:0c:5d:0f:e7:0d:3f:1c:6f:43:56:b6:
         4d:3c:f7:c9:a4:3c:68:4d:23:90:42:58:28:8d:8b:f9:30:14:
         ce:46:b9:9b:69:5e:2e:cb:37:1b:07:30:71:8c:9b:de:60:67:
         60:25:f1:be:48:58:9b:cc:cf:c5:20:12:9b:a9:b2:68:52:e2:
         1a:b2:47:81:37:4c:18:7c:39:0c:95:da:71:03:9f:5b:46:e8:
         bc:cf:f9:99:a4:c2:da:e5:07:c6:d9:94:ab:ff:96:4f:cd:31:
         27:20:ad:f5:c5:d5:38:1e:f2:bc:25:89:ce:cb:d7:52:7b:94:
         fa:7b:b6:13:7e:56:f7:86:63:05:24:cd:b8:9a:19:34:97:c1:
         cb:cf:6f:a6:cf:aa:f7:1b:31:63:1f:d4:bd:35:62:b3:c9:c6:
         a4:f5:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:29:04 2024 by rpki-client on console-ams.rpki-client.org