Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/04a9cc2f-7e9c-3963-adff-24e9eba44e63.roa
File:                     04a9cc2f-7e9c-3963-adff-24e9eba44e63.roa (raw, json)
Hash identifier:          vliIhzqRHfFTgHXkrHAtg315o9bs0RysBjWGrDz0YOs=
Subject key identifier:   3A:99:EF:46:75:86:C3:90:9B:34:2D:7E:E6:D4:23:51:F2:1D:F7:D8
Certificate issuer:       /CN=f639f2ac-d645-4aae-9b08-738d5297eda9
Certificate serial:       010D0C9F43285845E72929A8F6FA6351174EC100
Authority key identifier: 90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/04a9cc2f-7e9c-3963-adff-24e9eba44e63.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     393949
IP address blocks:        192.195.251.0/24 maxlen: 24
                          192.67.222.0/24 maxlen: 24
                          2620:98:4000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:29:a8:f6:fa:63:51:17:4e:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f639f2ac-d645-4aae-9b08-738d5297eda9
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=172e3df2-b587-4dd4-a794-3cd14ad35ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:bf:81:cc:2f:55:85:92:a8:fe:a9:cd:99:
                    bc:49:06:21:51:fc:d2:03:69:b0:04:77:5a:3d:d9:
                    8c:77:74:47:a8:57:2b:56:9f:28:34:39:d8:ca:8a:
                    37:a3:de:e0:64:15:4f:22:b9:6d:75:37:e1:32:6d:
                    2c:f1:16:6c:32:b4:6c:0c:51:a3:5d:6e:1b:89:6e:
                    f0:46:e0:2c:cd:dc:5e:bc:57:06:90:37:dc:8e:4d:
                    19:dc:cb:9e:e4:b9:0a:b2:c2:f0:eb:b9:3f:66:96:
                    aa:4e:77:a3:3a:64:64:94:e7:63:8a:f9:f3:1a:86:
                    44:89:bc:fe:2c:6e:2c:de:7a:02:47:d5:f6:8e:d4:
                    76:b0:d1:1e:a6:da:3f:af:4f:cb:2b:68:91:b6:b3:
                    e8:d4:fb:65:f5:e2:09:52:42:99:8c:4c:bb:4d:09:
                    f8:0f:2b:f6:69:f2:c4:46:1f:af:a5:93:ef:c7:36:
                    fd:e5:a1:f4:7c:a8:88:b1:0b:10:68:9b:76:4e:47:
                    87:99:40:40:63:8d:e9:e9:0c:38:1a:78:ed:4f:df:
                    a4:45:de:4a:b1:fc:05:9a:12:20:53:ac:90:6e:a7:
                    5c:03:8f:bc:f8:32:9d:15:97:96:62:10:ad:a3:0e:
                    78:af:bf:f6:b6:b1:1b:52:9a:1a:25:b3:c1:d0:4e:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:EF:46:75:86:C3:90:9B:34:2D:7E:E6:D4:23:51:F2:1D:F7:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/04a9cc2f-7e9c-3963-adff-24e9eba44e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.crl

            X509v3 Authority Key Identifier:
                keyid:90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.222.0/24
                  192.195.251.0/24
                IPv6:
                  2620:98:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ef:cc:bc:0d:d3:0f:f9:e9:41:1f:a5:3f:93:42:0e:00:76:
         8c:cb:07:1e:fa:e3:ed:da:f8:fe:10:b7:d7:14:b4:b4:9b:62:
         22:b9:31:b2:00:5e:68:da:44:3e:bb:b1:29:a6:b1:fb:94:7b:
         6a:15:f9:82:5b:27:ac:ba:32:e2:3e:3f:fc:e4:7c:6e:66:a3:
         a5:ba:e3:ca:b2:18:25:d3:aa:5c:7d:c0:59:25:57:cd:f3:c9:
         3f:df:da:97:7a:30:52:c0:ed:ba:4c:75:85:9a:49:ae:3b:d8:
         c7:e5:be:91:20:2e:74:ab:7b:cb:d7:02:e2:0b:8b:3e:86:bc:
         87:ec:ab:c0:8e:02:73:e4:2d:fd:52:b5:cd:d3:d2:f4:ea:b9:
         92:a8:87:89:9f:25:cd:51:6b:b8:2e:2c:b3:0c:27:37:25:ee:
         be:6b:25:02:5f:2e:51:ef:b1:0c:78:69:43:ab:1e:6e:cb:26:
         9c:17:3a:d8:85:33:72:29:c3:fb:44:ab:d2:b0:42:9e:9c:0a:
         5e:8f:85:b0:ea:84:e3:5c:c3:8b:60:54:cd:5f:d9:21:43:ca:
         cd:e7:3a:56:cf:dd:4d:f6:bf:c9:42:2a:6d:17:6e:b0:e2:51:
         47:87:ac:eb:cd:7f:ad:31:9d:99:1c:24:03:9b:02:ff:61:aa:
         f4:1c:8e:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 18 15:37:59 2024 by rpki-client on console-fra.rpki-client.org