Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e17c1844-e436-3ae2-b266-1f64c0507c4b.roa
File:                     e17c1844-e436-3ae2-b266-1f64c0507c4b.roa (raw, json)
Hash identifier:          f/nNxyYyEf3m7Ob/OaerWwA8TzfOlzrY1Zu6b76h7TY=
Subject key identifier:   54:B3:64:CE:C9:F3:1A:7E:DB:79:A8:6A:12:79:B8:AA:31:2C:3A:24
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584531DB38939C73E6F1839BF380
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e17c1844-e436-3ae2-b266-1f64c0507c4b.roa
Signing time:             Wed 13 Mar 2024 14:22:23 +0000
ROA not before:           Wed 13 Mar 2024 14:22:23 +0000
ROA not after:            Tue 11 Jun 2024 14:22:23 +0000
asID:                     3738
IP address blocks:        192.250.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:db:38:93:9c:73:e6:f1:83:9b:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Mar 13 14:22:23 2024 GMT
            Not After : Jun 11 14:22:23 2024 GMT
        Subject: CN=af198d63-cee9-4191-8934-f5a2fbb9d6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:03:b3:a4:a9:41:68:29:98:3f:6c:0d:00:ec:
                    66:64:62:d2:fc:63:85:ec:9c:86:7c:eb:72:ed:a5:
                    d3:b2:56:e6:a7:a0:43:3d:04:2c:b5:e8:68:27:95:
                    63:60:69:45:d5:08:d3:9b:cf:fa:27:a7:ce:94:d0:
                    1c:45:c8:14:86:da:f4:3b:ee:79:4d:22:3e:96:d5:
                    36:d1:17:39:82:ef:e1:ab:30:cd:c4:d9:dc:79:ba:
                    45:b5:dd:7c:1b:58:34:9e:a7:c6:0e:78:d3:9e:03:
                    60:26:ce:49:eb:16:4e:e7:71:41:ec:62:7a:9b:fa:
                    d8:c1:7e:0e:b8:5b:3a:ee:2e:97:4c:78:c6:f6:e2:
                    4b:d8:14:75:9e:84:12:70:33:c5:f8:4b:45:18:4d:
                    cb:ee:8e:2b:a6:38:79:cc:7e:e1:b9:d8:a8:d8:ce:
                    16:50:05:41:a3:35:96:8a:11:27:e2:5b:85:75:28:
                    09:13:27:cb:1b:07:43:55:bb:1a:41:54:0b:98:9d:
                    56:c1:47:d7:54:66:cb:ad:75:2e:f6:a2:8f:74:e3:
                    8d:f2:8b:96:a2:66:55:51:ae:28:d2:45:98:c9:09:
                    22:6b:7b:9a:96:d2:83:5a:2c:f8:0d:aa:ca:ba:a4:
                    dc:bc:f0:11:bb:f5:f3:3a:f2:f7:8a:0d:ee:1f:d1:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:64:CE:C9:F3:1A:7E:DB:79:A8:6A:12:79:B8:AA:31:2C:3A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e17c1844-e436-3ae2-b266-1f64c0507c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:16:ec:ed:c0:d5:da:50:c5:6c:f9:32:69:ba:d5:e3:60:
         dc:0d:dd:ef:ea:23:02:b1:85:69:32:cf:34:06:9c:29:2d:56:
         34:1c:89:5f:71:4f:16:9f:75:fe:a3:ac:95:f0:ba:65:32:95:
         a3:17:93:3e:98:a8:6f:a0:ba:b3:8e:f7:c7:82:05:d7:c0:fd:
         e5:77:61:e5:3a:2d:3e:c2:00:39:6d:91:6a:60:9b:2a:5d:3b:
         41:88:11:8a:45:78:49:4d:ba:0f:83:a7:57:63:4a:5d:b3:74:
         7b:80:a5:81:43:09:b2:55:2b:41:d3:0a:a4:9f:15:0e:5d:5e:
         3e:90:1f:f9:5d:fc:28:02:4e:f9:8d:ff:2a:6b:51:64:59:ba:
         1d:eb:88:a6:87:1a:74:f2:6e:cd:ab:9e:8f:86:18:b6:18:0f:
         16:a6:11:d2:02:b0:97:f8:9c:5c:29:5f:aa:69:59:b2:99:f0:
         19:c7:5f:b8:1b:b0:2a:8e:7f:48:76:ac:33:8b:2a:bf:50:16:
         dc:fb:45:fe:d9:32:f3:11:fb:bb:38:03:fe:aa:3a:a8:cf:f6:
         f5:00:ec:92:8c:51:93:c6:00:6e:f5:ea:6c:dd:09:90:f8:f9:
         89:c3:c9:61:8b:d2:57:fd:6e:ba:2b:16:ad:e6:f6:a8:3d:75:
         ad:4f:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:04:34 2024 by rpki-client on console-ams.rpki-client.org