Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa
File:                     472f9308-f055-3dcd-b095-07eae00b6a13.roa (raw, json)
Hash identifier:          iqVAGEou/o1PRI53xhEkn1BiCuB9Vi551Uv/0FyWHKg=
Subject key identifier:   62:D1:A1:20:B1:81:0D:C7:8F:4F:81:BB:35:E3:ED:82:49:6E:B1:BB
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F4328584505257A5614A0C4640865AC00
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     396982
IP address blocks:        192.149.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:7a:56:14:a0:c4:64:08:65:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=7ee643c4-fa1c-4d31-90ae-bb680b557f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:59:0a:e9:50:10:87:fc:c1:83:df:e9:09:
                    e6:3e:82:5a:67:1e:3f:33:4b:f4:4a:b5:eb:e1:3a:
                    57:7d:eb:d1:41:ec:10:8e:26:cf:1e:db:6a:dd:4f:
                    01:42:7c:f4:21:38:b7:da:26:4d:95:09:e0:5a:96:
                    43:33:b2:31:42:b0:d1:70:ed:e1:86:ce:ed:2e:74:
                    35:99:75:04:96:31:9e:c8:40:ac:9d:4d:d5:ce:ee:
                    e3:1b:54:62:94:23:ea:c2:a5:bf:c8:d5:db:6f:1e:
                    75:5b:de:fa:df:8e:c5:37:2b:42:ff:b2:6a:5f:0f:
                    9d:96:f9:12:b9:f3:f6:58:ed:e0:ae:f8:02:a2:a9:
                    f6:38:20:df:79:e6:94:19:09:ca:5b:32:71:4d:37:
                    61:2f:5e:44:af:4d:59:10:a6:7c:7c:aa:35:ad:de:
                    49:62:39:39:2c:ca:03:63:be:a8:dc:5b:ef:46:13:
                    cb:e9:a7:7a:aa:71:9b:b8:43:50:90:92:9b:47:21:
                    5a:64:c8:1e:85:08:a0:76:96:a5:24:dc:91:68:f0:
                    8d:e2:a4:0f:ea:28:e0:f7:8f:33:f2:34:1d:21:ff:
                    93:59:8f:bf:cc:f5:ec:be:2a:79:a8:a4:a6:1a:15:
                    74:77:bd:dc:0b:0a:e0:15:45:ce:3c:13:90:56:41:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:A1:20:B1:81:0D:C7:8F:4F:81:BB:35:E3:ED:82:49:6E:B1:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:4d:bc:1f:1e:75:35:80:1c:cd:a3:54:31:90:7b:c2:f1:
         c5:2f:d8:b3:e2:7e:be:2d:84:67:a8:9c:de:64:3b:be:b5:17:
         31:a6:45:88:c4:71:dc:30:36:f5:2d:0f:24:50:77:a9:3f:45:
         d9:fa:37:1a:83:e0:7c:2e:90:93:e9:bb:e3:6e:62:f0:f3:bd:
         e9:52:17:1c:cf:06:5f:d4:39:00:2e:41:c1:22:ef:e1:eb:78:
         bc:57:23:6c:b8:aa:f8:22:83:9c:38:57:68:22:6f:f3:b4:6f:
         73:5e:c1:2d:fe:df:0d:cc:86:46:fa:71:11:c9:81:ea:7b:79:
         66:93:e9:e5:d3:af:f6:91:95:dc:6d:f2:7c:dc:fc:21:98:d0:
         f9:d5:79:c9:c6:52:45:44:ac:9d:d9:c1:d9:13:4c:12:7c:72:
         e3:a7:7c:1c:06:07:01:2c:98:65:f3:f5:89:a6:00:c6:7a:e0:
         b4:a5:c3:5e:4e:43:56:c9:10:d1:c8:a1:82:f2:43:a2:90:66:
         6d:99:ec:fa:b6:45:b9:f3:8e:c4:e6:67:b8:5d:10:b1:3e:c9:
         61:f1:9d:bf:9e:c0:88:6b:37:e3:45:d4:14:d7:2c:5b:a9:eb:
         55:73:e8:e3:0f:92:e8:4f:a0:ec:26:ca:00:fb:92:b6:fb:a0:
         24:88:26:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:45:55 2024 by rpki-client on console-ams.rpki-client.org