Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa
File:                     c993d273-204c-3af8-95dc-bc8d56df4008.roa (raw, json)
Hash identifier:          Tws3gF9jr04P5qgyg+0PLlxmULhzbeGETNpjkE/Ezfo=
Subject key identifier:   2A:E4:73:27:F6:85:FF:6E:B6:AB:33:84:C4:B5:5C:6E:E3:E6:7F:E3
Certificate issuer:       /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial:       010D0C9F432858457D1329A518CAE4BBC5F45740
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     395347
IP address blocks:        138.43.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:29:a5:18:ca:e4:bb:c5:f4:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=ec3fc612-5db0-48e9-b9cc-601930ae84c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f2:5f:d0:d4:b9:da:44:1c:c5:39:91:e0:87:
                    8e:84:49:80:1b:e4:7b:a4:d2:d0:9c:1d:05:e9:03:
                    9a:26:29:3c:06:6b:1f:e9:e7:d9:d8:c4:a5:13:2a:
                    b1:8c:dc:6e:cb:e0:d3:ec:98:e1:8e:10:40:95:12:
                    0d:86:40:64:65:78:4a:c4:f9:78:f1:56:56:2a:1a:
                    62:ff:9f:58:33:24:ed:66:6e:14:2d:63:8b:fd:e1:
                    e5:1b:74:f1:7c:d6:fe:35:5a:c2:ed:ee:5b:60:32:
                    2f:2c:d9:d2:b3:65:3c:4a:50:38:53:ae:9d:c1:78:
                    01:59:f3:47:7c:77:dd:7d:81:9b:a2:b9:4e:4e:64:
                    ac:88:f4:4f:23:6c:00:10:7b:67:e5:89:fd:03:cf:
                    0b:78:38:7f:95:61:53:c2:1e:98:6a:2a:89:e3:c6:
                    a6:7f:87:bc:d4:04:a7:ae:a3:d0:aa:6a:16:81:a2:
                    6e:87:6c:ad:e3:77:b5:99:35:a9:b3:58:92:dd:b4:
                    b5:d3:c5:91:24:97:bd:14:dc:11:1e:eb:25:ee:38:
                    91:37:a0:e2:75:58:5f:d5:9a:2c:fc:15:58:40:da:
                    58:2f:52:e7:1a:9d:ef:e1:a9:04:eb:62:7a:64:02:
                    2b:3c:f6:88:b3:f4:08:cf:74:80:b3:bc:54:dd:6e:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E4:73:27:F6:85:FF:6E:B6:AB:33:84:C4:B5:5C:6E:E3:E6:7F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl

            X509v3 Authority Key Identifier:
                keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:15:20:55:40:27:03:06:d8:0d:cb:52:6c:27:47:bc:47:
         8d:d7:9d:24:16:2e:3f:d7:67:64:ac:4e:82:74:5b:59:f8:cd:
         3d:39:17:8a:3c:80:13:d9:7c:32:19:11:25:92:e1:48:90:e1:
         57:cd:db:2c:27:91:93:ca:27:b5:d6:05:32:ed:a4:b6:19:0d:
         04:74:96:eb:62:80:66:79:8a:79:4e:09:a6:f6:53:1b:7d:ee:
         da:76:e6:c5:f6:be:73:4c:27:20:aa:ae:ed:e4:25:06:c2:02:
         db:6f:ed:35:52:8c:91:b0:f2:39:fd:79:b6:56:a0:84:4d:1e:
         35:71:e9:f7:d9:4a:b2:aa:b6:e9:e7:5e:26:30:c9:0a:4f:4e:
         06:f1:6a:a0:68:ce:f0:51:63:7e:07:19:ef:a1:1d:a6:14:d4:
         ca:20:b3:c0:e2:1e:01:ed:bf:c6:02:8b:2c:75:77:ea:36:5b:
         a7:65:7f:49:12:7d:3c:02:bd:64:39:ef:49:bd:b4:cc:14:d5:
         b2:8f:7e:8d:3d:bf:ff:5a:3d:83:ac:d4:c1:83:5a:4b:3d:98:
         94:22:de:41:6a:5c:2d:4c:1c:1c:e8:f4:b1:80:06:25:49:2a:
         f2:f9:66:fe:cc:df:38:c1:3f:5e:f2:39:ac:cd:77:a1:e5:d6:
         d8:41:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:47 2024 by rpki-client on console-fra.rpki-client.org