Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/76190616-974e-396f-9255-4aa085cd8597.roa
File:                     76190616-974e-396f-9255-4aa085cd8597.roa (raw, json)
Hash identifier:          sok82a47ivkCbtfzzxKZ9G6bUHas0tRyeO1zii4G1sA=
Subject key identifier:   A4:93:FB:40:66:B2:7F:01:A0:31:D8:5E:35:C2:60:84:45:C7:5A:80
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584604793B33B6676352B43A2780
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/76190616-974e-396f-9255-4aa085cd8597.roa
Signing time:             Tue 28 May 2024 01:00:25 +0000
ROA not before:           Tue 28 May 2024 01:00:25 +0000
ROA not after:            Mon 26 Aug 2024 01:00:25 +0000
asID:                     1239
IP address blocks:        209.166.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:04:79:3b:33:b6:67:63:52:b4:3a:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: May 28 01:00:25 2024 GMT
            Not After : Aug 26 01:00:25 2024 GMT
        Subject: CN=39fc9514-c1c5-480a-a164-c6789f5179b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:9b:dc:04:a1:20:c4:3c:8a:59:ea:32:5b:
                    6c:ef:3e:f1:40:cb:41:51:fc:62:f8:59:d8:58:57:
                    bb:94:23:6e:09:b3:80:63:61:37:90:bf:49:69:2f:
                    e4:d7:dd:79:3f:1e:00:74:62:71:1a:d8:9b:e9:64:
                    45:08:81:52:87:cb:12:07:a3:46:1e:56:00:6f:2d:
                    94:b6:49:f6:ce:77:96:db:cc:40:a5:21:71:18:b3:
                    17:6d:23:0d:dd:d8:9a:b9:9a:08:75:e4:cc:f4:5c:
                    65:c5:05:49:b2:99:b6:df:75:d2:fc:0a:15:db:84:
                    80:e6:d1:15:28:94:23:55:0f:ee:4f:cd:46:e2:25:
                    cc:01:21:2c:af:39:8f:ea:16:72:8e:c9:08:b1:62:
                    39:01:f2:32:ed:97:27:57:76:fd:a3:68:5e:3b:04:
                    f9:5a:0a:e0:00:01:46:76:11:a1:57:e2:25:ab:31:
                    0b:1b:0f:7b:51:e6:90:bd:1d:2c:57:00:ae:e6:34:
                    05:62:de:35:9a:5e:77:59:2f:f9:b3:f8:cb:fc:6c:
                    af:9d:c7:1e:ca:bb:95:da:7c:0f:b0:68:6c:b8:84:
                    58:f2:fd:c4:5e:71:65:f1:73:ce:f1:7b:39:4d:7a:
                    a0:fb:35:74:bf:fa:7a:6d:c6:20:27:8f:a1:f0:7e:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:93:FB:40:66:B2:7F:01:A0:31:D8:5E:35:C2:60:84:45:C7:5A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/76190616-974e-396f-9255-4aa085cd8597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:94:42:af:a3:23:cd:6f:16:f1:16:78:09:13:cd:8b:5c:
         f0:c6:2b:dc:bf:88:59:7b:93:d3:75:54:9c:0f:5c:91:08:f6:
         24:81:bc:b6:36:e4:fb:07:c4:35:62:3e:bf:ed:e6:7e:ac:90:
         35:00:df:ef:c1:a6:e8:b4:1d:d2:89:78:e2:75:e4:9b:ea:b1:
         db:ae:68:47:30:88:da:24:4b:63:10:05:79:41:08:64:a7:24:
         20:fe:ef:e6:52:b0:70:e1:2f:5e:38:0a:a0:f0:81:8b:25:99:
         24:b1:46:94:62:4f:11:30:6e:bc:69:19:0a:e5:89:d2:09:a9:
         a4:2c:9c:20:d6:21:d4:40:2c:ae:99:e9:fc:21:78:53:98:67:
         b4:f7:f5:12:db:2e:23:3d:6b:21:4b:62:c7:7e:96:a9:27:99:
         0b:d3:2b:72:cf:79:c6:b7:08:60:ef:be:a7:e0:6b:8c:19:47:
         b5:6b:55:5e:a0:e6:60:c9:43:26:97:e2:93:99:92:af:ed:49:
         84:98:46:3e:5c:30:f9:0c:1c:a7:db:fc:13:3d:4e:8f:f2:db:
         00:5e:6e:46:e3:87:9d:27:57:a5:0b:8c:db:17:14:a6:22:db:
         1b:27:2e:15:5a:7f:56:e6:f8:63:b9:6e:61:41:8a:d4:78:3b:
         6a:38:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:35:52 2024 by rpki-client on console-fra.rpki-client.org