Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/c4caf089-9ce2-34f3-a0d8-c5663d2a92ac.roa
File:                     c4caf089-9ce2-34f3-a0d8-c5663d2a92ac.roa (raw, json)
Hash identifier:          9sxhi07zpeu1lbTsw/hDoqV4b7m5VhklV6hAHhmr/yo=
Subject key identifier:   6B:2B:0E:D2:A7:FD:59:B6:8E:97:C6:61:51:9B:28:CB:90:BA:60:14
Certificate issuer:       /CN=e49f1cd9-302a-4377-9a40-b12c78b69f87
Certificate serial:       010D0C9F43285845347D4C1F9666F8806446A140
Authority key identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/c4caf089-9ce2-34f3-a0d8-c5663d2a92ac.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     13630
IP address blocks:        205.134.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4c:1f:96:66:f8:80:64:46:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49f1cd9-302a-4377-9a40-b12c78b69f87
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=bb694056-2e06-4cf6-9809-7c1c2a6af6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:76:d1:8c:5d:ad:42:78:09:48:4b:45:2a:
                    a9:bb:25:d5:92:35:40:45:cd:93:32:87:4a:3d:d6:
                    9a:74:9c:92:06:8c:39:0f:a0:69:57:46:e0:82:ce:
                    ba:e9:07:66:c8:dd:93:f2:41:17:54:e5:04:a6:d7:
                    d7:90:88:50:73:6a:53:3b:59:47:62:6c:56:2f:05:
                    9e:6a:20:6b:37:33:77:09:15:05:de:3a:07:c5:01:
                    d1:4e:fa:ad:a0:59:9e:32:b4:75:6d:0d:b4:5b:2f:
                    ca:75:00:ae:5e:d1:34:90:55:65:a1:7c:ea:f3:dc:
                    86:ba:e4:99:0b:8f:6c:7f:e5:9f:13:36:85:87:5a:
                    0a:c5:c0:be:0c:65:a0:42:c5:3e:6c:b8:52:74:51:
                    a4:93:5f:48:ed:4c:6b:30:4a:bd:82:bd:33:9f:b1:
                    3e:b4:91:24:d6:d4:bc:93:00:9e:ce:39:e4:63:bb:
                    39:6e:d8:ad:10:ba:e0:33:f7:d8:e3:64:43:f8:8d:
                    72:a0:c6:44:6a:92:5a:e2:c0:89:e6:07:62:ee:17:
                    3c:5b:a5:15:f8:be:fe:37:f0:94:ff:b9:77:b7:21:
                    ab:f4:5f:1c:9c:b6:c3:81:a4:7e:a5:11:b6:5f:72:
                    95:09:0e:13:3c:61:f2:a3:5b:cb:b6:f5:40:8b:d1:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2B:0E:D2:A7:FD:59:B6:8E:97:C6:61:51:9B:28:CB:90:BA:60:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/c4caf089-9ce2-34f3-a0d8-c5663d2a92ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl

            X509v3 Authority Key Identifier:
                keyid:E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b3:f3:dd:3c:74:27:fb:4c:95:96:c5:fe:bd:b7:18:fd:9d:
         39:99:c0:9a:f5:e3:03:31:be:5a:be:1c:31:6e:98:c8:c5:fb:
         da:34:a8:79:fd:6b:cc:23:b9:5d:bb:8c:aa:2f:f6:59:e9:c0:
         0f:3c:07:c9:70:52:61:c7:77:2f:3c:f2:49:b3:37:70:1d:9a:
         c5:33:08:51:34:45:15:e6:8c:fb:4c:86:68:d4:9e:8a:ec:0d:
         63:53:32:d5:88:ea:a0:00:81:0a:6e:80:85:6b:25:01:2f:61:
         91:15:69:bb:52:7b:20:54:ba:b3:a3:80:6c:40:13:bf:ac:bb:
         32:c7:27:9b:64:b7:11:4c:14:fa:e5:4c:b3:5f:8b:e6:72:84:
         1f:64:0b:68:e2:43:a6:ac:5f:44:9c:9d:b2:e0:40:65:95:c7:
         cc:96:43:2f:a5:5c:55:6d:48:ab:6f:36:7e:82:5f:b6:23:28:
         ce:48:99:79:95:89:6f:a1:a3:5e:d8:22:7e:29:51:a5:7c:a6:
         73:fa:a0:40:22:8e:1d:ec:9b:8d:db:88:24:fb:66:63:61:96:
         71:ba:3f:49:92:21:f7:9a:24:45:b0:fe:7e:70:8a:8d:7d:0e:
         04:59:f0:12:5d:f3:74:20:5f:d7:7c:1c:d8:05:7f:50:c9:8b:
         af:d4:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:11 2024 by rpki-client on console-fra.rpki-client.org