Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa
File:                     c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa (raw, json)
Hash identifier:          cXmC2BQGSyj2LaeLov866SL8nfx+sx5STRQqqramhQE=
Subject key identifier:   BA:7B:CD:10:50:29:C2:34:37:A5:6D:DA:52:45:6E:3B:B5:78:7C:4D
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F432858452271FB859F05A0D6BCA6E148
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa
Signing time:             Fri 08 Mar 2024 01:53:13 +0000
ROA not before:           Fri 08 Mar 2024 01:53:13 +0000
ROA not after:            Thu 06 Jun 2024 00:53:13 +0000
asID:                     54994
IP address blocks:        157.185.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:71:fb:85:9f:05:a0:d6:bc:a6:e1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Mar  8 01:53:13 2024 GMT
            Not After : Jun  6 00:53:13 2024 GMT
        Subject: CN=79e879a2-6515-4b3e-b0ba-5e43824f1a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:e1:15:84:53:06:7e:db:f1:fe:5f:0c:6d:
                    c0:84:8f:4c:71:a6:a1:fe:e5:78:e5:f1:15:19:e1:
                    0e:8d:80:a9:43:5b:1a:0f:ea:5d:25:4f:73:be:ec:
                    33:48:70:d6:c1:03:01:f3:76:6d:57:83:3e:fb:ca:
                    58:57:e4:4f:33:2c:36:ee:d1:b5:f5:92:9b:b5:11:
                    53:77:02:7b:2b:42:c1:0c:df:3a:83:1f:ae:dc:36:
                    46:ca:e7:f5:e2:d3:7b:59:87:b8:b7:12:9f:96:62:
                    0d:dd:30:9d:de:9b:1f:fa:9a:fe:fa:e0:26:91:46:
                    f0:86:da:63:9f:4f:02:f8:eb:13:c0:a6:37:da:ac:
                    0e:73:b4:ca:df:b0:5e:1c:74:a4:8b:a2:aa:79:37:
                    f3:5d:ab:ef:c1:94:1e:5e:f8:c1:26:e0:11:60:cd:
                    71:bf:53:10:f3:78:d6:b8:27:2a:c3:c3:a4:43:e4:
                    27:2a:c9:20:3d:69:fd:11:e9:fd:6c:b6:a6:bd:13:
                    54:cf:47:ab:11:20:51:a2:4c:2b:27:9c:5c:b4:c0:
                    cc:3c:b2:47:f6:5a:4c:d2:49:d9:3d:e3:db:46:37:
                    b9:df:d5:ab:d2:f2:ea:4e:b8:69:76:09:72:42:81:
                    d1:0e:5f:09:f2:47:e9:37:bd:9d:69:d8:55:9b:a7:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7B:CD:10:50:29:C2:34:37:A5:6D:DA:52:45:6E:3B:B5:78:7C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:86:af:2c:d2:ef:d6:cb:c2:d3:40:32:cf:df:28:a8:4b:
         d5:42:d0:03:d5:c4:ea:f8:4c:0c:68:9e:d0:52:1a:80:67:37:
         d2:fa:56:ce:d6:40:69:7a:26:c9:47:f9:5c:e0:10:4d:36:de:
         57:ba:fd:e2:a2:b7:bd:3b:4d:4f:8f:74:a8:3c:81:fb:09:cf:
         93:c1:5b:64:de:35:40:e2:29:94:58:e4:e0:e9:4e:e9:aa:65:
         f9:2c:18:57:2c:ad:43:42:5e:b6:00:6f:0f:93:f2:a2:1d:b7:
         da:84:dd:cb:9e:81:31:bc:b7:cd:04:b4:4d:53:b9:7c:97:71:
         25:cb:02:4a:9c:e1:ee:43:96:27:4e:b3:ed:a3:0e:8f:92:41:
         1f:a5:bc:91:81:99:52:42:b5:e6:11:8b:86:2d:ce:4d:ed:76:
         f6:c4:10:52:51:dd:18:54:f2:bb:74:32:3c:b0:66:d7:9b:fb:
         05:78:1b:c1:25:0a:6a:b6:09:a2:db:08:07:28:49:f9:25:92:
         ae:62:bd:dc:a3:48:e5:de:8f:09:3f:d6:97:d0:0a:20:3b:8e:
         4b:d6:76:20:d3:dc:2a:0f:4e:e8:a6:f7:a6:55:24:13:43:60:
         44:fa:69:55:b0:7d:7c:86:b9:b5:79:63:e9:07:8e:11:c4:2f:
         2e:c8:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org