Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/ed6b1126-250f-33f9-a75a-557964e92852.roa
File:                     ed6b1126-250f-33f9-a75a-557964e92852.roa (raw, json)
Hash identifier:          jbLHNYDO73MVIkKcBiv6v+hmXL2LpW6+0lud+P+R8BM=
Subject key identifier:   15:0F:77:29:D0:A6:02:41:00:9A:CB:D0:FE:D2:50:5C:6A:B7:50:27
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F4328584585732AB33ACD7E4668093B00
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/ed6b1126-250f-33f9-a75a-557964e92852.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     7127
IP address blocks:        192.214.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2a:b3:3a:cd:7e:46:68:09:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=965b7149-dd25-40d3-8ce6-1e99ec26498f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:c6:84:24:4d:21:b9:08:23:57:a0:ec:4a:
                    ff:09:8c:2e:8f:6b:c9:c2:ad:7e:d8:56:73:bc:6d:
                    70:51:ac:0c:90:65:97:61:1a:ba:40:6b:90:b8:e0:
                    94:2d:7c:14:51:8a:79:cb:34:7c:87:aa:0b:06:10:
                    07:e4:e1:c7:28:8e:86:e8:81:bb:95:4a:65:13:64:
                    c7:7b:fe:ec:93:27:cd:fa:43:43:c2:15:94:36:c9:
                    62:58:59:23:b5:b2:56:8c:f7:43:5d:65:8f:a0:2a:
                    a1:ca:02:be:76:34:95:04:3c:6e:b0:c0:08:be:ca:
                    61:ce:59:2c:17:98:24:3e:b2:ea:2b:28:86:20:ad:
                    8b:42:f2:4d:ea:bf:f6:bc:d8:6a:d2:59:44:ad:67:
                    88:50:85:b5:22:88:64:a5:1f:6f:3c:81:e3:01:9d:
                    6a:29:ae:eb:92:3c:ca:d3:28:78:71:7e:2e:05:19:
                    6d:6b:a0:93:17:89:cd:fa:9d:39:4e:0e:89:67:9f:
                    a6:97:3b:76:ea:92:98:e0:60:aa:20:87:28:e2:e2:
                    c6:30:de:cf:36:6a:99:15:0f:9a:22:4a:1e:96:b0:
                    1a:c1:77:5f:f0:f4:ae:02:8e:fd:6e:ec:b9:db:49:
                    ac:3c:4f:66:16:56:f6:be:2b:cf:e8:e3:45:c6:54:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0F:77:29:D0:A6:02:41:00:9A:CB:D0:FE:D2:50:5C:6A:B7:50:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/ed6b1126-250f-33f9-a75a-557964e92852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.214.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:87:6f:0d:6f:d4:c6:d1:da:41:dc:2f:8f:b7:9e:67:39:ff:
         77:ca:11:15:1c:8c:24:a9:89:19:9d:56:bf:dc:ce:a9:50:da:
         b8:5a:36:1f:57:28:bb:36:1e:51:0f:09:28:23:a8:56:45:b7:
         31:21:b3:09:77:41:31:28:60:30:b5:ee:43:01:32:b5:1a:68:
         12:ff:27:89:19:fe:15:78:da:18:d0:f8:f2:5f:2c:b1:ed:a9:
         5f:83:a4:90:e7:12:a8:c0:f2:43:d0:27:18:d2:e1:24:fd:90:
         35:a8:a4:fc:94:ee:87:33:c3:4a:69:8a:94:b7:40:23:46:fd:
         16:d0:ae:66:ae:09:cb:d0:08:f0:c6:e7:9e:40:03:d3:7e:e4:
         4b:b7:e5:f7:5f:d4:af:e4:af:d7:fd:2e:b7:58:8f:be:99:5c:
         47:3b:8a:41:88:c5:d8:78:92:2e:48:f0:03:2a:7d:f9:05:b2:
         aa:30:59:43:ac:e0:4d:5e:c5:6c:03:5d:b1:bf:66:bd:20:2a:
         a4:6f:4d:6f:3d:e3:9c:3a:ca:82:d2:01:45:42:3d:04:22:c9:
         ef:91:2e:ad:d4:2f:8d:e7:99:ee:db:e0:ef:04:ec:90:16:2a:
         6f:e4:6c:52:f5:c4:05:4b:6c:99:ea:8e:db:3f:22:c3:2c:82:
         90:82:35:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:50:06 2024 by rpki-client on console-fra.rpki-client.org