Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa
File:                     c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa (raw, json)
Hash identifier:          sld1BgZ4YUtFQUDB4pdhxleuHJAdpdTN769jhiOP/s4=
Subject key identifier:   E0:C4:D9:E9:CA:0A:EB:5D:16:C1:D8:5B:66:2B:AD:90:12:1C:04:92
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F43285845C70E2546538BDCCC5B6A7CC0
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa
Signing time:             Mon 06 May 2024 01:00:24 +0000
ROA not before:           Mon 06 May 2024 01:00:24 +0000
ROA not after:            Sun 04 Aug 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        192.88.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c7:0e:25:46:53:8b:dc:cc:5b:6a:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: May  6 01:00:24 2024 GMT
            Not After : Aug  4 01:00:24 2024 GMT
        Subject: CN=4bfc320b-4cf4-48f0-b275-e5cb94fff626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:7e:28:42:e1:f6:54:87:a8:f8:77:bd:ac:
                    39:8a:14:05:e0:55:7c:53:4c:e0:c2:a8:2d:0e:b9:
                    09:47:38:cc:4b:f9:0c:3a:28:23:46:5b:47:4c:c9:
                    42:8b:f0:b9:0d:cf:ba:1a:11:ab:bb:0a:a3:3d:79:
                    d0:cb:92:0b:de:30:2e:dc:9c:cb:85:e3:44:85:2d:
                    4f:56:84:74:ce:f3:54:e4:61:07:2f:96:ca:fa:e7:
                    50:0e:83:a3:07:fc:a2:c0:90:a3:c7:2b:64:0f:db:
                    43:12:a3:cc:08:fa:1c:93:c4:d3:e3:84:15:49:dc:
                    94:ee:1a:08:69:2d:c3:d2:91:c3:8e:fb:74:65:58:
                    57:c1:db:15:1d:2e:bf:c9:38:e5:66:1a:7f:cb:60:
                    0c:56:bb:cf:2f:c3:c6:27:19:50:ca:5d:2f:b8:87:
                    79:3e:19:ea:85:e8:49:02:db:77:d8:f1:e2:be:68:
                    09:3e:f2:86:50:3d:c1:f8:32:ac:b9:c8:0f:7a:e1:
                    19:8b:75:08:c8:2e:21:77:a9:27:ab:d9:d4:0c:52:
                    f9:c7:b2:10:6b:0e:9a:4e:d7:a8:09:52:39:0d:1a:
                    52:14:12:02:da:ef:10:15:3e:b1:2f:7e:24:ad:f5:
                    09:fb:2b:44:7f:ce:03:aa:76:20:b5:22:8c:f0:92:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C4:D9:E9:CA:0A:EB:5D:16:C1:D8:5B:66:2B:AD:90:12:1C:04:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fb:4b:5e:46:27:2a:a3:5f:5a:f5:65:a7:c4:6b:e1:07:00:
         16:aa:7c:82:79:3d:d4:70:1b:e4:19:74:02:0f:c3:a4:9c:b9:
         6c:ef:c6:6c:f0:b3:78:4a:36:a8:15:68:0b:75:00:2a:13:3c:
         a4:0c:c4:99:29:01:87:9b:23:92:a6:a6:d7:00:34:b7:4c:85:
         3c:47:04:a1:6f:ad:cd:3e:55:16:68:41:50:62:bd:a4:95:59:
         53:98:5d:0d:be:98:9b:af:67:d5:e0:18:4d:f3:e1:6c:79:45:
         5a:ed:68:ef:de:54:d6:04:bf:9c:e4:73:74:71:40:af:70:d0:
         d6:9f:f1:8d:f7:4c:1e:44:18:52:9b:f3:7e:29:d7:00:6a:e2:
         66:1e:fb:95:34:b2:04:de:73:1d:0f:d0:ba:e9:5a:e1:28:e3:
         41:07:33:24:ab:6b:a9:7f:43:bc:c1:b9:88:f3:da:e2:b3:39:
         ca:c8:08:da:7b:c8:ba:2b:9c:fd:6e:84:17:e2:63:09:cc:99:
         00:f9:a9:94:a2:8e:f3:55:f3:7f:50:11:b4:62:74:21:1f:e4:
         e9:24:84:55:8c:a4:aa:9e:7e:51:93:3b:7c:28:5f:0c:c9:5e:
         64:59:8b:47:d7:05:8d:64:f3:d8:c9:9e:20:b5:62:a4:9f:05:
         95:68:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:21 2024 by rpki-client on console-fra.rpki-client.org