Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa
File:                     dc4b07de-971f-380d-8210-c351918b260b.roa (raw, json)
Hash identifier:          RydcIFo+29NnGNvYm2bPAPMH5E+7SS5bnVgisXXZ6K0=
Subject key identifier:   3C:73:FF:6C:2D:AC:2E:17:48:A0:36:ED:3D:09:3A:9C:5E:C4:C6:98
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F432858452AB7D9CD732C0ADE9DA18AC0
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     26512
IP address blocks:        199.119.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:d9:cd:73:2c:0a:de:9d:a1:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=bf247aa7-e6f5-499b-9ee4-c8baec284104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:bb:59:7a:43:3d:ab:7f:9d:ad:4a:8c:48:
                    e0:26:b2:fa:df:38:77:23:71:67:b9:5a:92:d6:3e:
                    1e:20:d1:83:55:1a:e3:59:91:b2:92:ee:fc:87:06:
                    3f:f7:ff:15:b1:43:ef:96:b5:76:41:0d:62:4b:a1:
                    37:e0:11:0b:de:13:cf:67:9b:a3:ec:5f:9c:2b:bc:
                    ce:a7:bb:53:b7:1d:6d:48:27:c2:e7:d0:01:b6:7b:
                    ec:19:53:fa:d4:2b:e1:46:f1:bb:04:e4:19:a3:87:
                    ff:97:11:dd:58:40:6b:a0:93:d2:73:d0:ae:41:63:
                    82:05:f3:c7:50:6a:e0:4c:7e:96:41:cb:86:8a:58:
                    55:43:23:93:bd:11:03:23:ac:a2:12:d5:92:db:8f:
                    74:bd:e4:db:bc:38:6a:92:a0:2a:f5:51:bd:80:da:
                    4d:b0:67:75:a4:71:5b:c0:34:12:e4:e4:4d:50:55:
                    36:b7:06:9d:ac:47:94:52:66:7c:e5:cd:f5:37:f9:
                    18:21:96:b4:57:32:0c:7c:2f:3b:a6:a0:3c:c7:69:
                    7d:ad:e1:38:a6:77:6a:64:66:11:94:8b:84:fc:a5:
                    45:3f:47:3b:19:54:fd:ad:86:2a:bf:ab:d2:c4:73:
                    15:7e:dd:15:ff:32:b8:36:b3:d9:ca:6a:7d:67:e2:
                    d1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:73:FF:6C:2D:AC:2E:17:48:A0:36:ED:3D:09:3A:9C:5E:C4:C6:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:61:85:fc:af:93:9f:a5:29:e9:b9:58:f4:df:ae:06:2b:
         09:88:03:4e:b3:1c:bd:f7:35:43:7c:79:a4:a2:e6:84:3e:a5:
         fa:42:72:47:0b:b4:84:5d:aa:34:96:89:5b:17:92:aa:37:bf:
         88:1a:91:3d:72:3d:46:39:0f:ee:2b:9a:3f:32:a3:12:47:d1:
         d5:d4:0a:dd:66:04:95:ee:3c:3d:da:8d:3c:35:d5:b6:93:fd:
         b2:20:15:91:64:26:eb:34:71:ad:6c:ad:e7:3a:a7:3e:f3:9f:
         6d:29:e4:15:1c:87:85:ad:0b:c2:14:e0:eb:c3:23:c4:a5:02:
         de:74:ad:a1:ff:6b:58:5d:48:b6:12:d6:89:e8:c0:7c:f6:03:
         56:d7:56:7d:92:d7:59:72:a5:fb:fc:06:f6:b8:13:de:b1:1f:
         7f:6d:06:71:d7:55:11:67:92:7b:2f:0c:24:b0:9f:a6:22:7a:
         04:d9:92:99:fc:05:56:a0:64:85:a5:3b:5c:f4:54:1f:6a:24:
         02:64:9c:69:2f:94:f4:74:ae:b7:00:de:0d:02:3b:ef:89:3d:
         74:eb:5f:cb:0b:81:54:2f:b3:f8:81:11:89:c8:46:f4:9c:02:
         80:27:7c:08:71:7f:f6:5c:3a:86:0b:c7:bc:68:6e:e0:72:84:
         6d:27:c1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:33:18 2024 by rpki-client on console-fra.rpki-client.org