Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
File:                     a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa (raw, json)
Hash identifier:          Xm73xorqDDjyNH5DV4kuZ1DSujvvD903XOEwLE9DkIg=
Subject key identifier:   21:61:97:B8:09:55:B6:FD:F4:96:66:92:6E:EF:B0:B4:22:65:5E:9B
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844D2E52C0309098A3DE4EC1F00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
Signing time:             Thu 08 Feb 2024 14:00:33 +0000
ROA not before:           Thu 08 Feb 2024 14:00:33 +0000
ROA not after:            Wed 08 May 2024 13:00:33 +0000
asID:                     9009
IP address blocks:        158.115.234.0/23 maxlen: 23
                          158.115.233.0/24 maxlen: 24
                          158.115.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d2:e5:2c:03:09:09:8a:3d:e4:ec:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb  8 14:00:33 2024 GMT
            Not After : May  8 13:00:33 2024 GMT
        Subject: CN=3adef026-2fe8-433b-a112-0d4394e4e745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:4e:81:ed:f1:75:c6:e4:69:bf:0f:0b:1b:
                    0a:1f:1e:c8:f5:8f:c8:c5:0d:d4:31:57:1d:06:d6:
                    12:e1:a8:67:c6:17:ce:ce:b9:d1:c0:55:05:04:24:
                    c3:fd:e5:9c:83:4b:52:d2:71:b1:83:c8:50:ab:dd:
                    51:49:e3:e8:02:11:0c:7a:5b:b0:95:bf:65:b4:63:
                    e9:e8:1e:78:88:56:88:5c:af:6b:b7:54:68:6b:e0:
                    bc:f4:71:b8:08:f6:f0:82:ea:dc:75:40:d7:9e:26:
                    0b:15:6b:7b:48:8c:f8:d5:eb:4c:61:3b:dc:84:57:
                    9c:2b:33:5c:be:a3:c8:0c:a8:22:0e:66:7e:01:09:
                    1e:b0:f8:b4:99:1f:cc:ac:c6:75:9d:02:6e:15:1f:
                    4c:ed:a4:2a:bb:42:e7:84:04:91:69:59:9b:ab:00:
                    1f:f1:10:81:24:b0:5e:af:59:48:7e:cf:5c:94:9d:
                    60:41:e7:e0:3c:d3:c0:ed:80:d3:d0:50:df:95:cf:
                    80:ff:08:33:e9:6b:3b:84:1c:71:5f:53:7e:46:2b:
                    73:04:52:a5:95:38:4e:ee:7b:03:04:62:46:39:15:
                    bb:d5:34:6d:02:82:0e:14:30:fd:89:4a:74:1f:2a:
                    42:a2:4f:9a:f5:80:6c:13:cb:4f:25:a1:e5:f1:86:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:61:97:B8:09:55:B6:FD:F4:96:66:92:6E:EF:B0:B4:22:65:5E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:02:69:57:b0:bb:99:d9:ee:51:18:74:d8:c8:84:2c:c9:
         73:cf:20:a5:e2:4c:3d:c1:43:46:0a:4d:1e:3a:7f:79:2b:07:
         0d:e3:4b:f8:9b:c9:a6:aa:1d:c2:de:a2:cd:1f:b8:ff:02:f8:
         c8:b3:7e:1d:c1:d1:4c:82:31:ea:73:f6:6f:4c:35:f4:c3:77:
         36:45:47:6f:ce:74:3f:3d:2b:c6:11:6e:e5:72:75:22:83:92:
         10:82:0b:2e:18:2e:9c:6a:56:68:02:5f:de:ec:ab:e3:4e:66:
         66:1b:84:35:06:c1:3f:ca:36:ef:87:7e:60:d3:ea:f9:26:f9:
         9b:1b:e7:1b:c0:4a:7f:0c:1d:bb:5c:5f:fa:a7:ef:57:ef:85:
         75:99:05:32:81:9d:bf:5b:64:96:13:21:d6:c0:d6:76:74:04:
         09:f1:98:bb:57:23:bd:8a:5c:91:b5:44:39:1b:ed:73:f4:b7:
         a3:6d:d7:3e:f7:07:62:ef:18:e5:d2:0c:3b:90:a4:68:6a:b4:
         21:34:74:a6:d4:55:28:9c:c1:f5:3c:1d:46:26:a8:56:de:35:
         06:74:75:61:40:24:7c:77:11:eb:3b:64:dc:4d:99:43:8b:e3:
         df:ac:25:35:11:7f:8d:7b:e0:52:85:c0:79:f1:8e:c8:c7:5e:
         ac:d0:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:43:04 2024 by rpki-client on console-ams.rpki-client.org