Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa
File:                     edce5252-1740-3c45-83d6-f6be110eccc7.roa (raw, json)
Hash identifier:          iIUODlSqIfdSpFNt4ZZGbZX+QfF2WFoCdjXPke1841Q=
Subject key identifier:   88:80:08:15:0D:FE:B1:52:80:71:01:47:2B:FF:D4:EE:97:4C:AC:72
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285845AC8A17E01753735ABAD4C420
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     397373
IP address blocks:        192.154.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:17:e0:17:53:73:5a:ba:d4:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=368f5f65-cebc-4977-b206-cb76f3c6039c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:6b:5c:cf:d5:49:4c:8e:fd:f9:09:b8:64:
                    0b:5f:30:5b:32:ad:e3:97:42:3e:fb:d3:ec:23:12:
                    ef:61:54:a9:44:a7:e7:49:3a:0a:17:1c:1f:b0:09:
                    bd:76:b2:ea:1d:69:35:fe:fa:1e:42:4d:c8:03:34:
                    17:7e:f0:61:46:f1:fe:36:29:7e:81:07:62:da:7e:
                    d6:ce:66:c4:e0:6b:d4:56:14:4f:5c:0d:36:e6:c6:
                    94:65:91:36:60:79:d1:57:b0:ed:9b:59:67:a5:d0:
                    68:2b:62:66:4a:b0:9d:63:8f:42:14:d3:5b:f3:1b:
                    78:5b:60:9d:04:d2:5b:2d:6d:70:45:ed:34:64:a7:
                    3a:49:77:e4:21:cd:dd:34:d5:d6:c3:49:07:6e:96:
                    39:53:cd:63:50:32:0f:b3:bf:7f:09:6d:95:25:bf:
                    06:50:65:3a:6b:d3:f0:b2:10:5d:82:c5:40:3d:cd:
                    38:ff:89:0a:c2:4d:2f:b1:b3:19:7c:9c:94:84:03:
                    a2:9f:95:ef:e7:4d:11:9e:19:a4:19:48:63:1e:fc:
                    03:ce:83:66:c9:9b:43:08:2a:89:5c:2a:26:ba:c6:
                    35:a8:f9:9d:73:88:15:81:d2:ad:71:14:ac:82:fb:
                    9a:43:7c:27:10:11:2b:8a:8d:7a:40:45:bc:ab:ad:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:08:15:0D:FE:B1:52:80:71:01:47:2B:FF:D4:EE:97:4C:AC:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:72:26:68:71:55:d7:ad:a6:f0:46:9c:d7:e8:63:e3:65:
         56:f1:68:08:8f:c0:69:6f:77:e7:98:e8:7b:41:a3:27:6b:78:
         4b:ea:de:07:d2:fc:70:c3:dd:f2:3f:61:d0:ce:23:d5:56:80:
         ca:37:f8:5d:50:67:8c:ed:58:39:cc:b6:42:a6:95:a7:45:2c:
         e4:a8:22:bb:90:d7:a0:5f:16:b0:bd:dd:20:3c:fb:25:96:76:
         8e:8d:71:29:b5:a4:5d:82:98:64:29:d8:41:d6:44:9b:93:fa:
         35:3f:1a:ba:a7:4e:a8:d0:5a:c9:f7:6f:fa:d0:12:fd:77:c1:
         c0:36:81:4c:74:6c:87:ca:5e:72:f4:62:2d:dd:91:82:98:8e:
         42:1b:59:e6:62:29:06:10:aa:ab:93:da:88:6f:dc:d3:d1:b4:
         fa:35:c7:e0:16:cb:6d:1d:84:e2:70:d6:64:13:76:c9:f2:33:
         6e:6a:f5:20:96:96:20:f9:00:ff:e4:bd:85:be:52:d2:88:df:
         1f:0f:b8:e3:f1:2f:f0:2d:84:1c:82:83:3d:ec:db:2b:9c:bf:
         b2:8b:5f:99:70:e3:55:84:4f:5a:f8:31:7f:d7:bf:08:0e:4e:
         a5:ca:ee:65:ef:5e:55:70:79:6b:87:30:cc:b6:46:9d:ed:d4:
         cd:ec:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:25 2024 by rpki-client on console-fra.rpki-client.org